> Apologies if this is a bit off topic.
>
> Does anyone know of a way to copy an entire hard drive, including the
> deleted files and everything? I basically want to have the ability to
> use the copy to find some files that a friend deleted on his Win98
> computer, but I want to let him have the ability to continue to use his
> drive while I'm doing it. Right now, I told him not to write anything to
> his drive, so he's kind of stuck untill I find the files.
>
> I know that I could dd the drive, and give HIM the copy. But if there's
> a way to let him keep the original, it would be preferred. Thanks.
Copy the whole drive to a file on your linux partition or whereever.
dd if=/dev/hd<index of your friend's hd> of=/root/diskimage
Then give the harddisk back and mount the file using loopback device (add
this into your kernel!):
mount -o loop -t vfat /root/diskimage /mnt
You can then see the filesystem on /mnt and try finding the files.
--
Raoul Boenisch, Winkhauser Talweg 165, 45473 Muelheim an der Ruhr, Germany
homepage: http://www.raoul.home.pages.de/ home phone: +49 208 764257
Reply-To: [EMAIL PROTECTED]
