[opensuse] Help, please! Did I permanently erase my data?
Hi all, I wanted to write leap 42.3 on an USB stick. Unfortunately I did not realize that my 1 TB Toshiba external HDD was also plugged in and mounted. Imagewriter selected it and offered to unmount it and I agreed. Only a few seconds later I knew I made a big mistake. I iimediately cancelled writing. Now I cannot acces data on it. Is it possible to get back at least some of data? lsusb still knows about it: Bus 002 Device 005: ID 0480:a00c Toshiba America Info. Systems, Inc. Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub Bus 001 Device 004: ID 8087:0a2a Intel Corp. Bus 001 Device 003: ID 0bda:57ed Realtek Semiconductor Corp. Bus 001 Device 002: ID 0458:003a KYE Systems Corp. (Mouse Systems) NetScroll+ Mini Traveler / Genius NetScroll 120 Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub Thanks: Albert
On 2017-07-27 15:27, Albert Oszkó wrote:
Hi all,
I wanted to write leap 42.3 on an USB stick. Unfortunately I did not realize that my 1 TB Toshiba external HDD was also plugged in and mounted. Imagewriter selected it and offered to unmount it and I agreed. Only a few seconds later I knew I made a big mistake. I iimediately cancelled writing. Now I cannot acces data on it. Is it possible to get back at least some of data?
Some, yes. You erased the first 4 GB of it, where the crucial metadata indexes are. What filesystem was it? Do you have disk space to create an image backup of it with dd in another disk? You need to use a tool that scans the whole disk searching for file patterns and saving them in another place, one by one. May run for many hours. Photos/videos are easy: photorec. Other files are more difficult in opensource, no tools. Maybe you have to use payware (Restorer Ultimate did good for me once). From my notes: PhotoRec for sticks, good for multimeda files. Photos. http://www.cgsecurity.org/wiki/PhotoRec f3 http://oss.digirati.com.br/f3/ recovers analyzes sticks. foremost http://foremost.sourceforge.net/ http://en.wikipedia.org/wiki/Foremost_(software) Foremost is a forensic data recovery program for Linux used to recover files using their headers, footers, and data structures through a process known as file carving.[3] Although written for law enforcement use, it is freely available and can be used as a general data recovery tool.[2] ext4magic (from greg) - There is also some commercial software, apparently. http://www.pdatungsteno.com/2006/05/26/recuperar-datos-de-tarjetas-de-memori... http://www.dzoom.org.es/noticia-1780.html http://www.freedownloadmanager.org/es/downloads/recuperación_de_tarjeta_flash_gratis/ http://www.ondata.es/recuperar/dispositivos-fotograficos.htm Restorer Ultimate. http://www.restorer-ultimate.com/ payware, good. clonar: http://www.clonezilla.org/ ewfacquire, ewfverify, and ewfexport all in the ewftools distros: testdisk -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))
2017-07-27 15:36 keltezéssel, Carlos E. R. írta:
On 2017-07-27 15:27, Albert Oszkó wrote:
Hi all,
I wanted to write leap 42.3 on an USB stick. Unfortunately I did not realize that my 1 TB Toshiba external HDD was also plugged in and mounted. Imagewriter selected it and offered to unmount it and I agreed. Only a few seconds later I knew I made a big mistake. I iimediately cancelled writing. Now I cannot acces data on it. Is it possible to get back at least some of data? Some, yes. You erased the first 4 GB of it, where the crucial metadata indexes are.
What filesystem was it?
Do you have disk space to create an image backup of it with dd in another disk?
You need to use a tool that scans the whole disk searching for file patterns and saving them in another place, one by one. May run for many hours.
Photos/videos are easy: photorec. Other files are more difficult in opensource, no tools. Maybe you have to use payware (Restorer Ultimate did good for me once).
From my notes:
PhotoRec for sticks, good for multimeda files. Photos. http://www.cgsecurity.org/wiki/PhotoRec f3 http://oss.digirati.com.br/f3/ recovers analyzes sticks.
foremost http://foremost.sourceforge.net/ http://en.wikipedia.org/wiki/Foremost_(software) Foremost is a forensic data recovery program for Linux used to recover files using their headers, footers, and data structures through a process known as file carving.[3] Although written for law enforcement use, it is freely available and can be used as a general data recovery tool.[2]
ext4magic (from greg) - There is also some commercial software, apparently.
http://www.pdatungsteno.com/2006/05/26/recuperar-datos-de-tarjetas-de-memori... http://www.dzoom.org.es/noticia-1780.html
http://www.freedownloadmanager.org/es/downloads/recuperación_de_tarjeta_flash_gratis/ http://www.ondata.es/recuperar/dispositivos-fotograficos.htm
Restorer Ultimate. http://www.restorer-ultimate.com/ payware, good.
clonar: http://www.clonezilla.org/
ewfacquire, ewfverify, and ewfexport all in the ewftools
distros: testdisk
Thanks for the quick reply! I am not sure what filesystem it was. Maybe NTFS, but this is not 100%. At the moment I do not have another disk to copy (dd) all the cca 700 G data from that drive, but I can get one. Many data are also available elsewhere, but I have several photo/video files that are the only copy. Albert
On 2017-07-27 15:47, Albert Oszkó wrote:
2017-07-27 15:36 keltezéssel, Carlos E. R. írta:
Thanks for the quick reply!
I am not sure what filesystem it was. Maybe NTFS, but this is not 100%. At the moment I do not have another disk to copy (dd) all the cca 700 G data from that drive, but I can get one. Many data are also available elsewhere, but I have several photo/video files that are the only copy.
