Thursday, January 26, 2012

OOPS! formatted my windows partition (ntfs) with Ubuntu 10.10 (ext3/4)

This happened a while back, and took me a while to realize what I had done.  I've just recently been seduced by Arch Linux and wanting to check it out, I need a place to install it and fiddle. Having that harddrive that I've left unplugged due to some hope of data recovery, I begin the journey of said data recovery.  Here is the song of my people.
nak@none:~/recover$ sudo dd if=/dev/sdb of=./recover.img
I create a directory to work in (recover) and use dd to copy all the bytes from the harddrive to a file, I put a .img extension because I don't know if it would be considered an ISO or what... it's just the raw byte-age of the disc.
I plan to take recover.img and run it through `foremost` -- until then I wait for ~250 billion bytes to be copied from one drive to the other drive.

--after washing dishes and listening to a minimal techno mix--

488397168+0 records in
488397168+0 records out
250059350016 bytes (250 GB) copied, 3058.94 s, 81.7 MB/s
alright! So I downloaded and installed the latest version of foremost:
wget http://foremost.sourceforge.net/pkg/foremost-1.5.7.tar.gz
tar zxvf foremost-1.5.7.tar.gz
cd foremost...etc
make
sudo make install

foremost -t all -v -T -q -i recover.img

Finish: Thu Jan 26 14:45:29 2012

88528 FILES EXTRACTED
   
jpg:= 27888
gif:= 7371
bmp:= 1723
wmv:= 237
mp4:= 28
rif:= 2851
htm:= 718
ole:= 560
zip:= 1225
rar:= 112
exe:= 22253
png:= 23084
mpg:= 2
pdf:= 476
------------------------------------------------------------------

Foremost finished at Thu Jan 26 14:45:29 2012
...and now I've got a bunch of files (and corrupted files) that I may or may not trudge through to see if there's anything that I forgot I needed.

Peace out, hope this helps someone.

No comments:

Post a Comment