Data Recovery from windows partition

Hi People,

Ok so I took a dd image of the bad hard drive, stored it on a usb external drive as an iso img file on Friday.

Now I am using Knoppix to try and mount the iso and try to recover the data.

So I tried:-

su -

mkdir /mnt/brokendisk/

mount -t ntfs -o loop /media/sdb1/broken_image/image.iso /mnt/brokendisk

But it just says the NTFS signature is missing...Failed to mount.

Am I missing something or should I be able to mount this iso and try and view the bad windows paritions.

Any help greatly appreciated!

Pash

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

carboncopy

Did you try without the -t ntfs?

mount -o loop /media/sdb1/broken_image/image.iso /mnt/brokendisk

Pash

carboncopy wrote: »

Did you try without the -t ntfs?

mount -o loop /media/sdb1/broken_image/image.iso /mnt/brokendisk

yeh i did but it says I must specify a file system type as well. I tried with the -o force command as well.

RobertKaucher

mount -o loop -t iso9660 /media/sdb1/broken_image/image.iso /mnt/brokendisk

The file system is iso96600. Give this a try. When you copied it to an ISO the NTFS went out the door.

Pash

Thx for replies guys.

Well if in doubt always ask a colleague, especially one who is good in data recovery. The paritions are well and truly borged, but this app called photorec actually recovers all files on a mounted ISO. Awesome bit of software, although it will take 30h to complete (using usb drives as we dont have any spare larger drives in the office).

Pash

RobertKaucher

Did you get this recovered Pash?

Pash

Hi Rob,

Not all the files I needed as of yet. Photorec doesnt recover fragmented files, some of the files this guy wants recovering are .vb files and I havent seen any come through as of yet. I am begining to think there is also a fault on the disk maybe. Worst case I may have to send it off to one of these data recovery companies that charge through the roof but generally get your data back in tact!

Cheers,

Pash