Re: Help with TestDisk

2015-04-30 Thread Frédéric Marchal
2015-04-30 5:02 GMT+02:00 Seeker :
>
> On 4/29/2015 5:41 AM, German wrote:
>>
>> Thank you for the effort explaining all that to me. Have a great day.
>>
> Good luck, if photorec doesn't do it for you either, I have used the Windows 
> version of R-Studio with some success.

"Foremost" can recognize and recover more file types than photorec
(http://foremost.sourceforge.net/).

There is a Debian package.

If the partition table is as damaged as it looks, run foremost on the
whole disk:

foremost /dev/sdd

Note that it can only recover supported file types. It won't recover everything.

Frederic


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAJ7R-8QHS+URdZhSqnT-DOkQkCaqUhiAo_G=ezwgzsgoiv-...@mail.gmail.com



Re: Help with TestDisk

2015-04-29 Thread Seeker



On 4/29/2015 5:41 AM, German wrote:

On Tue, 28 Apr 2015 22:24:50 -0700
Seeker  wrote:



On 4/28/2015 8:03 PM, German wrote:

On Tue, 28 Apr 2015 19:06:29 -0700
Seeker  wrote:


As you can see, there are two directories, but how to view contents of them I 
have no clue. Enter, P, Right does nothing.
In text based programs one dot represents the current directory, two 
dots represents one level up from the

current directory.

When you hit 'P' in testdisk to list the contents of the partition, it 
starts you in the root of the parition. So no
list of files and folders indicates no files and folders are recognized 
in the partition it is showing you. Being
at the root of the partition there are no levels above to go to when 
selecting the two dots and hitting 'enter'.



Was this after a deep scan?

After deep scan I got one FAT partition 32 MB in size, what is it and what it 
has to do with NTFS I also have no clue.
The error message from the mount attempt was attempting to mount a 
partition as ntfs.


It's fairly common for drives to ship with one small parition to hold 
the software that ships with the drive and
a larger partition for backup/data storage. Often the small partition 
would be FAT and the large one NTFS.


I think that physically ok. I just was installing Lubuntu to my 
computer and forgot to unplug this USB drive and installer probed it 
and done to it something nasty. 

As Murphy said "Anything that can happen, will happen".

Could have been a bug in the installer, could be something else that 
just happened to occur during the

Lubuntu install process.


Thank you for the effort explaining all that to me. Have a great day.

Good luck, if photorec doesn't do it for you either, I have used the 
Windows version of R-Studio with some success.
Have not tried the Linux version and the version I have is old so looks 
quite a bit different that the screen shots

at at the web site.

There is a trial version so you can see if it will at least show you 
some files.


http://www.r-studio.com/data_recovery_linux/Download.shtml

Don't know about this next one, no Linux version, but looks like they 
have a trial available as a bootable disk.


http://www.prosofteng.com/datarescuepc3/datarescuepcdemo/

Just downloaded it, it's provided as a zip file that extracts to a .exe 
file, so it may or may not do what it needs to

to create a bootable disk in Wine.

Later, Seeker


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/55419b30.6050...@comcast.net



Re: Help with TestDisk

2015-04-29 Thread German
On Tue, 28 Apr 2015 22:24:50 -0700
Seeker  wrote:

> 
> 
> On 4/28/2015 8:03 PM, German wrote:
> > On Tue, 28 Apr 2015 19:06:29 -0700
> > Seeker  wrote:
> >
> >>
> >> On 4/28/2015 6:09 PM, German wrote:
> >>> My USB drive won't mount. I tried TestDisk, but I am not sure what to do 
> >>> and how to procede. Are there any experts out there with TestDisk 
> >>> knowledge? Also, if there are, could anyone tell me what is good site to 
> >>> attach screenshots? Thanks
> >>>
> >> The testdisk web site has a pretty good sample session so you can see
> >> what it should look like.
> >>
> >> http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step
> >>
> >> Later, Seeker
> >>
> > It is still confusing. Here where I got stucked. Maybe someone can chime 
> > in. Thanks.
> >
> > http://forum.cgsecurity.org/phpBB3/help-with-restoring-usb-drive-t4953.html
> 
> Right from the beginning this sounds bad
> 
> /Input/output error//
> //Failed to read of MFT, mft=17625 count=1 br=-1: Input/output error//
> //Inode is corrupt (5): Input/output error//
> //Index root attribute missing in directory inode 5: Input/output error//
> //Failed to mount '/dev/sdc1': Input/output error/
> 
> MFT tables are low level indexes in the NTFS file system, if they can't 
> be read
> that's a big issue.
> 
> The screenshot here
> 
> http://forum.cgsecurity.org/phpBB3/help-with-restoring-usb-drive-t4953.html#p15748
> 
> looks like you already got the partition list and hit 'P' to see a list 
> of files.
> You should be seeing a list of files and directories at that point, none 
> are visible
> in the screenshot, another bad sign.

