# /dev/sdc1 IS our pendrive dd IF=/dev/sdc1 OF=image # recovering WITH http://foremost.sourceforge.net/ TO NEW directory named recovered foremost -i image -o recovered > temp