Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision | |||
testdisk [2012/04/10 15:04] mike |
testdisk [2012/04/10 15:46] (current) mike |
||
---|---|---|---|
Line 218: | Line 218: | ||
</ | </ | ||
- | fortune.txt is visibly corrupted, and every file fails an MD5, but the filesystem hasn't reported any problems yet. | + | fortunes.txt is visibly corrupted, and every file fails an MD5, but the filesystem hasn't reported any problems yet. |
{{: | {{: | ||
+ | Different method: | ||
+ | blacktower: | ||
+ | blacktower: | ||
+ | total 299852 | ||
+ | -rw-r--r-- 1 root root 50674559 Apr 10 18:10 baddisk-2b.img | ||
+ | -rw-r--r-- 1 root root 51200000 Apr 6 21:45 baddisk-2.img | ||
+ | blacktower: | ||
+ | mount: you must specify the filesystem type | ||
+ | blacktower: | ||
+ | mount: wrong fs type, bad option, bad superblock on /dev/loop0, | ||
+ | | ||
+ | In some cases useful info is found in syslog - try | ||
+ | dmesg | tail or so | ||
- | === Running Testdisk === | + | blacktower: |
+ | e2fsck 1.41.12 (17-May-2010) | ||
+ | fsck.ext3: Superblock invalid, trying backup blocks... | ||
+ | fsck.ext3: Bad magic number in super-block while trying to open ./ | ||
- | blacktower:~/testdisk# testdisk ./ | + | The superblock could not be read or does not describe a correct ext2 |
+ | filesystem. | ||
+ | filesystem (and not swap or ufs or something else), then the superblock | ||
+ | is corrupt, and you might try running e2fsck with an alternate superblock: | ||
+ | e2fsck -b 8193 < | ||
- | Seems like a lost cause. Even the size of the disk comes up wrong in the " | + | blacktower: |
+ | e2fsck 1.41.12 (17-May-2010) | ||
+ | fsck.ext3: Attempt to read block from filesystem resulted | ||
+ | Could this be a zero-length partition? | ||
+ | blacktower: | ||
+ | -rw-r--r-- 1 root root 50674559 Apr 10 18:10 ./ | ||
+ | blacktower: | ||
- | < | ||
- | Disk ./ | ||
- | "Note: Disk capacity must be correctly detected for a successful recovery. | + | The partition table is missing |
- | If a disk listed above has incorrect size, check HD jumper settings, BIOS | + | |
- | detection, | + | |
- | </ | + | |
+ | === Testdisk === | ||
+ | non-partitioned | ||
+ | === photorec == | ||
+ | |||
+ | PhotoRec 6.11, Data Recovery Utility, April 2009 | ||
+ | Christophe GRENIER < | ||
+ | http:// | ||
+ | |||
+ | Disk ./ | ||
+ | | ||
+ | P Unknown | ||
+ | |||
+ | |||
+ | 14 files saved in / | ||
+ | Recovery completed. | ||
+ | txt: 14 recovered | ||
+ | |||
+ | blacktower: | ||
+ | ==> f0000000.txt <== | ||
+ | Just to have it is enough. | ||
+ | |||
+ | ==> f0000128.txt <== | ||
+ | men proud. | ||
+ | |||
+ | ==> f0003072.txt <== | ||
+ | |||
+ | |||
+ | ==> f0004352.txt <== | ||
+ | it classified? | ||
+ | |||
+ | ==> f0004480.txt <== | ||
+ | rail2\hyphmax0}\aspalpha\ltrpar\langfe255\lang255\cf0\kerning1\hich\af3\dbch\af4\afs24\lang255\loch\f0\fs24{\rtlch \ltrch\loch | ||
+ | |||
+ | ==> f0006400.txt <== | ||
+ | wiss\fprq2\fcharset0 Arial; | ||
+ | |||
+ | ==> f0007552.txt <== | ||
+ | us. | ||
+ | |||
+ | ==> f0014848.txt <== | ||
+ | ker is a fellow who lends you his umbrella when the sun is shining | ||
+ | |||
+ | ==> f0017024.txt <== | ||
+ | ought, and the wisdom never to use either. | ||
+ | |||
+ | ==> f0017280.txt <== | ||
+ | owntown Newark is in your future. | ||
+ | |||
+ | ==> f0017664.txt <== | ||
+ | outh gets trashed. | ||
+ | |||
+ | ==> f0078080.txt <== | ||
+ | e | ||
+ | |||
+ | ==> f0095488.txt <== | ||
+ | amenco dancer' | ||
+ | |||
+ | ==> f0095616.txt <== | ||
+ | up to his neck in sand? | ||
+ | blacktower: | ||
+ | |||
+ | |||
+ | === Try harder === | ||
+ | |||
+ | Paranoid : Yes (Brute force enabled) | ||
+ | 14 files | ||
+ | |||
+ | |||
+ | === Expert Mode === | ||
+ | |||
+ | 79 files saved in / | ||
+ | Recovery completed. | ||
+ | txt: 79 recovered | ||
+ | |||
+ | |||
+ | Unless we find the superblock, it looks like the fragmentation of the files is going to make it nearly impossible to find any files. | ||
+ | |||
+ | We could create a signature to find the superblock... hmmm... | ||
+ | |||
+ | http:// | ||
=== Additional Information === | === Additional Information === |