Solved

How to recover deleted backupf files (bkf) from a B2D disk?

Posted on 2008-06-19
7
871 Views
Last Modified: 2013-12-01
Dear experts

On a Windows 2003 Server I deleted some *.bkf files located in the b2d folder from backup exec (version 11d). I deleted them in windows explorer with shift-del (permanently delete) togehter with some imgxxxx folders (created when backing up exchange with the grt option) I wanted to trash.
I haven't written to the disk but undelete software shows me the *.bkf files with size = 0 kb. However, the files in the imgxxx folders are recoverable (that are the ones I wanted to get rid of). I don't really understand why this is so. Is there something special about the *.bkf files?
How can I recover the *.bkf files?
By the way: Is there a difference in how windows deletes files when using del + empty trash vs. shift-del?
0
Comment
Question by:TuliTaivas
  • 4
  • 3
7 Comments
 
LVL 24

Accepted Solution

by:
ryansoto earned 500 total points
ID: 21828136
A permanent delete (shift-del) it bypasses the recycle bin and is gone.  You have to run recovery software at that point.
Since you have run undelete with no success the next thing you need to do is pull the drives and send to a company for recovery.  They have more advaced techniques to grab the data.
I used sehate recovery with 100% success and they gurantee you get your data or no charge.
I would be very careful with the drives at this point if the data is mission critical.  I would pull the drives out immediately.
Essentially emptying therecycle bin and a shift del are the same thing.  The allow those spaces on the hard drive to be overwritten with new data.
Once more piece of recovery software you could try is getdataback.
0
 
LVL 24

Expert Comment

by:ryansoto
ID: 21828137
Sory for all my spelling errors.  I used Seagate recovery.
0
 

Author Comment

by:TuliTaivas
ID: 21828403
Hi Ryan

GetDataBack is having a go at it right now. But it takes some time to scan a 20TB RAID-Disk....

I still don't understand why other recovery software has shown the filesize of all the *.bkf files as 0KB. AFAIK on a FAT16 drive deleting a file would just change the first letter of the file name and leave the other information (eg file size and starting sector) intact. How is a file marked as deleted on NTFS?
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 24

Expert Comment

by:ryansoto
ID: 21828637
When you empty the recycle bin or a shift delete also called a hard delete the OS the allows the data to be written over, doesnt mean it will be written over right away.
http://www.recovermyfiles.com/ntfs-fat-data-recovery.php

Good write up on what happens
0
 

Author Comment

by:TuliTaivas
ID: 21829496
I gave RecoverMyFiles a try after I cancelled GetDataback (at 14% after running for 7 hrs). RecoverMyFiles showed the recoverability of most (if not all) files as "very good" however failed completely to even show the missing backup files. I don't understand that. Why should somethin in
e:\b2d be less recoverable than something in E:\b2d\img00001 ? The only difference is that the backupfiles ar 50GB and all others much smaller. Could that be the reason?
0
 
LVL 24

Expert Comment

by:ryansoto
ID: 21833138
The program has to completely run through and establish the files so if theye are massive files it has to run through the file.

It will probably show 0kb until it runs through completely.
0
 

Author Comment

by:TuliTaivas
ID: 21882542
No luck recovering the backup files in the time I had available. Maybe GetDataBack would have done the trick but we wanted to reestablish normal backups as soon as possible and it would have taken almost 2 days to let GetDataback finsh...

I would like to give you the points, however I'm not sure how to do that. If I accept one of your answers as a solution it might be misleading others because they don't find a proven solution here but only suggestions, how to proceed and information about what did not work (which can save one from some work...)
What shall I do?

Roger
0

Featured Post

Network it in WD Red

There's an industry-leading WD Red drive for every compatible NAS system to help fulfill your data storage needs. With drives up to 8TB, WD Red offers a wide array of solutions for customers looking to build the biggest, best-performing NAS storage solution.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

By default, Carbonite Server Backup manages your encryption key for you using Advanced Encryption Standard (AES) 128-bit encryption. If you choose to manage your private encryption key, your backups will be encrypted using AES 256-bit encryption.
Are you looking to recover an email message or a contact you just deleted mistakenly? Or you are searching for a contact that you erased from your MS Outlook ‘Contacts’ folder and now realized that it was important.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now