Re: [gentoo-user] Corrupt USB pen drive

[Mick <michaelkintzios@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 1516 bytes --]

On Thursday 17 May 2007 15:45, Dan Farrell wrote:
> On Thu, 17 May 2007 12:36:25 +0100
>
> Mick <michaelkintzios@gmail.com> wrote:

> >
> > I tried to dd the boot sector so that I can look at it on my hard
> > drive, but it cannot access /dev/sda.  Is there anything that I can
> > do with my Gentoo to recover the files on this USB?
>
> have you tried reading raw from the device like
>
> | dd if=/dev/sda of=sda.image
>
> ?  That might do the recovery.  How to get it out of the image is the
> same problem but once the backup succeeds you can plug it into a
> windows xp box and reformat, and you will probably end up with the same
> partition structure as originally.  Then you can try to read the right
> part of the image out of the image, once you get the numbers from fdisk
> on the newly formatted drive, and end up with an image of sda1.  From
> there you should be able to mount sda1 and read out the data, if it
> isn't corrupted.

Thanks Dan, as I said above I tried to extract the MBR out of it by running:

dd if=/dev/sda of=/tmp/r1 bs=512

But couldn't access it whatsoever.

> I also am wondering what happened to the partition table.  I bet your
> coworker has a security-compromised box at home (oh, runs windows?
> right...)  At any rate, if the data is recoverable, it may be possible
> to rebuild the partition table if you can find out where the partition
> started and ended.  People have done it before, i've read online about
> it.

-- 
Regards,
Mick

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]