From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.62) (envelope-from ) id 1HoiA4-0000jy-NP for garchives@archives.gentoo.org; Thu, 17 May 2007 15:45:05 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.0/8.14.0) with SMTP id l4HFhk30005444; Thu, 17 May 2007 15:43:46 GMT Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.175]) by robin.gentoo.org (8.14.0/8.14.0) with ESMTP id l4HFdDDk000689 for ; Thu, 17 May 2007 15:39:13 GMT Received: by ug-out-1314.google.com with SMTP id z38so312260ugc for ; Thu, 17 May 2007 08:39:13 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:from:reply-to:to:subject:date:user-agent:references:in-reply-to:mime-version:content-type:content-transfer-encoding:message-id; b=HGAr86EK6YfeN3qgPItCeBC5uVp9aLKkW6BucFwZvtd4GzRrANqnleGU9IW8n/eHFs4Ot9tMlqKDlKpmBUL66NNHMDjwBScywq6qV+u8n6doPTcOrXhXqWI/KZI9yNFmf20U8IUVh51IhwFwxBiMB+/mSuGLhBPN+Is8Plk6k0A= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:from:reply-to:to:subject:date:user-agent:references:in-reply-to:mime-version:content-type:content-transfer-encoding:message-id; b=Wk3gitCiDlyYRIN3P2FhMZ5AgKNhDO6ZKWKs6MNxRNcE/aVAccHEimZnhZmd6KjIlY8zh2Us3esqrV0LQRKuKfFkvugYWa0EnfU4R7/WA/CampD5ddhuaGQyApJEMGQWNBXVnVntggVpEoLmIqwb4g33eXpBaqdSxjmXhiTj/hY= Received: by 10.67.30.6 with SMTP id h6mr358925ugj.1179416352549; Thu, 17 May 2007 08:39:12 -0700 (PDT) Received: from lappy ( [86.133.184.117]) by mx.google.com with ESMTP id 32sm676200ugf.2007.05.17.08.39.12; Thu, 17 May 2007 08:39:12 -0700 (PDT) From: Mick To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Corrupt USB pen drive Date: Thu, 17 May 2007 16:38:44 +0100 User-Agent: KMail/1.9.5 References: <200705171236.28695.michaelkintzios@gmail.com> <20070517094559.14586f21@pascal.spore.ath.cx> In-Reply-To: <20070517094559.14586f21@pascal.spore.ath.cx> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart4561226.OVtc3QueNi"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200705171638.54090.michaelkintzios@gmail.com> X-Archives-Salt: ac6bca84-657a-4cfa-99c8-d84ea825662f X-Archives-Hash: f96f880ec6740b8ebe687221874b87f5 --nextPart4561226.OVtc3QueNi Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Thursday 17 May 2007 15:45, Dan Farrell wrote: > On Thu, 17 May 2007 12:36:25 +0100 > > Mick wrote: > > > > I tried to dd the boot sector so that I can look at it on my hard > > drive, but it cannot access /dev/sda. Is there anything that I can > > do with my Gentoo to recover the files on this USB? > > have you tried reading raw from the device like > > | dd if=3D/dev/sda of=3Dsda.image > > ? That might do the recovery. How to get it out of the image is the > same problem but once the backup succeeds you can plug it into a > windows xp box and reformat, and you will probably end up with the same > partition structure as originally. Then you can try to read the right > part of the image out of the image, once you get the numbers from fdisk > on the newly formatted drive, and end up with an image of sda1. From > there you should be able to mount sda1 and read out the data, if it > isn't corrupted. Thanks Dan, as I said above I tried to extract the MBR out of it by running: dd if=3D/dev/sda of=3D/tmp/r1 bs=3D512 But couldn't access it whatsoever. > I also am wondering what happened to the partition table. I bet your > coworker has a security-compromised box at home (oh, runs windows? > right...) At any rate, if the data is recoverable, it may be possible > to rebuild the partition table if you can find out where the partition > started and ended. People have done it before, i've read online about > it. =2D-=20 Regards, Mick --nextPart4561226.OVtc3QueNi Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQBGTHcG5Fp0QerLYPcRAjQ6AKCWS+h5uy0v8m7dpGwySTsyQNEW6gCgqQ6o Foy99WOCuSehFcQkVNSSZ6I= =6Y6p -----END PGP SIGNATURE----- --nextPart4561226.OVtc3QueNi-- -- gentoo-user@gentoo.org mailing list