+ Reply to Thread
Results 1 to 7 of 7
  1. Senior Member Pash's Avatar
    Join Date
    Nov 2006
    Location
    United Kingdom
    Posts
    1,615

    Certifications
    Comptia Security+, AWS CSA-A
    #1

    Default Data Recovery from windows partition

    Hi People,

    Ok so I took a dd image of the bad hard drive, stored it on a usb external drive as an iso img file on Friday.

    Now I am using Knoppix to try and mount the iso and try to recover the data.

    So I tried:-

    su -

    mkdir /mnt/brokendisk/

    mount -t ntfs -o loop /media/sdb1/broken_image/image.iso /mnt/brokendisk

    But it just says the NTFS signature is missing...Failed to mount.

    Am I missing something or should I be able to mount this iso and try and view the bad windows paritions.

    Any help greatly appreciated!

    Pash
    Reply With Quote Quote  

  2. SS -->
  3. Senior Member
    Join Date
    Nov 2008
    Location
    Florida
    Posts
    258

    Certifications
    some
    #2
    Did you try without the -t ntfs?

    mount -o loop /media/sdb1/broken_image/image.iso /mnt/brokendisk
    Reply With Quote Quote  

  4. Senior Member Pash's Avatar
    Join Date
    Nov 2006
    Location
    United Kingdom
    Posts
    1,615

    Certifications
    Comptia Security+, AWS CSA-A
    #3
    Quote Originally Posted by carboncopy View Post
    Did you try without the -t ntfs?

    mount -o loop /media/sdb1/broken_image/image.iso /mnt/brokendisk
    yeh i did but it says I must specify a file system type as well. I tried with the -o force command as well.
    Reply With Quote Quote  

  5. BOBBY_TABLES RobertKaucher's Avatar
    Join Date
    Dec 2007
    Location
    Lebanon, Ohio - USA
    Posts
    4,274

    Certifications
    MCSD Web Apps/SharePoint Applications, MCITP: DBA 2005/2008, EA, EDA7, Linux+, Sec+, MCSE, MCDST, MCTS
    #4
    mount -o loop -t iso9660 /media/sdb1/broken_image/image.iso /mnt/brokendisk

    The file system is iso96600. Give this a try. When you copied it to an ISO the NTFS went out the door.
    Reply With Quote Quote  

  6. Senior Member Pash's Avatar
    Join Date
    Nov 2006
    Location
    United Kingdom
    Posts
    1,615

    Certifications
    Comptia Security+, AWS CSA-A
    #5
    Thx for replies guys.

    Well if in doubt always ask a colleague, especially one who is good in data recovery. The paritions are well and truly borged, but this app called photorec actually recovers all files on a mounted ISO. Awesome bit of software, although it will take 30h to complete (using usb drives as we dont have any spare larger drives in the office).

    Pash
    Reply With Quote Quote  

  7. BOBBY_TABLES RobertKaucher's Avatar
    Join Date
    Dec 2007
    Location
    Lebanon, Ohio - USA
    Posts
    4,274

    Certifications
    MCSD Web Apps/SharePoint Applications, MCITP: DBA 2005/2008, EA, EDA7, Linux+, Sec+, MCSE, MCDST, MCTS
    #6
    Did you get this recovered Pash?
    Reply With Quote Quote  

  8. Senior Member Pash's Avatar
    Join Date
    Nov 2006
    Location
    United Kingdom
    Posts
    1,615

    Certifications
    Comptia Security+, AWS CSA-A
    #7
    Hi Rob,

    Not all the files I needed as of yet. Photorec doesnt recover fragmented files, some of the files this guy wants recovering are .vb files and I havent seen any come through as of yet. I am begining to think there is also a fault on the disk maybe. Worst case I may have to send it off to one of these data recovery companies that charge through the roof but generally get your data back in tact!

    Cheers,

    Pash
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks