From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.62) (envelope-from ) id 1HoiO9-0007ZY-1e for garchives@archives.gentoo.org; Thu, 17 May 2007 15:59:37 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.0/8.14.0) with SMTP id l4HFwHet021547; Thu, 17 May 2007 15:58:17 GMT Received: from spore.ath.cx (c-24-245-14-14.hsd1.mn.comcast.net [24.245.14.14]) by robin.gentoo.org (8.14.0/8.14.0) with ESMTP id l4HFngJr009180 for ; Thu, 17 May 2007 15:49:42 GMT Received: from pascal.spore.ath.cx (pascal.spore.ath.cx [192.168.1.100]) by spore.ath.cx (Postfix) with ESMTP id B97D4598C9 for ; Thu, 17 May 2007 10:49:41 -0500 (CDT) Date: Thu, 17 May 2007 10:49:41 -0500 From: Dan Farrell To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Corrupt USB pen drive Message-ID: <20070517104941.66af199f@pascal.spore.ath.cx> In-Reply-To: <200705171638.54090.michaelkintzios@gmail.com> References: <200705171236.28695.michaelkintzios@gmail.com> <20070517094559.14586f21@pascal.spore.ath.cx> <200705171638.54090.michaelkintzios@gmail.com> Organization: Spore, Ltd. X-Mailer: Claws Mail 2.6.1 (GTK+ 2.10.6; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: 984edcc6-e7ff-4ecc-9295-1e09e9592554 X-Archives-Hash: ffda12a96736a5d1174b941bf98a517e On Thu, 17 May 2007 16:38:44 +0100 Mick wrote: > On Thursday 17 May 2007 15:45, Dan Farrell wrote: > > On Thu, 17 May 2007 12:36:25 +0100 > > > > Mick wrote: > > > > > > > I tried to dd the boot sector so that I can look at it on my hard > > > drive, but it cannot access /dev/sda. Is there anything that I > > > can do with my Gentoo to recover the files on this USB? > > > > have you tried reading raw from the device like > > > > | dd if=/dev/sda of=sda.image > > > > ? That might do the recovery. How to get it out of the image is > > the same problem but once the backup succeeds you can plug it into a > > windows xp box and reformat, and you will probably end up with the > > same partition structure as originally. Then you can try to read > > the right part of the image out of the image, once you get the > > numbers from fdisk on the newly formatted drive, and end up with an > > image of sda1. From there you should be able to mount sda1 and > > read out the data, if it isn't corrupted. > > Thanks Dan, as I said above I tried to extract the MBR out of it by > running: > > dd if=/dev/sda of=/tmp/r1 bs=512 > > But couldn't access it whatsoever. > > > I also am wondering what happened to the partition table. I bet > > your coworker has a security-compromised box at home (oh, runs > > windows? right...) At any rate, if the data is recoverable, it may > > be possible to rebuild the partition table if you can find out > > where the partition started and ended. People have done it before, > > i've read online about it. > Hmm! Perhaps its broken. -- gentoo-user@gentoo.org mailing list