As you can see, there are two directories, but how to view contents of them I 
have no clue. Enter, P, Right does nothing.
> 
> Was this after a deep scan?

After deep scan I got one FAT partition 32 MB in size, what is it and what it 
has to do with NTFS I also have no clue.

> 
> Was the partition listed more than once, and if so did you try to view 
> the files in all
> listings for the partition?
> 
> If the cradle for the goflex has SATA connectors that plug into the HDD 
> like the one
> shown here...
> 
> http://www.amazon.com/Seagate-GoFlex-Desktop-Adapter-PCI-Express/dp/B00HWZ6OYC
> 
> My next step, would be to plug the goflex in to the SATA power and data 
> cable in a
> desktop system. When plugged in on USB more is done in software, the 
> SATA controller
> on the motherboard is better able to recover from errors if there is 
> more going on than
>   just filesystem corruption.

Unfortunately I don't have now any desktop computer and I am not sure if that's 
possible re-assamble this GoFlex drive.
> 
> I've dealt with a few of the goflex drives and had to shave the plastic 
> on the SATA power
> and data cable with a razor blade to get them to fit into the connectors 
> on the drive without
>   taking the enclosure apart.
> 
> Typically at this point I would run the Gnome disk utility, and do a 
> full smart test on the
> hard drive. If the drive already has errors recorded that the disk 
> utility doesn't like it may
>   give you an indication of this when you run it. You can also view a 
> list of Smart data in the
> disk utility. Pending remaps and uncorrectable errors are a couple of 
> the more significant
> things to look at.
> 
> Sector remaps only happen on a write, so a handful of pending I would 
> not consider an
> automatic failure, if you are getting into the neighborhood of ten or 
> more I would question
> the reliability of the drive.
> 
> This could be done from the command line with smartmon tools, but I'm 
> not familiar with
> it's usage.
> 
> If the disk physically looks good, then I would try testdisk again.
> 
> If you can get access to the files, you want to have another drive ready 
> to copy the files
> to or enough free space on the drive you are running from to hold the files.
> 

As I said before, I got two directories shown. What they are and how to view 
the content of them I have no clue. Please enlighten me.


> If you get an indication that the disk is failing, then the question of 
> how important the data
> is to you comes into play, poking at a disk that is physically failing 
> could reduce the chance
> of a professional data recovery service being able to recover the files.

I think that physically ok. I just was installing Lubuntu to my computer and 
forgot to unplug this USB drive and installer probed it and done to it 
something nasty.

> 
> If testdisk still doesn't show you and files and directories, then I 
> would try photorec.
> 
> Photorec doesn't do well with files that are fragmented, and if it can 
> recognize files may give
> you numbers for names, instead of the actual file names, it does have a 
> brute force option
> that will try to piece the file chains together and match the files to 
> names. The brute force
> option has to be enabled before doing the scan.
> 
> http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step
> 
> If you use the brute force op

Re: Help with TestDisk

2015-04-28 Thread Seeker



On 4/28/2015 8:03 PM, German wrote:

On Tue, 28 Apr 2015 19:06:29 -0700
Seeker  wrote:



On 4/28/2015 6:09 PM, German wrote:

My USB drive won't mount. I tried TestDisk, but I am not sure what to do and 
how to procede. Are there any experts out there with TestDisk knowledge? Also, 
if there are, could anyone tell me what is good site to attach screenshots? 
Thanks


The testdisk web site has a pretty good sample session so you can see
what it should look like.

http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step

Later, Seeker


It is still confusing. Here where I got stucked. Maybe someone can chime in. 
Thanks.

http://forum.cgsecurity.org/phpBB3/help-with-restoring-usb-drive-t4953.html


Right from the beginning this sounds bad

/Input/output error//
//Failed to read of MFT, mft=17625 count=1 br=-1: Input/output error//
//Inode is corrupt (5): Input/output error//
//Index root attribute missing in directory inode 5: Input/output error//
//Failed to mount '/dev/sdc1': Input/output error/

MFT tables are low level indexes in the NTFS file system, if they can't 
be read

that's a big issue.

