Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a USB HDD that had been repartitioned (two times), but no data was written to it and only quick format was used to initialize the file system (from Windows 7).

It's a LACIE 500GB,with SAMSUNG HM500JI in it. Assumed partition type was HSF+ (it had been used on a Mac).

I have tried to search for partition information with testdisk, but with no results. I have managed to use foremost and scalpel to extract some files from the HDD.

The question is if I can rebuild filenames and directory structure if partition information was lost or can I only use carving tools?

share|improve this question

migrated from serverfault.com Sep 21 '11 at 9:40

This question came from our site for professional system and network administrators.

    
what OS are you running? linux i'm assuming since you're talking about foremost and scalpel? –  hbdgaf Sep 21 '11 at 9:49
    
well, I am doing recovery on a USB drive, running Ubuntu 11.04 in Virtualbox on Windows 7 host, controlling the Ubuntu remotely with teamviewer. :) –  Unreason Sep 21 '11 at 9:52
5  
First thing to do is image the drive (with dd), don't attempt recovery on the actual device that has the target data on it. –  James Yale Sep 21 '11 at 9:55
    
@James Yale, that is generally good advice; but that is necessary if one is dealing with failing HDD or if one needs to write to it (also note ddrescue will do a better job compared to dd). –  Unreason Sep 21 '11 at 9:58
2  
@James is right for this case taking an image before trying recovery is sound advise regardless of if the disk is failing or not. –  Shutupsquare Sep 21 '11 at 10:17
show 2 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.