How to undelete big file in NTFS? [duplicate]
Some points to note.
Large files are usually deleted completely (recycle bin is not in the path),
so, an Undelete is out of the question.Your steps would then typically be towards Recovery of the file from deleted and yet unused areas of your disk.
Since, your disk is external I am assuming it is not used for storing other dynamic files.
If you start using the disk (edit existing files or write new files) you will start walking over the deleted areas which contains your huge file.
Effectively, permanently loosing any data that the tools discussed here will try to recover.That means, you have some chance of recovery along the lines discussed here.
But, be wary, with 6-8 GB worth of data, you will typically not get all of it (since this file is very likely to be fragmented).How was the file created in the first place?
If it was created slowly (like log files are appended to) it is likely to be very fragmented.Is it worth recovering this file partially?
Because, your probability of complete file recovery is inversely proportional to the number of fragments it is broken into.-
Now, this might sound extreme, but if you are going to try different things to recover your large file from that external drive, and you are ready to invest in a second drive of the same size, I recommend you image that drive before starting recovery work on it. That way, you can try recovering your file from a copy of that image with different techniques you learn over time.
- You might want to read this DataRecovery page at Ubuntu documentation
I was able to restore 4Gb file using PhotoRec (from testdisk-6.12 package) and custom signature for it. Initially I had investigated and tried a lot of "undelete" tools with equal result they show nothing or zero length file.
PhotoRec did find my file by signature and started to recover, the only with one problem, it wasn't able to find end of file continuing writing after the real file size (I stopped it when size was x4 larger).
After that knowing file size I just truncated it to required and rechecked signature at the end, fortunately it was exactly as expected :-)
Sequential verification hasn't found any issues with restored file so I am very happy in result.
P.S. I almost sure that my file wasn't fragmented.
A year late, but Restorer Ultimate the paid version is a must. Get the demo and you can view all your files and if you are satisfied with what you see (It will tell you sizes and whatnot) then I would go for the full thing, I just got it and am recovering 20GB+ files that were high definition movies
There are several people reporting success with R-Studio:
http://windowssecrets.com/forums/showthread.php/137552-Tools-for-undeleting-files-larger-than-4GB http://www.r-undelete.com/