After Hours

How do I ... recover lost data with DiskDigger?

DiskDigger searches storage media for traces of lost files using brute-forcing to work its way through every single sector of drive. Jack Wallen explains how to use this open source application to recover data.

Whether it was from accidental deletion or a reformat of a drive, we have all lost data files. DiskDigger searches drives (SD, CF, USB, hard drives, etc.) for traces of lost files using brute force to work its way through every single sector of the storage media. DiskDigger can even scan unformatted drives for lost data.

DiskDigger cannot repair broken files nor fix formatting issues on media, but it is file system-type independent so it will work on just about any storage media. It accomplishes this by bypassing the file system and reading only the raw data. This means you can search fat, NTFS, ext3, or any other type of file system.

This blog post is also available in PDF format in a TechRepublic download.

File types

DiskDigger can scan for the following types of files:

  • Photos
  • Videos
  • Music files
  • Documents
  • Partial files

As it locates files, it will update the list in real time. DiskDigger also allows you to preview found files without having to resave them (it does everything in RAM until you save something).

Getting and installing

DiskDigger isn't actually "installed," instead it is run from a binary file that you download and place in a convenient location (one you can remember). Download DiskDigger from the application page of Dmitry Brant. The file will be a zip file that you will have to decompress. Once you have the file decompressed there will be a new directory that houses the DiskDigger binary file. Copy or move that binary file to another directory where you can quickly get to it. (You can move it to your desktop for quick access if you like.) Once you have the binary file moved, double-click it to start the application.

Up and running

When DiskDigger starts, you will see the main window (Figure A), which will list the available searchable media.

Figure A

If you plug in a new media to search, hit the Refresh List button or the new media will not show up.
The first step is to select the media you want to search and then click Next. You will be presented with a window that allows you to choose the file type you want to search for (Figure B). If you know the file type you are searching for, you might want to uncheck all but that type. Fewer file types will speed up your search. Remember, this goes sector by sector so it can be fairly slow.

Figure B

In the Advanced Settings tab, you can configure DiskDigger to skip over bad sectors.

If you click on the Advanced Settings tab you will notice there is a slider that allows you to indicate a start position for your search. If you know the sector that starts the part of the drive that most likely contains the data you need to recover, slide the handle over to the starting sector number of that portion of the drive. This will help to speed up your search.

Once you are ready, click the Search button, and DiskDigger will begin doing its thing. During the search, all found files will be listed in the left pane (Figure C). If the file can be previewed, you can click on it to preview it in the right pane.

Figure C

Music files will not have a preview available for obvious reasons.

Once the search is complete, all your results will be listed. In order to save a recovered file, right-click the file and select either Save As or Save All to save the files to a safe location. In the Advanced menu entry there are the options Go to Sector and Save Fixed Amount. Saving a "fixed amount" means you will save a portion of the recovered file. This could be of use if only a portion of contiguous data on a drive is needed.

When you select to save a file, the default file name will be the sector number where the file was found. For instance, an mp3 file that was recovered on a USB drive defaulted to file name sector2285.mp3. If I knew the name of that mp3 file, I could rename it accordingly. But since this data was recovered data, most likely I do not know the name of the file. The file can be renamed once it is saved and the actual file name is discovered.

Final thoughts

DiskDigger is an easy means for data recovery. I highly recommend giving this application a try before sending a drive out to a costlier solution for data recovery. Naturally if you are attempting to recover highly sensitive material this might not be the solution for you. You should also be aware that DiskDigger is an open source work in progress. New features will be added to the application as time goes on. DiskDigger is also free of charge to use.

Stay on top of the latest XP tips and tricks with TechRepublic's Windows XP newsletter, delivered every Thursday. Automatically sign up today!

About

Jack Wallen is an award-winning writer for TechRepublic and Linux.com. He’s an avid promoter of open source and the voice of The Android Expert. For more news about Jack Wallen, visit his website getjackd.net.

Editor's Picks