View Full Version : Recovering Files from a Crashed Win XP Using Knoppix
One of the hazards of using Linux is getting a reputation for being a computer guru, and calls at odd hours from friends complaining their Windows crashed and they need to recover a term paper, tax files, etc.
Since I just went through one of these episodes, here is a short how-to for Windows users to use Knoppix to recover files. This way you can just hand the supplicant a Knoppix DVD and a copy of the how-to and get back to watching Family Guy reruns.
-----
Recovering Files from a Crashed Win XP Using Knoppix
1. Set BIOS to boot from DVD.
2. Boot Knoppix DVD.
3. At the prompt "Boot: _" that displays at the bottom of the title screen, type: knoppix
lang=us , and enter. (Note: not essential, but without this Knoppix will boot in German.)
4. When Knoppix finishes loading, close the "Knoppix Info" window by clicking on "X" at
the top right corner of the window.
5. Click on icon labeled "Hard Disk (HDA1)" at top left of display.
6. In open window click on "Documents" and browse for files to copy.
7. Insert USB memory stick.
8. When USB device dialogue opens, click "OK" button to open its file window.
9. Drag desired files to copy from crashed Win XP to the USB device window, then click
"Copy Here" when the dialogue box pops open.
10. When finished copying all files to save, close USB device window by clicking "X" at top
right corner.
11. RIGHT click USB device icon on the lower left of the main desktop display; click on
"Unmount" in the dialogue box. (Note: this is essential to insure selected files are copied to
the USB device.)
12. Remove USB memory stick.
13. Right click anywhere on desktop; click on "Log Out "Knoppix""; in secondary dialogue
box click "Turn Off Computer"; wait for instruction to remove Knoppix DVD.
bhobjj
04-16-2008, 01:24 PM
Data recovery may be more difficult if there is filesystem corruption.
Included on the Knoppix CD is the Testdisk tools.
Testdisk is an alternative to doing multiple commands with more basic tools such as gpart (http://linux.die.net/man/8/gpart), dd (http://linux.die.net/man/1/dd) and fdisk (http://linux.die.net/man/8/fdisk).
Testdisk can be used to repair the MBR, repair partition tables, and repair corrupted partitions.
The program interface is a text-based menu and is very easy to use.
There is a tutorial here:
http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step
Another part of the Testdisk tools is Photorec.
Photorec is a tool for recovering files from free space (deleted files).
I had posted a short how-to here (http://www.linuxagora.com/vbforum/showthread.php?t=726).
There is a tutorial here:
http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step
Photorec can sometimes also recover files from CDs that are otherwise unreadable.
-BoB
Thanks for the additional tips. Knoppix is a gem!
I wrote the basic how-to to deal with a common Win XP problem - going south after installing a rogue app.
As I stated,the purpose is to let the windower clean up his own mess and leave me in peace. :-)
morgoth
04-20-2008, 09:52 PM
And if you don't have a memory stick?
I say this because when my system was working properly (hardware issues, long story), I had a dvd rom drive, and a dvd burner. I'd boot off Knoppix from the dvd rom drive, and could *never* get the burner to work. I did try 2 different DVD burners, both of which are supported under normal circumstances in Linux (and weren't the latest 'n' greatest releases when I tried this). So, either Knoppix uses a very old version of k3b and the underlying tools that support it, or it is configured in some odd way. The drive was detected by Linux as well btw, and could read data.
This was a while ago now (six months ago), so I haven't bothered with it, since I was able to repair Windows and not lose any data (phew).
Dave
Re: "I had a dvd rom drive, and a dvd burner. I'd boot off Knoppix from the dvd rom drive, and could *never* get the burner to work."
Were trying to burn a DVD? Try a CD; I had an opportunity to use this recovery media several months ago. K3B can burn a CD "on the fly" but you would need a heck of a lot of RAM to burn a DVD that way, i.e. without saving an ISO someplace.
morgoth
04-22-2008, 07:59 AM
Re: "I had a dvd rom drive, and a dvd burner. I'd boot off Knoppix from the dvd rom drive, and could *never* get the burner to work."
Were trying to burn a DVD? Try a CD; I had an opportunity to use this recovery media several months ago. K3B can burn a CD "on the fly" but you would need a heck of a lot of RAM to burn a DVD that way, i.e. without saving an ISO someplace.
