Re: Formatted Disk

[Hans-J. Ullrich]

Am Freitag, 16. August 2013 schrieb Ralf Mardorf:
> On Fri, 2013-08-16 at 10:30 +0200, Jochen Spieker wrote:
> > Ethan Rosenberg, PhD:
> > > I have a usb drive, with data on it, that I [stupidly!!] tried to
> > > name using fdisk.  Of course, it erased the data.  I have not used
> > > the drive since then.  I think there is a method to "unformat" a
> > > drive. What shall I do now?
> > 
> > Generally, it should be possible to access the filesystem if you restore
> > the previous partitioning scheme. I don't think putting a label on a
> > partition should have destroyed existing partitions, but anyway.
> > 
> > If you cannot restore the old partition layout for some reason, you can
> > install testdisk and use the program "photorec". It can restore almost
> > anything, unless you write to the disk. Caveat: photorec will not
> > restore the directory layout. You will have one directory with
> > everything in it.
> 
> Before you do anything like making a backup with dd and/or use photorec
> or any other recovery tool of that kind, mount the USB stick read only.
> Until you haven't restore your data, mount it only read and write, when
> needed.

I often used a tool called "getdataback_for_fat" , and "getdataback_for_ntfs". 
There is a demo version available. 

If this does not work, you can try dd the drive to a file, and then extract 
your data from this file.

For this part I am using "deft-7.2", which is a forensic livesystem. Version 
7.2 is the last, with "hb4most" on it, a nice GUI for the famous tools 
"foremost" and/or "scalpel".

DEFT got also other tools on it. And it is linux! Debian based, as far as I 
know.

It also has other tools on it. For Windows thereis DARTS2 on the CD, which is 
also very mighty.

Hope this helps

Good luck!


Hans 




-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201308161838.33193.hans.ullr...@loop.de

Re: Formatted Disk

[Ralf Mardorf]

On Fri, 2013-08-16 at 10:30 +0200, Jochen Spieker wrote:
> Ethan Rosenberg, PhD:
> > 
> > I have a usb drive, with data on it, that I [stupidly!!] tried to
> > name using fdisk.  Of course, it erased the data.  I have not used
> > the drive since then.  I think there is a method to "unformat" a
> > drive. What shall I do now?
> 
> Generally, it should be possible to access the filesystem if you restore
> the previous partitioning scheme. I don't think putting a label on a
> partition should have destroyed existing partitions, but anyway.
> 
> If you cannot restore the old partition layout for some reason, you can
> install testdisk and use the program "photorec". It can restore almost
> anything, unless you write to the disk. Caveat: photorec will not
> restore the directory layout. You will have one directory with
> everything in it.

Before you do anything like making a backup with dd and/or use photorec
or any other recovery tool of that kind, mount the USB stick read only.
Until you haven't restore your data, mount it only read and write, when
needed.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1376660981.690.30.camel@archlinux

Re: Formatted Disk

[Ralf Mardorf]

On Fri, 2013-08-16 at 01:06 -0400, Ethan Rosenberg, PhD wrote:
> I think there is a method to "unformat" a drive. What shall 
> I do now?

Do you really mean "unformat"? Unformatted you can't use it anymore.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1376660502.690.26.camel@archlinux

Re: Formatted Disk

[Jochen Spieker]

Ethan Rosenberg, PhD:
> 
> I have a usb drive, with data on it, that I [stupidly!!] tried to
> name using fdisk.  Of course, it erased the data.  I have not used
> the drive since then.  I think there is a method to "unformat" a
> drive. What shall I do now?

Generally, it should be possible to access the filesystem if you restore
the previous partitioning scheme. I don't think putting a label on a
partition should have destroyed existing partitions, but anyway.

If you cannot restore the old partition layout for some reason, you can
install testdisk and use the program "photorec". It can restore almost
anything, unless you write to the disk. Caveat: photorec will not
restore the directory layout. You will have one directory with
everything in it.

J.
-- 
I'm being paid to act weirdly.
[Agree]   [Disagree]
 


signature.asc
Description: Digital signature

Re: Formatted Disk

[Darac Marjal]

On Fri, Aug 16, 2013 at 01:06:35AM -0400, Ethan Rosenberg, PhD wrote:
> Dear List -
> 
> I have a usb drive, with data on it, that I [stupidly!!] tried to
> name using fdisk.  Of course, it erased the data.  I have not used
> the drive since then.  I think there is a method to "unformat" a
> drive. What shall I do now?

If you've only used fdisk, then you've not erased your data, you've just
"lost" it. Like taking the index out of a book.

First of all, back up the USB disk so that if anything goes wrong, you
don't make things worse

 $ dd if=/dev/sdX of=~/Usb-stick.img

Next up, install "testdisk", then run "testdisk USB-stick.img". The
program should be fairly self-explanatory; it will scan the disk looking
for things that look like partitions and rewrite the partition table
accordingly. As you've not got disk corruption and you've only deleted
the partitions, it *should* go painlessly. :)



signature.asc
Description: Digital signature

Formatted Disk

[Ethan Rosenberg, PhD]

Dear List -

I have a usb drive, with data on it, that I [stupidly!!] tried to name 
using fdisk.  Of course, it erased the data.  I have not used the drive 
since then.  I think there is a method to "unformat" a drive. What shall 
I do now?


TIA

Ethan


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/520db35b.50...@hygeiabiomedical.com