安装
配置好yum源，直接使用yum
yum install testdisk -y 安装好之后直接运行testdisk或者testdisk /dev/sdx进入如下界面,选择create进行日志文件创建
Christophe GRENIER <[email protected]>
http://www.cgsecurity.org
TestDisk is free data recovery software designed to help recover lost
partitions and/or make non-booting disks bootable again when these symptoms
are caused by faulty software, certain types of viruses or human error.
It can also be used to repair some filesystem errors.
Information gathered during TestDisk use can be recorded for later
review. If you choose to create the text file, testdisk.log , it
will contain TestDisk options, technical information and various
outputs; including any folder/file names TestDisk was used to find and
list onscreen.
Use arrow keys to select, then press Enter key:
>[ Create ] Create a new log file
[ Append ] Append information to log file
[ No Log ] Don't record anything`
分区恢复
- 选择
proceed，进入下一界面
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <[email protected]>
http://www.cgsecurity.org
Disk /dev/hda - 150 GB / 139 GiB - INTEL SSDSCKJB150G7
Please select the partition table type, press Enter when done.
[Intel ] Intel/PC partition
[EFI GPT] EFI GPT partition map (Mac i386, some x86_64...)
[Humax ] Humax partition table
[Mac ] Apple partition map
[None ] Non partitioned media
[Sun ] Sun Solaris partition
[XBox ] XBox partition
[Return ] Return to disk selection
- 根据磁盘情况选择分区表类型
- 选择analyse进行分析
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-r5p1y15s-1572071903317)(C:\Users\zhanghuigui\AppData\Roaming\Typora\typora-user-images\1551323674723.png)] - 选择quick search开始进行查找分区信息
在搜索过程中testdisk找到了两个分区，则可以执行如下操作
- 高闪亮这个分区，使用
p来打印改分区目录和文件 - 按enter继续
- 选择
deep search或者quit或者write如果想要继续搜索分区，则选择deep search,否则保存现有分区write后quit - 恢复分区表
如果所有得分区都被列出，当且仅当在这种情况下在write处按enter键
NTFS boot扇区恢复
- boot sector的一分区被破坏，ntfs的引导扇区被破坏，但是它的备份引导扇区还是有效的，而且他们之间还有一定的差异
- 复制备份扇区的内容来覆盖引导扇区。选择Bakup BS,输入 Enter生效
- 当Boot sector 和它的backup状态都是OK的，那么ntfs的boot sector 已经被成功恢复
- 输入 Enter 离开
恢复删除的文件
参考如下文章
- files and directory from FAT12, FAT16 and FAT32 filesystem
- files from ext2 filesystem
- files from NTFS partition since version 6.11