Then you will be presented with the all the hardisks you currently have in the machine. And you will be able to see the logfile named 'testdisk.log' after you are done with your recovery. The above menu only asks whether you need logging for whatever you do in testdisk? its better to select the default option as it will create the log file and start logging. Now open testdisk by just typing the command testdisk from console and you will be presented with a menu as below. So now you can do just an yum install as ~]# yum install testdisk So enable rpm forge repo from the below url. You can also download the rpm from or sites like that and install it with rpm command, but it will be a tedius method as dependancy issues may arise. So inorder to install testdisk in linux, you need to have rpmforge yum repo enabled. We have used linux machine for this tutorial(the same steps are to be followed in windows after downloading the testdisk tool for windows) How to install testdisk in linux? Most of the tools mentioned above are available as free for use. Partition Find and Mount 2.31(used for recovering lost partition) the algorithms these tools use to recover the data, are beyond the scope of this blog post to explain it here.Ĥ.

There are a lot number of tools out there in the market which are free and very powerful in the job that they do, to recover data. This is the reason why tools like shred overwrites each file location, by junk data number of times, so as that data becomes impossible to recover. Which means the earlier you try to recover the deleted file, there is a good chance of getting that recovered in its entirety.

The data will remain intact in the same exact location in hard disk even after deleting it, untill something else is overwritten there. Now there is one more point that needs to be understood very clearly here.

In Linx you can say that its inode, and reference to the filename is deleted(read my post on inode and file deletion) but the data is still there. When a file gets deleted the operating system never removes the data from the hard disk, it just removes the link to access that file, and keep that space as unused.But still the data of your file is there in that exact location where it was. So what happens when you delete a file in Linux or any operating system out there? Let us try to understand how data recovery possible in any machine?

Testdisk recover lost partition