From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.62) (envelope-from ) id 1Hoied-0002Aj-Dy for garchives@archives.gentoo.org; Thu, 17 May 2007 16:16:40 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.0/8.14.0) with SMTP id l4HGBTQ1004978; Thu, 17 May 2007 16:11:30 GMT Received: from vscan02.westnet.com.au (vscan02.westnet.com.au [203.10.1.132]) by robin.gentoo.org (8.14.0/8.14.0) with ESMTP id l4HG3KVR027147 for ; Thu, 17 May 2007 16:03:21 GMT Received: from localhost (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with ESMTP id 565EE11B33F for ; Fri, 18 May 2007 00:03:16 +0800 (WST) Received: from vscan02.westnet.com.au ([127.0.0.1]) by localhost (vscan02.westnet.com.au [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25147-04 for ; Fri, 18 May 2007 00:03:16 +0800 (WST) Received: from [192.168.1.55] (unknown [124.149.62.254]) by vscan02.westnet.com.au (Postfix) with ESMTP id E8D3011B0DF for ; Fri, 18 May 2007 00:03:15 +0800 (WST) Subject: Re: [gentoo-user] Corrupt USB pen drive From: Tim Allingham To: gentoo-user@lists.gentoo.org In-Reply-To: <200705171638.54090.michaelkintzios@gmail.com> References: <200705171236.28695.michaelkintzios@gmail.com> <20070517094559.14586f21@pascal.spore.ath.cx> <200705171638.54090.michaelkintzios@gmail.com> Content-Type: text/plain Date: Fri, 18 May 2007 02:03:19 +1000 Message-Id: <1179417799.17572.5.camel@localhost> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.8.3 Content-Transfer-Encoding: 7bit X-Archives-Salt: d8f1afbf-3b62-4776-b7af-41f674de9329 X-Archives-Hash: 2791b8396a42c35708e6d29f1b779f90 On Thu, 2007-05-17 at 16:38 +0100, Mick wrote: > On Thursday 17 May 2007 15:45, Dan Farrell wrote: > > On Thu, 17 May 2007 12:36:25 +0100 > > > > Mick wrote: > > > > > > > I tried to dd the boot sector so that I can look at it on my hard > > > drive, but it cannot access /dev/sda. Is there anything that I can > > > do with my Gentoo to recover the files on this USB? > > > > have you tried reading raw from the device like > > > > | dd if=/dev/sda of=sda.image > > > > ? That might do the recovery. How to get it out of the image is the > > same problem but once the backup succeeds you can plug it into a > > windows xp box and reformat, and you will probably end up with the same > > partition structure as originally. Then you can try to read the right > > part of the image out of the image, once you get the numbers from fdisk > > on the newly formatted drive, and end up with an image of sda1. From > > there you should be able to mount sda1 and read out the data, if it > > isn't corrupted. > > Thanks Dan, as I said above I tried to extract the MBR out of it by running: > > dd if=/dev/sda of=/tmp/r1 bs=512 > > But couldn't access it whatsoever. > > > I also am wondering what happened to the partition table. I bet your > > coworker has a security-compromised box at home (oh, runs windows? > > right...) At any rate, if the data is recoverable, it may be possible > > to rebuild the partition table if you can find out where the partition > > started and ended. People have done it before, i've read online about > > it. > Have you tried examining it physically? I've had a drive behave similarly before, and it turned out to be an issue with one of the solder joints on the crystal only having intermittent contact ( was almost a dry join) - resoldering solved it and let me recover the data -- gentoo-user@gentoo.org mailing list