M
M
mepuhuso2021-07-29 06:38:21
linux
mepuhuso, 2021-07-29 06:38:21

How to recover data from a non-mountable NTFS image?

There is a flash drive image, but neither ntfsfix nor testdisk, which are recommended on the Internet, helped restore the partition to working capacity. testdisk doesn't see many files. It is clear that some important block on the SD card was damaged, that such a file system and on the SD card is an ideal recipe for data loss
https://coozeporn.com/
Is it theoretically possible to unwind the contents of the NTFS file system in Linux with any program, even the names files will be lost, you need to extract a bunch of valuable photos, the Windows neighbor got into such trouble

I only know utilities for recovering deleted files, but I would just pull out jpg files without names

PS The copy from the sd card itself went through dd without a single failure

Answer the question

In order to leave comments, you need to log in

4 answer(s)
T
tormozillo, 2021-07-29
@tormozillo

PhotoRec
https://www.cgsecurity.org/wiki/PhotoRec_EN

C
CityCat4, 2021-07-29
@CityCat4

R.saver

Z
Zettabyte, 2021-07-29
@Zettabyte

I do not rule out that I did not fully understand your plan, but I have a feeling that you are complicating the approach to the task, at least by trying to work under Linux.
I have been in data recovery for a long time and I think that Windows has firmly established itself as an industry standard, as a result, all the most interesting things are released under it, regardless of what media you are working with.

did not help to restore the working capacity of the partition

Given your task, I see no reason to try to do this.
CityCat4 is right - take R.saver and you have two options depending on what you want to work with.
Your neighbor can take the current version himself and do a full scan of the memory card, and then restore all the files that are found. The interface is as simple as possible, but the analysis is done as much as possible. The main thing is to say that you don’t try to save the program on the memory card, you can’t write there at all.
The fact that you made an image is a healthy and useful decision. If you want to work with it yourself, take the previous version of R.saver: https://rlab.ru/doc/rsaver_old.html
It supports working with disk images and the ability to choose what to do.
The copy from the sd card itself went through dd without a single failure

Here it would be interesting to make an image again and compare them byte by byte. If the memory began to die, then in certain areas it can be given either randomly, or zeros where they should not be. But the second is more difficult to determine by eye.
If, after trying logical recovery, the result does not suit you, then you can only contact specialists to read the memory directly, bypassing the controller.
Here is a one-stop article on choosing a data recovery firm: data-recovery.com

K
Korya, 2021-08-05
@Korya

dmde

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question