Hi,
to...@tuxteam.de wrote:
> Testdisk is more about the file system structure, whereas PhotoRec tries
> to rescue (portions of) files based on content.
Since the partition now begins by a valid and complete ISO 9660 filesystem
it might be necessary to deface the filesystem before any search for
remnants of the original file system structure can get onto the right track.
So if the rescue effort does not show sufficient results, then the whole
ISO filesystem could be erased in order to point the rescue team to the
interesting rest of the partition.
Erasing the whole ISO would be quite similar to the original mistake:
- Determine the byte size of the ISO image that was copied to /dev/sda5.
- To get some reasonable throughput, divide the byte size by 2048 which
will yield the block count. Let's assume the result is 714752.
- Now zeroize the ISO's range in /dev/sda5:
dd if=/dev/zero bs=2048 count=714752 of=/dev/sda5
(If enough empty storage is available, then i'd advise to make a plain
copy of /dev/sda5 before beginning to fiddle with it.)
Have a nice day :)
Thomas
