Skip to main content

Timeline for How may I recover a lost pdf file?

Current License: CC BY-SA 4.0

21 events
when toggle format what by license comment
S Jan 29, 2020 at 6:32 history edited Archemar CC BY-SA 4.0
wikify (edit summary must be ...
S Jan 29, 2020 at 6:32 history suggested Martin Schröder CC BY-SA 4.0
wikify (edit summary must be ...
Jan 28, 2020 at 21:25 review Suggested edits
S Jan 29, 2020 at 6:32
Jan 27, 2020 at 12:04 comment added Tim we moved to chat.stackexchange.com/rooms/103752
Jan 27, 2020 at 0:09 comment added Tim "Only users nominated by the room owner may talk here"
Jan 26, 2020 at 23:58 comment added NetIceCat chat.stackexchange.com/rooms/info/103751/…
Jan 26, 2020 at 23:51 comment added NetIceCat Ok, I'm back I'll open a chat window and walk you through it
Jan 26, 2020 at 23:33 comment added Tim Do I have to umount the filesystem that contains the lost file before using using testdisk and phtorec? (My laptop doesn't recognize my bootable flash drive, so I haven't figured out how to umount my /home filesystem)
Jan 26, 2020 at 23:29 comment added Tim If you could let me know how you use testdisk, given the original pathname of the lost file, the time window of the deletion and the type of the file (pdf). That would be great
Jan 26, 2020 at 23:27 comment added NetIceCat 1) photorec is not just for photos, but all types of files. However, it again tends to pull from .dd and other image files or partitions. 2) testdisk on the other hand is primarily designed for scanning and repairing of partitions but it allows for remarkable recovery of deleted files as well. If you would like I can walk you throughyour issue with testdisk , just give me 5 minutes to finish eating and we can move to chat in the meantime make sure you have testdisk installed etc.
Jan 26, 2020 at 23:27 comment added Tim Could you elaborate how you used "testdisk/photorec which in your case may be easier when dealing with the known path" and "When I just tested it, testdisk crushed foremost in terms of locating a specific deleted file"? Can they recover files only in a given pathname?
Jan 26, 2020 at 23:06 comment added Tim Thanks for update. Do you have some links for recommended usage of testdisk and photorec? Do I have to umount the filesystem that contains the lost file before using them? Is photorec only for recovering image files not pdf files?
Jan 26, 2020 at 22:36 history edited NetIceCat CC BY-SA 4.0
added 612 characters in body
Jan 26, 2020 at 22:29 history edited NetIceCat CC BY-SA 4.0
added 612 characters in body
Jan 26, 2020 at 21:41 comment added Tim Thanks. (1) I am running it and it will take a long time to create all the files, and I manually run pdfgrep to search among the directory. I was wondering how to automatically run pdfgrep once a new file is created by foremost, or delete a file if it doesn't contain the specific string? (I now store the recovered files in /tmp under my root partition which has limited unused space. (2) I am also trying ext3grep and have some questions. I'd appreciate if you could consider unix.stackexchange.com/questions/564231/…
Jan 26, 2020 at 21:17 comment added NetIceCat actually if you know some specific part/excerpt of the pdf in question then you can run foremost and then for every new pdf file found in the directory specified with -o you can use pdftotextand then grep for some specific word
Jan 26, 2020 at 21:13 comment added NetIceCat 1) Yes, no need to unmount it but it is always better. 2) no, there is no time indexing as far as I know 3) i have only used it either on partitions or .dd files of partitions. I am not sure if you can actually use it on for example ~/Downloads/* because foremost scans blocks and looks for the particular headers and footers 4) it recovers ALL pdf files, because it is meant and often used for damaged partitions where files may be inaccessible but not "deleted" per se. If you know the size of the pdf then you can run a secondary script on the -o` directory.
Jan 26, 2020 at 21:00 comment added Tim (4) does it recover all the pdf files including those that are not deleted, or just recover deleted pdf files?
Jan 26, 2020 at 20:56 comment added Tim (3) does -i specify the full pathname of the directory which contained the lost file? Or has to be the partition that contained the lost file, which is /dev/sda4 in my case?
Jan 26, 2020 at 20:39 comment added Tim Thanks. (1) If I don't unmount the partition (my /home partition) or remount it readonly, can I run foremost? Is the risk only that some processes may write to the partition? Will foremost write to the partition? (2) If I know the time window in which the file became lost, can I specify that to foremost?
Jan 26, 2020 at 20:19 history answered NetIceCat CC BY-SA 4.0