Of the target drive's mounted you run the risk of a badīackup image being made to work from. Out for swap partitions associated with the target mineĭidn't but if you roll the next command with any Was two partitions associated with /dev/hda physicalĭrive and both had to be unmounted. Repeat above for any mount points associated with For example my target drive was mounted at the following umount command directory path Once located unmount it so you're normal programs don't write or read from it by accident. Hint use mount & blkid commands to show drives, their file paths and other info. You're going to need to locate the dev file path for your target drive, in this example it's /dev/hda but for you it maybe different. Web search for terms like "USB recovery Linux distro" and you'll likely find a top 10s list of someone's testing results or recommendations there be choices in flavor so I'll keep this based off my expenses with Kali. I used Kali Sana for my recovery because it has pretty up to date tools for this job but you might want to hunt for a specifically designed distro. You'll need a USB or CD bootable Linux distribution. In my case discussed here there was only 13~gigs used out of 63'ish but we still had to copy it all. This is because we are going to be copying every bit off the target drive even the zeros. Or in my case I had to get two drives of greater than 64gigs one for the backup image and the other to receive recovered files. You'll need second drive with enough free space to house double the total number of bits of the target drive. Note file names did get mangled during the process so be aware that there will be cleanup after this process. Here's an edited version of my private notes on data recovery steps that I've used to recently recover a corrupted USB drive that was being used to backup a client's Windows user account files. I'll see what I can find in my notes in a few hours on the subject of drive imaging and recovery for ya. Right now you're in limbo and I would suggest you do a dd backup of your wiped drive and try to use recovery tools on the backed up drive image so that you don't accedentaly wipe the target data off the original drive. In other words this will cost you in either time or in the coins you've lost. I've had OK luck with rescuing data off drives for friends but also some failed attempts to because of rewritten blocks corrupting deleted data. Third, you maybe able to recover the deleted files with tools such as magic rescue so long as the sectors on your drive that your wallet was wiped from are intact. Second, make an image backup of the wiped drive to a physically different drive.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
December 2022
Categories |