b3ta.com qotw
You are not logged in. Login or Signup
Home » Question of the Week » Off Topic » Post 1229645 | Search
This is a question Off Topic

Are you a QOTWer? Do you want to start a thread that isn't a direct answer to the current QOTW? Then this place, gentle poster, is your friend.

(, Sun 1 Apr 2001, 1:00)
Pages: Latest, 837, 836, 835, 834, 833, ... 1

« Go Back | See The Full Thread

That's a bit of a sod to say the least.
Maybe Labs can shine some light on near-forensic recovery techniques that could get some stuff back from the abyss?
(, Tue 7 Jun 2011, 13:17, 3 replies, latest was 15 years ago)
Good idea that man

(, Tue 7 Jun 2011, 13:21, Reply)
I speak as one who had to reconstruct partition tables on an ext2 drive way back.
Reading kernel source (on another, still-working box) to figure out where master block copies were likely held was a little taxing ...
(, Tue 7 Jun 2011, 13:24, Reply)
The real problem here is that recovery software is built for particular file systems.
Most will work on your standard Windows architecture, some will work for Linux, but I haven't found a single one that can read Sky's file system.
(, Tue 7 Jun 2011, 13:24, Reply)
What was it formatted as before the Dirty Digger's gear barfed over it?

(, Tue 7 Jun 2011, 13:27, Reply)
I just chucked it in.
It was NTFS before, now it's whatever arcane system the Great Shaitan uses.
(, Tue 7 Jun 2011, 13:29, Reply)
Looks like it'll have been stomped on by FAT32 then ...
... judging by the limited snippets of the web I can see behind the office firewall. Not pretty at all, sadly.
(, Tue 7 Jun 2011, 13:40, Reply)
FAT32 is still readable by Windows, I think.
Perhaps you could get the computer to boot from the optical drive and bung an Ubuntu disc in, and have a look around the contents and see what is there?
(, Tue 7 Jun 2011, 13:44, Reply)
Yes FAT32 is still readable by Windows
It's still the most 'accessible' file system.
(, Tue 7 Jun 2011, 13:46, Reply)
Goodo.
Then what's to stop him using a smaller drive as a boot drive, and then rigging up the main one as a slave, and running recovery software on it?

From what I remember, stuff marked for deletion under Windows isn't actually deleted, it just lops a letter off the end of the file name.
(, Tue 7 Jun 2011, 13:49, Reply)
The problem is he's likely overwritten the MFT of the NTFS partition
Which keeps a 'list' of where parts of each file are stored. If that's not recoverable, the data is lost in unallocated clusters.
(, Tue 7 Jun 2011, 13:51, Reply)
Ah, that could be problematic.

(, Tue 7 Jun 2011, 14:00, Reply)
Not sure on near-forensic techniques/software
As I use professional stuff. Your best bet is with recovering the NTFS partition system as a whole, as digging in the unallocated clusters won't get as much back. Maybe Partition Magic might work?
(, Tue 7 Jun 2011, 13:42, Reply)
I'll download some freeware tonight and have a bash.
I didn't realise that Sky use some form of FAT32, that gives me a bit of hope.
(, Tue 7 Jun 2011, 14:28, Reply)

« Go Back | See The Full Thread

Pages: Latest, 837, 836, 835, 834, 833, ... 1