![]() ![]() R-studio - seemed to be working, scan took ~ 12 hours, while inspecting the results it crashed!, I gave up since I would have had to rescan and it didn't seem to be finding anything useful anyways Windows utilities tried (note: if these would have worked I would have had to pay $50 - $120! ):Īrax Disk Doctor - didn't work in wine, horrible even in Windows XP, couldn't find my filesĭisk Doctor 2.0 - didn't work in wine, horrible even in Windows XP, couldn't find my files Scalpel - fast and easily configurable, after training it I was able to carve a 250GB ntfs hard drive in ~3 hours, recovering my. Photorec (comes with testdisk) - recovered many files successfully but it didn't know how to recover Open Office documents and I failed to find a way to configure it manuallyįoremost - scalpel is originally a derivative of this, some find that foremost works better Testdisk - looks like it would work great to recover partitions but the changes I made were too great (during some of the encryption steps I performed, large swaths of the hard drive were written over with random bytes making recovery impossible) This is what I ended up recovering in the end.ģ) Decide to repartition and encrypt your drive on a whim only to find out your backup consists of empty folders when you're finished.ĭuring the quest to recover my files I tried the following linux utilities: Note: a prior copy mostly worked but I had manually deleted it. I forgot to set the recursive flag and didn't notice my final copy contained empty directories. what not to do:ġ) Get only 2 hours of sleep and expect any scripting you do to work.Ģ) Make "improvements" to your rsync backup script without thoroughly checking the results. How I screwed up my backup and my primary, i.e. Partition recovery - maybe your partition was corrupted or you repartitioned incorrectly, your partition tables are lost but hopefully not deleted, I recommend 'testdisk'Ĭarving - you are in big trouble and need every single byte of your disk analyzed and carved up into guesses at what files are thereĪfter screwing up a backup and then botching an attempt at encrypting my laptop's hard drive I've spent upwards of 40 hours trying to retrieve one Open Office document, a 35 page manual that I had been working on, and some Thunderbird emails. If you think your disk is failing, first make an image with a utility such as 'ddrescue' to perform forensic analysis on. IMPORTANT: UNMOUNT YOUR DRIVE IMMEDIATELY OR RISK LOSING WHAT LITTLE CHANCE YOU HAVE AT RECOVERY. ![]() What follows are some anecdotes from my successful disk carving adventure and some tips for using 'scalpel' to retrieve Open Office (odt) and Thunderbird local mail files.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |