Options
Data Recovery from windows partition
Hi People,
Ok so I took a dd image of the bad hard drive, stored it on a usb external drive as an iso img file on Friday.
Now I am using Knoppix to try and mount the iso and try to recover the data.
So I tried:-
su -
mkdir /mnt/brokendisk/
mount -t ntfs -o loop /media/sdb1/broken_image/image.iso /mnt/brokendisk
But it just says the NTFS signature is missing...Failed to mount.
Am I missing something or should I be able to mount this iso and try and view the bad windows paritions.
Any help greatly appreciated!
Pash
Ok so I took a dd image of the bad hard drive, stored it on a usb external drive as an iso img file on Friday.
Now I am using Knoppix to try and mount the iso and try to recover the data.
So I tried:-
su -
mkdir /mnt/brokendisk/
mount -t ntfs -o loop /media/sdb1/broken_image/image.iso /mnt/brokendisk
But it just says the NTFS signature is missing...Failed to mount.
Am I missing something or should I be able to mount this iso and try and view the bad windows paritions.
Any help greatly appreciated!
Pash
DevOps Engineer and Security Champion. https://blog.pash.by - I am trying to find my writing style, so please bear with me.
Comments
-
Optionscarboncopy Member Posts: 259Did you try without the -t ntfs?
mount -o loop /media/sdb1/broken_image/image.iso /mnt/brokendisk -
OptionsPash Member Posts: 1,600 ■■■■■□□□□□carboncopy wrote: »Did you try without the -t ntfs?
mount -o loop /media/sdb1/broken_image/image.iso /mnt/brokendisk
yeh i did but it says I must specify a file system type as well. I tried with the -o force command as well.DevOps Engineer and Security Champion. https://blog.pash.by - I am trying to find my writing style, so please bear with me. -
OptionsRobertKaucher Member Posts: 4,299 ■■■■■■■■■■mount -o loop -t iso9660 /media/sdb1/broken_image/image.iso /mnt/brokendisk
The file system is iso96600. Give this a try. When you copied it to an ISO the NTFS went out the door. -
OptionsPash Member Posts: 1,600 ■■■■■□□□□□Thx for replies guys.
Well if in doubt always ask a colleague, especially one who is good in data recovery. The paritions are well and truly borged, but this app called photorec actually recovers all files on a mounted ISO. Awesome bit of software, although it will take 30h to complete (using usb drives as we dont have any spare larger drives in the office).
PashDevOps Engineer and Security Champion. https://blog.pash.by - I am trying to find my writing style, so please bear with me. -
OptionsPash Member Posts: 1,600 ■■■■■□□□□□Hi Rob,
Not all the files I needed as of yet. Photorec doesnt recover fragmented files, some of the files this guy wants recovering are .vb files and I havent seen any come through as of yet. I am begining to think there is also a fault on the disk maybe. Worst case I may have to send it off to one of these data recovery companies that charge through the roof but generally get your data back in tact!
Cheers,
PashDevOps Engineer and Security Champion. https://blog.pash.by - I am trying to find my writing style, so please bear with me.