Custom Search

How To Retrieve Removed Files On Ext3 Hard Drive

The Linux operating system, an Open Source flag bearer is getting more and more popular because of a wide array of applications like Office suite, Drawing applications and much more. We don’t have to install additional software to do the daily Office work, DTP (Desktop Publishing), Technical Drawings etc. In other words, we can customize the operating system options at the time of install as per our preference.

The Ext3 is a popular file system used with the Linux operating system. We generally face data loss in Linux due to system files corruption, user error, or malicious software. We generally loose data in multi user environment in Linux where the files generally get deleted to make disk space or increase disk performance.

We can not recover files manually from an Ext3 file system based Linux hard drive. For ensuring that Ext3 could securely resume unlink after the crash, it zeros out block pointers in inode. Then only option you have is to “grep” for the parts of file, which have been removed.

Grep is command line based text search tool in Linux operating system. It searches for the files or standard inputs globally for the lines matching to given expression and retrieves them.

However, it is not essentially true that all files still remain there. This is less probable, since files have to be retrieved from the journal. On top of that, Meta data of file system is less logically related to the real data so that complex algorithms are required to find them back.

Every time the file is accessed, the Access Time gets changed and the inode is written to the hard drive with 32 other indoes, which reside in the same block. When this happens, copy of that particular block is written to journal. Thus, if your volume is not so large, and if you have recently accessed the files, which you wish to recover, you may be able to retrieve the block pointers from journal.

Although, this method works in a number of data loss situations, but can not guarantee full recovery in all possible scenarios of data loss in Ext3 file system. This tool comes with some limitations like:

It can recover only recently deleted files. If you have mounted the file system after data loss, it will not work.

If the file system is corrupted or there is any other issue with hard drive data structure, you will not get desired results.

It can not recover larger files.

Unfortunately, in all above situations, grep can not perform Linux data recovery and thus you need to find a third party Linux recovery software to get your data back.

Linux recovery software are sophisticated tools, which are designed to systematically scan you entire hard drive and extract all data from it. Linux data recovery software are generally very easy to use and thus not demand any sound or prior technical knowledge.

Stellar Phoenix Data Recovery Linux is the best ever Linux recovery tool and offers comprehensive Linux recovery, it supports all Linux file systems including Ext2, Ext3 and ReiserFS. With its intuitive user interface, we can have trouble free Linux data recovery for all Linux operating system distributions.

By: Allen Sood

Article Directory: http://www.articledashboard.com

Allen Sood a student of Mass Communication doing research on data recovery software. He is also a freelancer for www.stellarinfo.com

© 2005-2011 Article Dashboard