NTFS partion search software (to find deleted Partitions)
Is there any software that will "RUN" through my block device and Identify filesystem signitures or simmilar...
I had to remove all of my old ntfs files systems because my MS backup will only with on NTFS FS on the system... I wrote down all of the info (start block, end block) on a sticky but I lost it and I cannot remember where my general backup (an NTFS drive :@) started (it would have been ext3 except I needed it to work with MS after the install on a dual boot system) Any help or sugestions beond just software I could use would also be apresiated. NOTE: The partition is in clean and in good order if I was goodenough at programming I would probably just build a cheap take 20hrs program to look for NTFS MFT or something simmilar but saddly I don't have time or skill. Any help PLEASE! |
Testdisk is what you are looking for - it's on most (Linux) recovery liveCDs, Knoppix ...
|
Do you have an image backup of the disk, and want to access the partitions that were backed up. If so, and it is a bit-for-bit image copy, you can try mounting the partitions by attaching loop devices and mounting them.
Suppose the image is /mnt/disk/backup.img The first partition probably starts on block 63. You might be able to verify this by examining the file with the "file" command. With the -fs option, the losetup command will find the first available loop device and print which one is used. I'll assume /dev/loop0 in this example: sudo /sbin/losetup -fs /mnt/disk/backup.img -o $((63*512)) sudo mount -t ntfs /dev/loop0 /mnt/mountpoint When the partition is mounted you can use `df' to determine its size. The next partition my start just above it. Good Luck. |
All times are GMT -5. The time now is 02:48 PM. |