TuliTaivas
asked on
How to recover deleted backupf files (bkf) from a B2D disk?
Dear experts
On a Windows 2003 Server I deleted some *.bkf files located in the b2d folder from backup exec (version 11d). I deleted them in windows explorer with shift-del (permanently delete) togehter with some imgxxxx folders (created when backing up exchange with the grt option) I wanted to trash.
I haven't written to the disk but undelete software shows me the *.bkf files with size = 0 kb. However, the files in the imgxxx folders are recoverable (that are the ones I wanted to get rid of). I don't really understand why this is so. Is there something special about the *.bkf files?
How can I recover the *.bkf files?
By the way: Is there a difference in how windows deletes files when using del + empty trash vs. shift-del?
On a Windows 2003 Server I deleted some *.bkf files located in the b2d folder from backup exec (version 11d). I deleted them in windows explorer with shift-del (permanently delete) togehter with some imgxxxx folders (created when backing up exchange with the grt option) I wanted to trash.
I haven't written to the disk but undelete software shows me the *.bkf files with size = 0 kb. However, the files in the imgxxx folders are recoverable (that are the ones I wanted to get rid of). I don't really understand why this is so. Is there something special about the *.bkf files?
How can I recover the *.bkf files?
By the way: Is there a difference in how windows deletes files when using del + empty trash vs. shift-del?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ryansoto
Sory for all my spelling errors. I used Seagate recovery.
ASKER
Hi Ryan
GetDataBack is having a go at it right now. But it takes some time to scan a 20TB RAID-Disk....
I still don't understand why other recovery software has shown the filesize of all the *.bkf files as 0KB. AFAIK on a FAT16 drive deleting a file would just change the first letter of the file name and leave the other information (eg file size and starting sector) intact. How is a file marked as deleted on NTFS?
GetDataBack is having a go at it right now. But it takes some time to scan a 20TB RAID-Disk....
I still don't understand why other recovery software has shown the filesize of all the *.bkf files as 0KB. AFAIK on a FAT16 drive deleting a file would just change the first letter of the file name and leave the other information (eg file size and starting sector) intact. How is a file marked as deleted on NTFS?
When you empty the recycle bin or a shift delete also called a hard delete the OS the allows the data to be written over, doesnt mean it will be written over right away.
http://www.recovermyfiles.com/ntfs-fat-data-recovery.php
Good write up on what happens
http://www.recovermyfiles.com/ntfs-fat-data-recovery.php
Good write up on what happens
ASKER
I gave RecoverMyFiles a try after I cancelled GetDataback (at 14% after running for 7 hrs). RecoverMyFiles showed the recoverability of most (if not all) files as "very good" however failed completely to even show the missing backup files. I don't understand that. Why should somethin in
e:\b2d be less recoverable than something in E:\b2d\img00001 ? The only difference is that the backupfiles ar 50GB and all others much smaller. Could that be the reason?
e:\b2d be less recoverable than something in E:\b2d\img00001 ? The only difference is that the backupfiles ar 50GB and all others much smaller. Could that be the reason?
The program has to completely run through and establish the files so if theye are massive files it has to run through the file.
It will probably show 0kb until it runs through completely.
It will probably show 0kb until it runs through completely.
ASKER
No luck recovering the backup files in the time I had available. Maybe GetDataBack would have done the trick but we wanted to reestablish normal backups as soon as possible and it would have taken almost 2 days to let GetDataback finsh...
I would like to give you the points, however I'm not sure how to do that. If I accept one of your answers as a solution it might be misleading others because they don't find a proven solution here but only suggestions, how to proceed and information about what did not work (which can save one from some work...)
What shall I do?
Roger
I would like to give you the points, however I'm not sure how to do that. If I accept one of your answers as a solution it might be misleading others because they don't find a proven solution here but only suggestions, how to proceed and information about what did not work (which can save one from some work...)
What shall I do?
Roger