EzDevInfo.com

Recovering Excel documents that were closed without saving

Can I ensure that if I mistakenly close a Microsoft Excel document without saving the latest version, that I can recover some of the work I've done?

I'm using Excel 2003.

Why is the file deleted not actually deleted from the hard drive?

From an article on file recovery I read, that when a file is deleted on your computer, only a pointer to the file is deleted and the space occupied by the file is marked as free to use. Is the only reason for this to recover "deleted" files or are there any other reasons why the space occupied isn't actually deleted (bits set to zero)?

How to restore a previous version of file in Notepad++

I would like to restore a previous version of file that has been saved. My computer has crushed during work on one of the Files in Notepad++. When I started it again it went blank and few days of my work are basically gone. Is there a way to restore it?

How can I generate a list of files from a list of sectors?

I've had a hard disk failure and managed to rescue some data from the disk (1TB) with GNU's ddrescue. The last 800GB of the disk were perfect, no single error, but in the first 200GB there were almost 14000 errors (badblocks) spread across the area. ddrescue creates a logfile that describes where the badblocks are.

ddrescues command line params:

ddrescue /dev/sdb /dev/sdd /mnt/sdc1/sdb.log -r -1 -f -d -v

The logfile looks like this:

#      pos        size  status
0x00000000  0x1C08CE00  +
0x1C08CE00  0x00000200  -
0x1C08D000  0x011E6800  +
0x1D273800  0x00000200  -
0x1D273A00  0x005EC000  +
0x1D85FA00  0x00000200  -
...         ...         ...

The plus (+) means contiguous good space, the minus (-) unreadable space; position and size are in hexadecimal. Striping the lines ending in '+' I have a list whith badblock positions, but I need a way to correlate this badblocks to files on the File System, which is, by the way, NTFS.

I know that I can use something like DiskExplorer to do this manually, but it would be the hell with 14000 sectors. So, there is a more or less automatic and elegant way of doing this ?

Recovering a word file (Select the encoding that makes your document readable)

My girlfriend requested me to recover a word file which is her 2 months of work :(, and this is her thesis for graduation.

It shows the "Select the encoding that makes your document readable" screen when I tried to open it, I tried 2 recovery tools but didn't work.

File can be downloaded from the below link.

http://s3.dosya.tc/server3/bmu4bi/glava.doc.html

I kindly request your help.

*The history of the issue*** she said she was copy pasting from other files while creating this file(she copy pasted from a pdf too). 2 days ago she opened the file in company pc and worked on it. Wrote 2 pages and saved. Next morning she could not open it. it is possible that an error occured when saving. the computer she worked freezes sometimes , when she was working there was a file in usb she plug out and in it and continue to work. then saved.

How to recover files from linux ext4 harddrive

Just rm -rf *'d home/me/ directory... tried extundelete, didn't recover more than 10% of data.. trying scalpel, taking forever..

Anyone know of a sure fire way to recover data from ext4?

How to recover deleted files in Mac OS X?

Is it possible to recover my deleted files in Mac OS X (after I emptied the trash also)? In Windows I can recover the deleted files using file recovery software. What options are available in Mac OS X?

Get rid of "Resource Busy" message on Mac OS X

I am trying to repair a lost HSF+ partition table an iMac by running the i command inside of sudo pdisk /dev/rdisk1. Once I try running the i command, I get an error message saying that the resource is busy:

pdisk: can't open file '/dev/rdisk1' for writing (Resource busy)

I get the same result when using /dev/disk1, /dev/rdisk2, and /dev/disk2.

I also tried running sudo gpt /dev/(r)disk(1-3). Interestingly enough, the I only get a result from /dev/rdisk3:

So, I try to see what is using the resource by running sudo lsof /dev/rdisk1, as well as sudo lsof /dev/disk1. Nothing shows up:

I've also tried unmounting the device by running sudo umount /dev/disk1 as well as sudo umount /dev/rdisk1. I get a message saying that the device is not currently mounted:

Here's a list of all of the disks connected to the computer, found by running sudo DiskUtil list:

/dev/disk0 - The disk of the computer that the iMac is connected to.

/dev/disk1 - The HDD of the iMac.

/dev/disk2 - The SSD of the iMac.

/dev/disk3 - I don't know what this is. I would assume it is the combined HDD and SSD of the iMac.

/dev/disk4 - An external hard drive.

/dev/disk5 - I have no clue what this is either. Maybe utilities for /dev/disk4?

The iMac has a fusion drive, and /dev/disk1 is the HDD. I've tried with the SSD, /dev/disk2, but I get the same result.

I have the iMac plugged into another computer via thunderbolt, and by holding t when the iMac started up, the Macintosh HD showed up as an external device on the other computer.

How could I get rid of this message? I've tried restarting both the iMac and the computer that it is connected to.

Why are the bottom half of my images gray?

My brother in law took some pictures for me of my daughter after she was born.

When I open up the pictures or look at the previews, they all look like this (with the bottom half gray):

At first I thought that the images were just corrupted, but after playing around with them I noticed something odd.

If I right click on the image and select rotate clockwise (or counter clockwise), I can see the whole image for a second. Like this:

But after a second the thumbnail looks like this:

If it can access the full image for a second, is there a chance I can get the full image restored? Or somehow save it off? (These pictures are non-recoverable otherwise.)

