On Mon, 03 Jun 2013 16:41:29 +0200, Louis Lagendijk wrote:
> testdik can work on a disk image, so I recommend using that. Don't risk
> chaging the original disk (although testdisk is not supposed to touch it
> IIRC)
> /Louis
Thanks Louis for sticking with me. I do greatly appreciate your help!
I
On Sat, 2013-06-01 at 19:52 +, Rock wrote:
> On Sat, 01 Jun 2013 16:40:46 +, Rock wrote:
>
> > Now comes the biggie, backing up the entire 150MB disk:
> > Q: Maybe I should have used the "conv=noerror" option
> > as suggested in the dd wikipedia entry?
> > $ sudo dd if=/dev/sdc1 of=/mnt/im
On Sat, 01 Jun 2013 16:40:46 +, Rock wrote:
> Now comes the biggie, backing up the entire 150MB disk:
> Q: Maybe I should have used the "conv=noerror" option
> as suggested in the dd wikipedia entry?
> $ sudo dd if=/dev/sdc1 of=/mnt/image.dd bs=1M
The dd finished backing up after about 3 hour
On Sat, 01 Jun 2013 16:00:06 +, Rock wrote:
> OK. This is where we don't want to make a mistake!
> Q: Does the block size matter?
I kicked it off, as follows, and will wait to report:
$ cd /mnt
$ script recovery.log
==> Script started, file is recovery.log
Backing up the MBR (as per the Wik
On Sat, 01 Jun 2013 12:25:01 +0200, Louis Lagendijk wrote:
>> Should I now format the 2TB disk using this command?
>> $ sudo mkfs /dev/sdb1
> You could try without reformatting it: just check where it is mounted:
> mount |grep sdb1
Hi Louis,
I'm ready for the big dd!
OK. Starting over after a
On Sat, 01 Jun 2013 12:25:01 +0200, Louis Lagendijk wrote:
>> Should I now format the 2TB disk using this command?
>> $ sudo mkfs /dev/sdb1
> You could try without reformatting it: just check where it is mounted:
> mount |grep sdb1
Thanks for your patience. I backed up the spare 500MB USB disk,
On Sat, 2013-06-01 at 04:18 +, Rock wrote:
> On Sat, 11 May 2013 22:28:53 +0200, Louis Lagendijk wrote:
>
> > here is a quick list of what to do:
> Thanks. I needed this step-by-step procedure; and I'll report back.
> I bought a new 2TB disk, named "My Passport".
> I will test the procedure wi
On Sat, 11 May 2013 22:28:53 +0200, Louis Lagendijk wrote:
> here is a quick list of what to do:
Thanks. I needed this step-by-step procedure; and I'll report back.
I bought a new 2TB disk, named "My Passport".
I will test the procedure with a spare 500GB disk, named "Signature Mini".
> 1) connec
On Sat, 11 May 2013 23:31:07 +1000, Anthony K wrote:
> dd if=/dev/sda of=/path/to/hdd-image-file.img bs=4M
I'm not sure how to figure out what to put into that dd command.
Q: Is this the right sequence given the disk information below?
1. Boot to Centos 6
2. Plug in the old (500GB) & new (
On Sat, 2013-05-11 at 19:18 +, Rock wrote:
> On Sat, 11 May 2013 15:35:31 +, Rock wrote:
>
> > Currently I'm at day 3, and almost done recovering the
> > files; but the results (sadly, due to my error in the
> > Recuva settings) are flatter than the plains of Kansas!
>
> Just for the re
On Sat, 11 May 2013 15:35:31 +, Rock wrote:
> Currently I'm at day 3, and almost done recovering the
> files; but the results (sadly, due to my error in the
> Recuva settings) are flatter than the plains of Kansas!
Just for the record, Recuva finished at 66 hours:
http://www5.picturepush.c
On Sat, 11 May 2013 11:23:35 -0400, Fred Roller wrote:
> There are some linux solutions I had at the time and I
> am trying to dig up my notes.
Thanks if you can find them.
Currently I'm at day 3, and almost done recovering the
files; but the results (sadly, due to my error in the
Recuva sett
On 05/09/2013 04:41 PM, Rock wrote:
> My 15GB backup USB drive somehow got "corrupted" such that
> a "chkdsk /f E:" on WinXP removed the file allocation table
> (or whatever) making the NTFS drive appear empty.
>
> I tried Windows Recuva freeware to recover the files, and
> it has been working for
On 11/05/13 22:56, Rock wrote:
> On Sat, 11 May 2013 21:27:59 +1000, Anthony K wrote:
>
>> I'd suggest you still make a copy of the disk with dd and
>> work on the image!
> Key questions:
> Q0. Should I boot to my normal Centos 6 OS?
> Q1: Should I format the new USB hard disk with Fdisk?
> Q2: W
On Sat, 11 May 2013 21:27:59 +1000, Anthony K wrote:
> I'd suggest you still make a copy of the disk with dd and
> work on the image!
Since I may only get one shot, and since I've never formatted
a USB hard drive, nor ever even mounted one, how does this procedure
look for my 149GB NTFS disk?