The screenshot here

http://forum.cgsecurity.org/phpBB3/help-with-restoring-usb-drive-t4953.html#p15748

looks like you already got the partition list and hit 'P' to see a list 
of files.
You should be seeing a list of files and directories at that point, none 
are visible

in the screenshot, another bad sign.

Was this after a deep scan?

Was the partition listed more than once, and if so did you try to view 
the files in all

listings for the partition?

If the cradle for the goflex has SATA connectors that plug into the HDD 
like the one

shown here...

http://www.amazon.com/Seagate-GoFlex-Desktop-Adapter-PCI-Express/dp/B00HWZ6OYC

My next step, would be to plug the goflex in to the SATA power and data 
cable in a
desktop system. When plugged in on USB more is done in software, the 
SATA controller
on the motherboard is better able to recover from errors if there is 
more going on than

 just filesystem corruption.

I've dealt with a few of the goflex drives and had to shave the plastic 
on the SATA power
and data cable with a razor blade to get them to fit into the connectors 
on the drive without

 taking the enclosure apart.

Typically at this point I would run the Gnome disk utility, and do a 
full smart test on the
hard drive. If the drive already has errors recorded that the disk 
utility doesn't like it may
 give you an indication of this when you run it. You can also view a 
list of Smart data in the
disk utility. Pending remaps and uncorrectable errors are a couple of 
the more significant

things to look at.

Sector remaps only happen on a write, so a handful of pending I would 
not consider an
automatic failure, if you are getting into the neighborhood of ten or 
more I would question

the reliability of the drive.

This could be done from the command line with smartmon tools, but I'm 
not familiar with

it's usage.

If the disk physically looks good, then I would try testdisk again.

If you can get access to the files, you want to have another drive ready 
to copy the files

to or enough free space on the drive you are running from to hold the files.

If you get an indication that the disk is failing, then the question of 
how important the data
is to you comes into play, poking at a disk that is physically failing 
could reduce the chance

of a professional data recovery service being able to recover the files.

If testdisk still doesn't show you and files and directories, then I 
would try photorec.


Photorec doesn't do well with files that are fragmented, and if it can 
recognize files may give
you numbers for names, instead of the actual file names, it does have a 
brute force option
that will try to piece the file chains together and match the files to 
names. The brute force

option has to be enabled before doing the scan.

http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step

If you use the brute force option be prepared for it to take days to 
analyze the partition.


Later, Seeker






Re: Help with TestDisk

2015-04-28 Thread German
On Tue, 28 Apr 2015 19:06:29 -0700
Seeker  wrote:

> 
> 
> On 4/28/2015 6:09 PM, German wrote:
> > My USB drive won't mount. I tried TestDisk, but I am not sure what to do 
> > and how to procede. Are there any experts out there with TestDisk 
> > knowledge? Also, if there are, could anyone tell me what is good site to 
> > attach screenshots? Thanks
> >
> The testdisk web site has a pretty good sample session so you can see 
> what it should look like.
> 
> http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step
> 
> Later, Seeker
> 

It is still confusing. Here where I got stucked. Maybe someone can chime in. 
Thanks.

http://forum.cgsecurity.org/phpBB3/help-with-restoring-usb-drive-t4953.html
> 
> -- 
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: https://lists.debian.org/55403ca5.5050...@comcast.net
> 


-- 
German 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150428230321.1fdc448bf9d0dd4079fcd...@gmail.com



Re: Help with TestDisk

2015-04-28 Thread Seeker



On 4/28/2015 6:09 PM, German wrote:

My USB drive won't mount. I tried TestDisk, but I am not sure what to do and 
how to procede. Are there any experts out there with TestDisk knowledge? Also, 
if there are, could anyone tell me what is good site to attach screenshots? 
Thanks

The testdisk web site has a pretty good sample session so you can see 
what it should look like.


http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step

Later, Seeker


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/55403ca5.5050...@comcast.net



Help with TestDisk

2015-04-28 Thread German
My USB drive won't mount. I tried TestDisk, but I am not sure what to do and 
how to procede. Are there any experts out there with TestDisk knowledge? Also, 
if there are, could anyone tell me what is good site to attach screenshots? 
Thanks

-- 
German 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150428210947.bfd5865aecff65fae7e95...@gmail.com