Recuperação de dados

remove imagem jpg menor 320w

for x in `find -name \*.jpg`; do tam=$(identify -format "%[fx:w]" $x); if [ $tam -le 320 ] ; then echo $x removido; rm -rf $x; fi done;

sudo dd if=/dev/sdc/ of=pendrive.raw

sudo foremost -t all -i pendrive.raw -o recuperados

TestDisk Foremost Ext3grep Extundelete Photorec scalpel

LINUX: $ tar zxvf foremost-xx.tar.gz $ cd foremost-xx $ make $ make install

OSX: $ tar zxvf foremost-xx.tar.gz $ cd foremost-xx $ make mac $ make macinstall

sudo foremost -t pdf,jpg -T -v -Q -o /Users/acidx/Desktop/RECOVERY /dev/disk1

sudo scalpel /dev/disk1 sudo scalpel disk.img

foremost -t jpeg -i /dev/sda1

sudo foremost -v -T -i /dev/disk1/ -o /Users/Noktec/Desktop/ForemostOutput/ -t all

http://www.cgsecurity.org/wiki/TestDisk_PT

foremost -t all -i data.iso

sudo apt-get install foremost

sudo foremost -t rar -i /dev/sda1 -T

sudo apt-get install scalpel

sudo ntfsundelete /dev/sdb1 –u –m arq http://linux.die.net/man/8/sfdisk

http://www.hardware.com.br/dicas/recuperar-arquivos-excluidos.html

Distribuições

• http://www.deftlinux.net/
• http://www.sysresccd.org/Main_Page
• http://www.caine-live.net/
• http://clonezilla.org/