How to undelete files on btrfs partition?

How do I undelete (recover) a deleted file on a btrfs partition?

I have not taken a snapshot yet, so I can't use that feature. I know there are some tools for other Linux file systems, but google has not turned up anything specific to btrfs. I came across one vague mention that btrfs includes an undelete tool, but I can't find it. Before trying tools for another file system, I'm asking here.

More info:

• The (two) deleted files were deleted by a remote rsync command gone wrong.
• These were small plain text files.
• I know the names of the files.
• I might be able to remember some strings in the files.
• The disk is a regular HDD, but it is large (2TB).
• I'm running Kubuntu 12.04 (beta2) with all latest updates.
• I have not written any new data to the partition the files were deleted from.
• I don't have a snapshot or a backup of these files. (The last backup is just a few hours older than these files.)
• Strangely, a COW file system seems to have fewer file undelete options than ext3/4...

Read data from old hard drive Seagate ST-1239A

I received an old hard drive from which I need to read the data. I connect it using an AT-Interface to USB connector. (I tried two different ones with the same results). I guess it is about 210-211 MB and from the early nineties.

It is recognized as a hard drive. Windows 8.1 suggests that I "initialize" it, but I guess then all data would be lost. In Ubuntu it shows up as /dev/sdd but without partitions. In hardinfo I can see a storage device called "94354-230"

If I do sudo parted --list it lists the other disks in the computer and then

Error: /dev/sdd: unrecognized disk label

If I try sudo gpart sdd the result is:

**** Fatal error: cannot get sector size on dev(sdd).

How can I read the data from this disk? What software or hardware or command line do I need to do it?

More text from the hard drive case is:

Seagate
Model ST-1239A

SWIFT
Model 94354-230

920007-004

How to get files off broken Windows 7 machine onto Ubuntu 12.04 (desktop) machine?

My wife has (had) a Windows 7 laptop (Toshiba Satellite with SATA HD), and last night one of our dogs jumped on it and completely broke the LCD screen. She needs to get some files off of the hard drive ASAP for a presentation she was putting together. I have an Ubuntu 12.04 desktop, and was told that I might be able to use an external enclosure HD like this one, but not quite sure how.

So I ask:

1. Is this enclosure HD the best solution? Why couldn't I use a flash drive?
2. How do I use the external enclosure to get data off of her hard drive?
3. How do I get the files from the external enclosure device to my Ubuntu machine?

Thanks in advance!

Recovering images after formatted HDD & new OS install

Not sure if this is correct place to ask my question but I thought I could get best answers here. So as the topic says, I've problem with recovering some images from a formatted hard drive. HDD was formatted using recovery console in Windows 7 boot disk and utily I used was Diskpart. Commands I entered were:

diskpart
list disk
Select disk 0
clean
convert mbr
create partition primary
select partition 1
format fs=ntfs quick

After this I reinstalled Windows 7. I know it is possible to retrieve some data from memory if you haven't written new data to disk. I also know that it is highly recommend to backup everything before format, but mistakes happen even to best of us. I already tried to retrieve photos with a freeware program called iCare Format Recovery v5.0 with no great success, it did found many files and even some working photos, but most of those were so small (like thumbnails) that they got no use. Most of files it found, were corrupted and showed up like the cryptographic text when I tried to preview them.

HDD is 465GB in size and with Win 7 and few programs installed on it only takes 26GB of data, so there is still 439GB's of free space left. I thought there might be small chance that the photos are not overwritten? Is there anything I can do or am I doomed? Maybe you can recommend some programs I could give a try?

Any help is greatly appreciated! Thanks in advance.

Is there a good, free way to fix broken/corrupt .wmv files?

I've recovered some files from an hdd that weren't supposed to be deleted in the first place, but they have seeking problems/crash the players. Since they have the right size, I'm thinking it might be a problem of corrupt index/header, so I'm trying to find a way to fix them. It's easy to find examples on how to fix corrupt .avi files with mencoder, but .wmv seems trickier.

Also, I realize there might not be a way to fix these files, but I figure I might as well as try. As far as players go, I've tried opening it with vlc/mplayer/windows media player.

I can use anything on Windows XP/7 and Ubuntu, as long as it's free. Since the files are 200mb+ and there are quite a few, I don't think trial software would work.

Is there a utility for comparing file contents with the extension?

I'm looking for a utility (either for Linux or Windows) which can verify that file contents seem to match the extension. This is for catching badly corrupted files.

I'm on the verge of writing a little bash script which will just run "file" on everything, but I don't want to figure out what "file" returns for a all of the properly-formatted file types that I'm going to encounter.

Background: A friend recently accidentally erased their Windows user folder (yup... Desktop, registry, My Docs, the whole thing...). I used an aggressive unerase utility to recover as much as I could. This particular utility recovers multiple copies of the same file for some reason (ie, "Letter.doc", "Letter(1).doc", "Letter(2).doc", etc...). Some of these files will contain random junk, some will be a valid document, and may of them will be the same document.

So, I've used fdupes and a perl script to nuke all of the duplicates, but now I want to separate the ones which look like they could be the original file from the ones which are probably not. I can't believe I'm the first person who's needed to do this...