Introduction:

Accidentally deleting files from a pen drive is a common occurrence for many computer users. However, recovering those deleted files can be quite challenging, especially in a Linux environment. Fortunately, there are several ways to recover deleted files on Linux systems. In this article, we will explore eight different methods to help you retrieve your lost files.

1. TestDisk

TestDisk is a powerful open-source tool designed to recover lost partitions and undelete files on different file systems, including FAT, NTFS, and ext2/ext3/ext4. Simply install TestDisk using your package manager and run it on the pen drive using the command line. You can follow TestDisk’s step-by-step instructions to undelete the desired files.

2. Photorec

Photorec is another excellent open-source recovery tool that works side by side with TestDisk. It specializes in file recovery from various storage devices and supports a wide range of file formats. Install Photorec using your package manager and run it from the terminal, following its comprehensive instructions to recover your deleted files.

3. Extundelete

Extundelete is specifically designed for ext2, ext3, and ext4 file systems used by most Linux distributions. It can quickly recover deleted files from an unmounted partition of your pen drive. To use this tool, install it using your package manager and run it with administrator privileges from the terminal.

4. Foremost

Foremost is another useful file recovery tool for Linux that works by analyzing any storage media’s raw data to find and recover the deleted files. Install Foremost with your package manager and run it on your pen drive via command line, specifying the types of files you wish to recover.

5. Scalpel

Scalpel is an advanced file carving tool that allows you to recover deleted data by scanning the raw blocks of a pen drive. It works with numerous file formats and can be customized to suit your recovery requirements. Install Scalpel via your package manager and configure its text-based configuration file to specify the file types you want to recover.

6. Undelete

Undelete is a simple command-line tool that utilizes your file system’s journaling feature to recover deleted files on ext3 and ext4 file systems. Install Undelete using your package manager, unmount the affected pen drive, and run Undelete via terminal, specifying the target directory for recovered files.

7. ddrescue

ddrescue is a data recovery tool that can copy data from one file or block device to another. While it doesn’t recover deleted files directly, it can create an image of your pen drive, which you can use with other recovery tools to find lost files. Install ddrescue with your package manager, create an image of your pen drive, and use other recovery tools to retrieve deleted files from the image.

8. Manual recovery using a hex editor

If all else fails, you can use a hex editor such as GHex or Hex Fiend to analyze the raw data on your pen drive manually. This method is quite advanced and time-consuming but can be useful in certain cases where other tools may not work. Open your pen drive using a hex editor, search for the deleted files’ signatures, and extract them manually.

Conclusion:

Recovering deleted files from a pen drive in Linux is not always an easy task, but there are several tools available that can help you get your lost data back. Try out these eight methods outlined above and choose the best option based on your specific needs and expertise level. Always remember to back up important data regularly to minimize the risk of losing files in the future.