electricsurfer47
Active Member
177 messages
joined Jun 2018
I used to mess around with PhotoRec quite a bit back in the day. It’s open-source, works on Linux and Windows and stuff, but man, it’s a little clunky because there isn't really a proper interface. You basically just have to follow whatever instructions pop up in the command prompt.
The absolute most important thing here is to stop using that drive immediately. If you've got Windows running on it, honestly, just pull the plug from the wall so the OS doesn't try to write any background files while it's shutting down.
Either yank the drive out of the machine entirely or hook up a different drive with its own operating system—like booting from a thumb drive—so you can run the app from there. The whole point is to make sure that specific drive stays untouched.
When you delete something, you've gotta realize that the attributes, the folders, and even the filenames are gone for good. The software is basically scanning bit by bit and sorting things by file type. Because of that, you absolutely cannot save the recovered files onto the same drive you're scanning; you need a separate destination.
It’ll save them in a weird format—I don't remember exactly since it's been a while, but I think it’s something like vol1.mp3, vol2.mp3, vol3.mp3, and so on. You'll end up having to rename everything manually to get back to what they were originally called.
See, when you hit delete, the files aren't actually wiped out instantly. They just get marked as "available space." But the metadata—the names, the folder structures, those file attributes—that's permanently gone because that info lived in the partition table, like FAT32 or NTFS. The actual data is still sitting there in the background until some other file comes along and overwrites it.