On 11/05/13 14:48, Rock wrote:
>> For the record, this is the Microsoft Support KB I had followed:
>> http://support.microsoft.com/kb/176646
> Just by way of update, it's currently at 95,000 of about
> 100,000 files; so I would expect the Recuva file recovery
> to complete by tomorrow morning (da
> For the record, this is the Microsoft Support KB I had followed:
> http://support.microsoft.com/kb/176646
Just by way of update, it's currently at 95,000 of about
100,000 files; so I would expect the Recuva file recovery
to complete by tomorrow morning (day 3):
http://www5.picturepush.com/pho
On Fri, 10 May 2013 17:27:34 +, Rock wrote:
> And, I did google for the solution for a corrupt disk and I did follow
> Microsoft Support instructions.
> http://support.microsoft.com/kb/176646
>
> Of course, in hindsight, I *should* have run a dd first ... but I had
> not expected the chkdsk
On Fri, 10 May 2013 13:04:01 -0400, m.roth-x6lchVBUigD1P9xLtpHBDw wrote:
> I'd guess that whatever infected your system had a protection mechanism,
> so that if you tried to backup the whole drive, it would mangle
> something on the recipient drive, so that *it* couldn't be examined
> easily.
I u
Rock wrote:
> On Thu, 09 May 2013 18:53:30 -0700, Keith Keller wrote:
>
>> Is it already "putting" your files somewhere? If so it's almost
>> certainly too late to throw a linux recovery tool at it.
>
> Nothing, to my knowledge, is being written to the external NTFS
> USB hard drive.
>
> The files
On Fri, 10 May 2013 08:32:35 -0400, Yves Bellefeuille wrote:
> I think that the user was too quick to assume that the computer "had a
> virus or something". If he thought it might have a virus, why didn't he
> try an anti-virus program first?
Good question. The Windows XP machine is an old Dell B
On Thu, 09 May 2013 18:53:30 -0700, Keith Keller wrote:
> Is it already "putting" your files somewhere? If so it's almost
> certainly too late to throw a linux recovery tool at it.
Nothing, to my knowledge, is being written to the external NTFS
USB hard drive.
The files are being put on the C:
On Fri, May 10, 2013 at 07:03:18AM -0700, Bry8 Star wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
>
> You may try these out:
> some are able to scan entire surface and able to recover file, some
> can give you back entire FAT as well, but trial version will be
> limited with certain f
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
You may try these out:
some are able to scan entire surface and able to recover file, some
can give you back entire FAT as well, but trial version will be
limited with certain files only, or files-only, etc:
Power Data Recovery.
Paragon Hard Disk Ma
On Fri, May 10, 2013 at 8:32 AM, Yves Bellefeuille wrote:
>It sounds very much like the user had the reaction many inexperienced
>users have: "The computer doesn't do what I think it should be doing: it
>must be a virus!"
I used to have that problem all the time. turns out I was just
running wi
http://www.brzitwa.de/mb/gpart/ might help..
2013/5/10 Yves Bellefeuille
> On Friday 10 May 2013, mark wrote:
>
> > I'm afraid that's where you lost it - I'd strongly suspect that the
> > virus has some kind of self-protection to avoid being studied, and
> > that's when it hit the USB drive.
>
On Friday 10 May 2013, mark wrote:
> I'm afraid that's where you lost it - I'd strongly suspect that the
> virus has some kind of self-protection to avoid being studied, and
> that's when it hit the USB drive.
I think that the user was too quick to assume that the computer "had a
virus or somet
On 05/09/13 20:56, Rock wrote:
> On Thu, 09 May 2013 16:51:48 -0400, m.roth-x6lchVBUigD1P9xLtpHBDw wrote:
>
>> Are you sure that the FAT was mangled, and not just the MBR?
>
> How can I tell?
>
> All I know is the following:
> a) The WinXP PC had a virus or something making it slow
> b) So I decide
On 5/10/2013 3:56 AM, Rock wrote:
> It gave a message that it was unrecognized or corrupted.
> So I googled, & found a Microsoft Support page saying to run:
> chkdsk /F E:
> So I ran that, and now the USB drive was recognized.
> But it "appeared" empty.
Never run chkdsk if you are not 100% sure!
On 2013-05-10, Rock wrote:
>
> In fact, even though it has said there were only 10 minutes
> to go for the past 20 hours or so, the file count keeps
> climbing.
> http://www1.picturepush.com/photo/a/12893269/img/12893269.jpeg
>
> The problem is that, even though Recuva lists the hierarchy
> w
On Thursday 09 May 2013, Rock wrote:
> d) I backed up all the data files onto the 150GB USB drive
How did you back up?
> e) I disconnected the 150GB USB drive
Did you "safely remove" the USB drive as shown here?
http://etc.usf.edu/techease/win/hardware/how-do-i-safely-remove-a-usb-
device-fro
On Thu, 09 May 2013 16:51:48 -0400, m.roth-x6lchVBUigD1P9xLtpHBDw wrote:
> Are you sure that the FAT was mangled, and not just the MBR?
How can I tell?
All I know is the following:
a) The WinXP PC had a virus or something making it slow
b) So I decided to re-install the WinXP OS
c) I connected t
John R Pierce wrote:
> On 5/9/2013 1:41 PM, Rock wrote:
>> Since none of the files were deleted or written over, is
>> there a method on Linux that will simply recover the missing
>> file allocation directory structure instead of dumping a
>> hundred thousand files into a single directory?
>
> the
On 5/9/2013 1:41 PM, Rock wrote:
> Since none of the files were deleted or written over, is
> there a method on Linux that will simply recover the missing
> file allocation directory structure instead of dumping a
> hundred thousand files into a single directory?
the FAT contains all the file link
34 matches
Mail list logo