If you have NTFS, a good bet is "Restorer Ultimate". It is payware, but inexpensive, and runs from Windows. You need another disk into which to copy what it recovers. May have to run for many hours. As far as I remember, it doesn't write to the original disk. I know it is good because I used it once. You can search your computer log to find out the messages when it was last mounted: it is possible that it mentions something like "ntfs volume mounted". If you want to try tools that try to restore the disk structure by writing to it, ie, "repair" the disk, then you absolutely need to copy a backup of the entire disk image to another disk before trying. If the "repair" fails you will not be able to try again, so do a backup of the image. Yes, it is a 1 TB image, that's a lot. -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))
On 27/07/17 16:47, Albert Oszkó wrote:
Many data are also available elsewhere, but I have several photo/video files that are the only copy.
- Believe that Carlos , also , is an enthusiast for frequent backups : - perhaps it's good to have a cron job do backups every hour , to a separate Partition , Disk , or , external drive ... regards -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2017-07-29 14:26, ellanios82 wrote:
On 27/07/17 16:47, Albert Oszkó wrote:
Many data are also available elsewhere, but I have several photo/video files that are the only copy.
- Believe that Carlos , also , is an enthusiast for frequent backups :
- perhaps it's good to have a cron job do backups every hour , to a separate Partition , Disk , or , external drive
Sure, but you need to have a lot of extra disk space, which costs money. -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" at Telcontar)
Op donderdag 27 juli 2017 15:36:41 CEST schreef Carlos E. R.:
On 2017-07-27 15:27, Albert Oszkó wrote:
Hi all,
I wanted to write leap 42.3 on an USB stick. Unfortunately I did not realize that my 1 TB Toshiba external HDD was also plugged in and mounted. Imagewriter selected it and offered to unmount it and I agreed. Only a few seconds later I knew I made a big mistake. I iimediately cancelled writing. Now I cannot acces data on it. Is it possible to get back at least some of data?
Some, yes. You erased the first 4 GB of it, where the crucial metadata indexes are.
What filesystem was it?
Do you have disk space to create an image backup of it with dd in another disk?
You need to use a tool that scans the whole disk searching for file patterns and saving them in another place, one by one. May run for many hours.
Photos/videos are easy: photorec. Other files are more difficult in opensource, no tools. Maybe you have to use payware (Restorer Ultimate did good for me once).
From my notes:
PhotoRec for sticks, good for multimeda files. Photos. http://www.cgsecurity.org/wiki/PhotoRec f3 http://oss.digirati.com.br/f3/ recovers analyzes sticks.
foremost http://foremost.sourceforge.net/ http://en.wikipedia.org/wiki/Foremost_(software) Foremost is a forensic data recovery program for Linux used to recover files using their headers, footers, and data structures through a process known as file carving.[3] Although written for law enforcement use, it is freely available and can be used as a general data recovery tool.[2]
ext4magic (from greg) - There is also some commercial software, apparently.
http://www.pdatungsteno.com/2006/05/26/recuperar-datos-de-tarjetas-de-memori a-cds-o-discos-duros-tras-un-desastre/ http://www.dzoom.org.es/noticia-1780.html
http://www.freedownloadmanager.org/es/downloads/recuperación_de_tarjeta_flas h_gratis/ http://www.ondata.es/recuperar/dispositivos-fotograficos.htm
Restorer Ultimate. http://www.restorer-ultimate.com/ payware, good.
clonar: http://www.clonezilla.org/
ewfacquire, ewfverify, and ewfexport all in the ewftools
distros: testdisk Mail archived. Never bothered since my data are always in multiple places, but others around me don't. Thanks.
-- Gertjan Lettink, a.k.a. Knurpht openSUSE Board Member openSUSE Forums Team -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 07/27/2017 09:27 AM, Albert Oszkó wrote:
I wanted to write leap 42.3 on an USB stick. Unfortunately I did not realize that my 1 TB Toshiba external HDD was also plugged in and mounted. Imagewriter selected it and offered to unmount it and I agreed.
This is why I always use Partitioner to verify where the USB drive appears. I also just use dd to copy. Works fine. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
2017-07-27 15:42 keltezéssel, James Knott írta:
On 07/27/2017 09:27 AM, Albert Oszkó wrote:
I wanted to write leap 42.3 on an USB stick. Unfortunately I did not realize that my 1 TB Toshiba external HDD was also plugged in and mounted. Imagewriter selected it and offered to unmount it and I agreed. This is why I always use Partitioner to verify where the USB drive appears. I also just use dd to copy. Works fine.
The first step is to get another big dik tomorrow to be able to dd this sick one. Thanks you all, Albert
On 27/07/17 17:04, Albert Oszkó wrote:
2017-07-27 16:34 keltezéssel, Carmen Bianca Bakker írta:
On Thursday, 27 July 2017 16:26:20 CEST Albert Oszkó wrote:
The first step is to get another big dik tomorrow to be able to dd this sick one. :O
I believe you meant disk :-p
Of course!
It's not what you were thinking - it's only half an antelope ... :-) Cheers, Wol -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 07/30/2017 03:50 PM, Wols Lists wrote:
On 27/07/17 17:04, Albert Oszkó wrote:
2017-07-27 16:34 keltezéssel, Carmen Bianca Bakker írta:
On Thursday, 27 July 2017 16:26:20 CEST Albert Oszkó wrote:
The first step is to get another big dik tomorrow to be able to dd this sick one. :O
I believe you meant disk :-p
Of course!
It's not what you were thinking - it's only half an antelope ... :-)
Cheers, Wol
THAT'S TERRIBLE! --doug -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (8)
-
Albert Oszkó -
Carlos E. R. -
Carmen Bianca Bakker -
Doug -
ellanios82 -
James Knott -
Knurpht - Gertjan Lettink -
Wols Lists