# /dev/sdc1 IS our pendrive dd IF=/dev/sdc1 of=image # recovering with http://foremost.sourceforge.net/ TO new directory named recovered foremost -i image -o recovered > temp