--- On Sat, 8/16/08, rinku24 <address@hidden> wrote:
From: rinku24 <address@hidden>
Subject: [Bug-ddrescue] ddrescue overwrote primary windows partition
To: address@hidden
Received: Saturday, August 16, 2008, 12:21 AM
Hi Guys,
I need your help. My external harddisk got corrupted when I connected with
Mac and accidently I selected yes for timemachine backup. So I googled it
and found that ddrescue could recover the data.
So I booted my windows machine with Knopix live CD and connected my external
hard drive. Than I ran a command
>ddrescue /dev/sda1 /dev/hda1 (screwed up. it supposed to be "ddrescue
/dev/sda1 /dev/hda1/recover.img where recover.img is file where data
will be
recovered).
HERE: /dev/sda1 is external hard drive
/dev/hda1 is windows hard drive
After ddrescue recovered 2GB of data, I realized that it is overwritting my
windows primary partition so I stopped it. But it was too late.
Now Again I ran ddrescue to recover data from my windows partition and
copied to another external hard drive
>sudo ddrescue /dev/hda1 /dev/sda1/recover.img
Which recovered almost 32GB of data.
Again I googled it and try to run fsck and mount but fails.
e.g
fsck -y /dev/sda1/recover.img
fsck -oloop /dev/sda1/recover.img
fsck -t ntfs-3g /dev/sda1/recorver.img
mount -t ntfs-3g /dev/sda1/recover.img /mnt/recovereddata
mount -tauto /dev/sda1/recover.img /mnt/recovereddata
mount -f /dev/sda1/recover.img /mnt/recoverdata
Than I decided to run testdisk again. When I ran test disk, it showed me two
partition
FAT32 29GB
HFS 2GB
Above information seem to be correct as total data in my windows disk were
32GB which ddrescue recovered and I overwrote around 2GB.
When I selected FAT32 and list files (option P), it doesn't show any data.
When I selected HFS, I don't get option P to list files
Again I selected FAT32 and selected option "Search" which is running
now and
it displays following info.
Disk /dev/sda1/recover.img - 34 GB / 32 GB - CHS 4179 255 63
Analyse cylinder 448/4178: 10%
FAT32 0 0 1 3915 253 63 62910477 [NO NAME]
Warning Incorrect number of heads/cylinder 16 (FAT) != 255 (HD)
FAT32 0 1 1 11747 253 63 188731494 [???????????]
Warning Incorrect number of heads/cylinder 16 (FAT) != 255 (HD)
FAT32 0 1 7 11747 254 6 188731494 [???????????]
HFS 343 147 9 345 251 54 38728 [F]
HFS 341 42 30 345 251 54 38728 [F]
HFS+ 357 108 15 991628468 163 44
471905846
HFS+ 386 62 31 2190126255 115 38 0
Hi Rinku.
Your filesystem is borked. I doubt you will have any luck at restoring the partition/filesystem as it was before. You should have a lot of success carving out files using photorec or Foremost, though.
https://help.ubuntu.com/community/DataRecovery#Extract%20individual%20files%20from%20recovered%20image
I hope this helps.
Andrew Zajac
|