R-studio - seemed to be working, scan took ~ 12 hours, while inspecting the results it crashed!, I gave up since I would have had to rescan and it didn't seem to be finding anything useful anyways Windows utilities tried (note: if these would have worked I would have had to pay $50 - $120! ):Īrax Disk Doctor - didn't work in wine, horrible even in Windows XP, couldn't find my filesĭisk Doctor 2.0 - didn't work in wine, horrible even in Windows XP, couldn't find my files Scalpel - fast and easily configurable, after training it I was able to carve a 250GB ntfs hard drive in ~3 hours, recovering my. Photorec (comes with testdisk) - recovered many files successfully but it didn't know how to recover Open Office documents and I failed to find a way to configure it manuallyįoremost - scalpel is originally a derivative of this, some find that foremost works better Testdisk - looks like it would work great to recover partitions but the changes I made were too great (during some of the encryption steps I performed, large swaths of the hard drive were written over with random bytes making recovery impossible) This is what I ended up recovering in the end.ģ) Decide to repartition and encrypt your drive on a whim only to find out your backup consists of empty folders when you're finished.ĭuring the quest to recover my files I tried the following linux utilities: Note: a prior copy mostly worked but I had manually deleted it. I forgot to set the recursive flag and didn't notice my final copy contained empty directories. what not to do:ġ) Get only 2 hours of sleep and expect any scripting you do to work.Ģ) Make "improvements" to your rsync backup script without thoroughly checking the results. How I screwed up my backup and my primary, i.e. Partition recovery - maybe your partition was corrupted or you repartitioned incorrectly, your partition tables are lost but hopefully not deleted, I recommend 'testdisk'Ĭarving - you are in big trouble and need every single byte of your disk analyzed and carved up into guesses at what files are thereĪfter screwing up a backup and then botching an attempt at encrypting my laptop's hard drive I've spent upwards of 40 hours trying to retrieve one Open Office document, a 35 page manual that I had been working on, and some Thunderbird emails. If you think your disk is failing, first make an image with a utility such as 'ddrescue' to perform forensic analysis on. IMPORTANT: UNMOUNT YOUR DRIVE IMMEDIATELY OR RISK LOSING WHAT LITTLE CHANCE YOU HAVE AT RECOVERY. What follows are some anecdotes from my successful disk carving adventure and some tips for using 'scalpel' to retrieve Open Office (odt) and Thunderbird local mail files.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |