[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]
Brown Richard wrote: > Hi Guys > > I hope all is well. > > I have a friend who took their pc to a repair place. Unfortunately the > repair was botched and instead of repairing they simply formatted the > whole drive. > > I have looked on the net and have found the dd command to be my > friend. What I want to do is to recover all data from the formatted > drive, so it has been suggested I use: > dd bs=512 if=/dev/rXX# of=/some_dir/foo.dmg conv=noerror,sync > Basically I just want to check is that correct please? > Thanks for the help. > Rich > > > The dd command will take an image of the harddrive (complete with data that's inaccessible), much like an ISO image of a CD. It is *always* advised to work with an image of the harddrive when doing data recovery, but dd itself will not recover the files. I would try to re-create the original partition structure and then recover the filesystems on the partitions. If that fails, I'd try some data-mining tools to literally scour the image for files that can be put-back-together. Grant. -- The Mailing List for the Devon & Cornwall LUG http://mailman.dclug.org.uk/listinfo/list FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html