Solved

How to recover deleted backupf files (bkf) from a B2D disk?

Posted on 2008-06-19
7
867 Views
Last Modified: 2013-12-01
Dear experts

On a Windows 2003 Server I deleted some *.bkf files located in the b2d folder from backup exec (version 11d). I deleted them in windows explorer with shift-del (permanently delete) togehter with some imgxxxx folders (created when backing up exchange with the grt option) I wanted to trash.
I haven't written to the disk but undelete software shows me the *.bkf files with size = 0 kb. However, the files in the imgxxx folders are recoverable (that are the ones I wanted to get rid of). I don't really understand why this is so. Is there something special about the *.bkf files?
How can I recover the *.bkf files?
By the way: Is there a difference in how windows deletes files when using del + empty trash vs. shift-del?
0
Comment
Question by:TuliTaivas
  • 4
  • 3
7 Comments
 
LVL 24

Accepted Solution

by:
ryansoto earned 500 total points
Comment Utility
A permanent delete (shift-del) it bypasses the recycle bin and is gone.  You have to run recovery software at that point.
Since you have run undelete with no success the next thing you need to do is pull the drives and send to a company for recovery.  They have more advaced techniques to grab the data.
I used sehate recovery with 100% success and they gurantee you get your data or no charge.
I would be very careful with the drives at this point if the data is mission critical.  I would pull the drives out immediately.
Essentially emptying therecycle bin and a shift del are the same thing.  The allow those spaces on the hard drive to be overwritten with new data.
Once more piece of recovery software you could try is getdataback.
0
 
LVL 24

Expert Comment

by:ryansoto
Comment Utility
Sory for all my spelling errors.  I used Seagate recovery.
0
 

Author Comment

by:TuliTaivas
Comment Utility
Hi Ryan

GetDataBack is having a go at it right now. But it takes some time to scan a 20TB RAID-Disk....

I still don't understand why other recovery software has shown the filesize of all the *.bkf files as 0KB. AFAIK on a FAT16 drive deleting a file would just change the first letter of the file name and leave the other information (eg file size and starting sector) intact. How is a file marked as deleted on NTFS?
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 24

Expert Comment

by:ryansoto
Comment Utility
When you empty the recycle bin or a shift delete also called a hard delete the OS the allows the data to be written over, doesnt mean it will be written over right away.
http://www.recovermyfiles.com/ntfs-fat-data-recovery.php

Good write up on what happens
0
 

Author Comment

by:TuliTaivas
Comment Utility
I gave RecoverMyFiles a try after I cancelled GetDataback (at 14% after running for 7 hrs). RecoverMyFiles showed the recoverability of most (if not all) files as "very good" however failed completely to even show the missing backup files. I don't understand that. Why should somethin in
e:\b2d be less recoverable than something in E:\b2d\img00001 ? The only difference is that the backupfiles ar 50GB and all others much smaller. Could that be the reason?
0
 
LVL 24

Expert Comment

by:ryansoto
Comment Utility
The program has to completely run through and establish the files so if theye are massive files it has to run through the file.

It will probably show 0kb until it runs through completely.
0
 

Author Comment

by:TuliTaivas
Comment Utility
No luck recovering the backup files in the time I had available. Maybe GetDataBack would have done the trick but we wanted to reestablish normal backups as soon as possible and it would have taken almost 2 days to let GetDataback finsh...

I would like to give you the points, however I'm not sure how to do that. If I accept one of your answers as a solution it might be misleading others because they don't find a proven solution here but only suggestions, how to proceed and information about what did not work (which can save one from some work...)
What shall I do?

Roger
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Join & Write a Comment

VM backups can be lost due to a number of reasons: accidental backup deletion, backup file corruption, disk failure, lost or stolen hardware, malicious attack, or due to some other undesired and unpredicted event. Thus, having more than one copy of …
Workplace bullying has increased with the use of email and social media. Retain evidence of this with email archiving to protect your employees.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now