Tried both CD and DVD, same issue. Some error message. Googled for it at the time but wasn't really too helpful. Plus, I had around 20gb of data to backup, damn if I was going to use CDs lol...
Dave
"Tried both CD and DVD, same issue. Some error message. Googled for it at the time but wasn't really too helpful. Plus, I had around 20gb of data to backup, damn if I was going to use CDs lol..."
With that much data to recover, the better tactic would be to connect a USB hard drive of sufficient capacity.
Several months ago the mobo on my Intel 2.2 gHz box went south - presumed capacitor failure - and I wanted to recover some files.
I pulled the HD and and installed it in an old "lab rat" box - 850 mHz Celeron - then booted with Knoppix. I could not burn a DVD for the reason previously given, but K3B did burn several CD's without a problem. The DVD drive is a cheap Samsung.
morgoth
04-22-2008, 07:27 PM
Yup, true and agreed. Sadly, at time I was unemployed and did not have the funds to buy a USB portable hdd. I had to work with the options that I had...
nevertheless, the issue was that CD/DVD burning was not working via the Knoppix DVD when it should have been. I think it's a bit unfair to expect an average person to have a USB portable hdd just because Knoppix doesn't work properly!
As an aside, I have never been able to get ANY CD or DVD burning via Knoppix on ANY versions over the past 5 or 6 years. It just simply *does* not work.
Dave
PS Said system has 2.5gb of RAM in it, so it *should* be able to handle things...
"Tried both CD and DVD, same issue. Some error message. Googled for it at the time but wasn't really too helpful. Plus, I had around 20gb of data to backup, damn if I was going to use CDs lol..."
With that much data to recover, the better tactic would be to connect a USB hard drive of sufficient capacity.
Several months ago the mobo on my Intel 2.2 gHz box went south - presumed capacitor failure - and I wanted to recover some files.
I pulled the HD and and installed it in an old "lab rat" box - 850 mHz Celeron - then booted with Knoppix. I could not burn a DVD for the reason previously given, but K3B did burn several CD's without a problem. The DVD drive is a cheap Samsung.
"nevertheless, the issue was that CD/DVD burning was not working via the Knoppix DVD when it should have been. I think it's a bit unfair to expect an average person to have a USB portable hdd just because Knoppix doesn't work properly!"
The person for whom I wrote up the how-to told me today he had success recovering his files using Knoppix and his USB stick. He knows nothing about Linux/UNIX and never experienced it until he booted up Knoppix. Obviously, if there is a need for more file storage capacity than a 1 or 2 GB USB stick can handle, than diligent backup is called for. Or, slave the drive to a working system and lift the files off of it that way.
"As an aside, I have never been able to get ANY CD or DVD burning via Knoppix on ANY versions over the past 5 or 6 years. It just simply *does* not work."
The Knoppix I use is 5.1.1 and was included in a copy of Linux Pro Magazine last year. It works for me for burning CD's.
morgoth
04-23-2008, 08:21 AM
Well, it has never worked for me, despite trying several versions of Knoppix, and several pieces of hardware that all worked in Linux *proper*. I must just be unlucky ;-)
Dave
Well, it has never worked for me, despite trying several versions of Knoppix, and several pieces of hardware that all worked in Linux *proper*. I must just be unlucky ;-)
Dave
If I didn't know better, I would swear that these distros had likes and dislikes. Knoppix has Just Worked otb for anything I have wanted to do whenever I have wanted to do it.
But (K)Ubuntu takes one look at me - and goes haywire. I just have no luck with it at all. Whatever hardware I am trying to run it on. Yes, I could tweak this, download that, fight with the other - or I can use another distro. Guess which I usually end up doing....
Lisi
morgoth
04-24-2008, 12:48 AM
Same. It *should* work though, and that's the annoying thing ;-)
Dave
morgoth
10-21-2008, 10:22 AM
Interesting to read this article again, cos I'd recently used testdisk, and had completely forgotten that Bob had mentioned in this thread! It saved some data (I had most of it backed up already) and restored my Vista drive to a working condition again.
As to Knoppix and not being able to burn CDs with it, I must just be unlucky.
Dave
vBulletin® v3.7.2, Copyright ©2000-2009, Jelsoft Enterprises Ltd.