2017-07-27 15:36 keltezéssel, Carlos E. R. írta:
On 2017-07-27 15:27, Albert Oszkó wrote:
Hi all,
I wanted to write leap 42.3 on an USB stick. Unfortunately I did not realize that my 1 TB Toshiba external HDD was also plugged in and mounted. Imagewriter selected it and offered to unmount it and I agreed. Only a few seconds later I knew I made a big mistake. I iimediately cancelled writing. Now I cannot acces data on it. Is it possible to get back at least some of data? Some, yes. You erased the first 4 GB of it, where the crucial metadata indexes are.
What filesystem was it?
Do you have disk space to create an image backup of it with dd in another disk?
You need to use a tool that scans the whole disk searching for file patterns and saving them in another place, one by one. May run for many hours.
Photos/videos are easy: photorec. Other files are more difficult in opensource, no tools. Maybe you have to use payware (Restorer Ultimate did good for me once).
From my notes:
PhotoRec for sticks, good for multimeda files. Photos. http://www.cgsecurity.org/wiki/PhotoRec f3 http://oss.digirati.com.br/f3/ recovers analyzes sticks.
foremost http://foremost.sourceforge.net/ http://en.wikipedia.org/wiki/Foremost_(software) Foremost is a forensic data recovery program for Linux used to recover files using their headers, footers, and data structures through a process known as file carving.[3] Although written for law enforcement use, it is freely available and can be used as a general data recovery tool.[2]
ext4magic (from greg) - There is also some commercial software, apparently.
http://www.pdatungsteno.com/2006/05/26/recuperar-datos-de-tarjetas-de-memori... http://www.dzoom.org.es/noticia-1780.html
http://www.freedownloadmanager.org/es/downloads/recuperación_de_tarjeta_flash_gratis/ http://www.ondata.es/recuperar/dispositivos-fotograficos.htm
Restorer Ultimate. http://www.restorer-ultimate.com/ payware, good.
clonar: http://www.clonezilla.org/
ewfacquire, ewfverify, and ewfexport all in the ewftools
distros: testdisk
Thanks for the quick reply! I am not sure what filesystem it was. Maybe NTFS, but this is not 100%. At the moment I do not have another disk to copy (dd) all the cca 700 G data from that drive, but I can get one. Many data are also available elsewhere, but I have several photo/video files that are the only copy. Albert