Recovering/Retriving Data From Deleted Partition Using TestDisk

In this post, I'll show you how to recover data from a deleted partition on the hard disk. Recently I was formatting my computer and accidently I cleaned the complete disk using Diskpart utility so my all partitions were deleted and the complete hard disk was made into 500GB single unallocated space. So to recover the data on the hard disk I used a free and open source(blog on OpenSource) data recovery utility named Testdisk. This is a small software which is easy to use and powerful to recover the data. Now let's see how to use it:
1. Download Testdisk from here.
2. Unzip it, open the terminal and cd to testdisk-7.0/ folder.
3. Now type the command
    > sudo ./testdisk on Mac OS (sudo is must because it requires root privileges)
    > sudo ./testdisk_static on Ubuntu.

after this tesdisk will start and show something like below.
4. Select create and press enter.(use up and down arrow key to move between options and enter key to select)
Now I am selecting my 8GB USB drive Disk /dev/rdisk2 - 7761 MB / 7401 MiB (RO)
5. Select Proceed and press enter.
If it asked you to select continue so select it and press enter.
6. Select Intel as it is detected by default and again press enter.
7. Select Analyse again press enter.
8. Select Quick Search again press enter.
Now it has found your lost partition(s) successfully highlighted in green color. Sometimes you will get nothing. So don't afraid just select Deeper Search.
9. Now press P to list the files in the lost partition(s). Use up and down arrow key to move among the listed files and press c to copy them. Use left and right arrow keys to move in and out of the directory in the recovered partiton(s). After pressing c it will take you to your computers testdisk directory to paste the file. So again press c to paste it. There you can change the destination directory by using left and right arrow keys.
10. Use Esc key to come back.
Press enter to continue and then it will ask you for deeper search so do it if you haven't found your lost partiton(s) before
Do deeper search if you want(deeper search takes time, but it's very useful)
11. Finally select write and press enter. Enter Y for confirmation and press enter. That's it you are done.

Please Share it if you liked

Apple MacBook Air Core i5 5th Gen - (8 GB/128 GB SSD/Mac OS Sierra) A1466 (13.3 inch, SIlver, 1.35 kg)


Post a Comment

Popular posts from this blog

"Remotely Bypass" Pattern Lock Of Android Device By Google

WinHex...Data Recovery and Forensics Tool

Crack Gmail and LinkedIn Account Using Brute Force Attack With Simple Python Script

Learn How To Decompile an APK File And Add Some Of Our Own Code To That APK. A Demo Of Decompiling Twitter APK To Get Twitter Username & Passwoed

Complete guide to learn Ethical Hacking