恢复格式化分区
我不小心在我的 ext3 分区(对于 Ubuntu)上的 qtparted 中点击了“format”,我正在通过另一台计算机进行分析。 它在格式化过程中给出的四个消息列表包括“写入索引节点表”和“写入文件系统”或类似的内容。
我怎样才能查看这些数据? 我研究过的工具似乎要么需要完整的索引节点表,要么对于文件雕刻器来说,不保留目录结构(这可能是不可能的)并且对非常有限的文件类型集进行操作。 这些数据可以恢复吗? 格式化操作花费的时间太短,我怀疑数据可能仍然存在。
I accidentally hit 'format' in qtparted on my ext3 partition (for Ubuntu), which I was analyzing via another computer. The list of four messages it gives during the format process include "writing inode table" and "writing filesystem", or something similar.
How can I view this data? The tools I've looked at appear to either require intact inode tables or, in the case of file carvers, don't preserve directory structure (which may be impossible) and operate on a very limited set of file types. Can this data be recovered? The format operation took so little time that I suspect the data may still be there.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
查看 TestDisk 实用程序。 它们正是为此目的而设计的,当分配表丢失/覆盖时恢复数据。
如果您从那时起就没有使用过该磁盘,并且在格式化过程中它没有被彻底覆盖,那么您很有可能会恢复大量数据。 只是不要相信其有效性(恢复的文件可能在任何位置包含错误或丢失的数据)。
Take a look at the TestDisk utilities. They are designed for exactly this purpose, recovering data when the allocation table is missing/overwritten.
If you haven't used the disk since and it wasn't thoroughly overwritten during the format then there's a high chance you'll get a lot of your data back. Just dont't place any trust in its validity (a recovered file may have data that is wrong or missing, at any location).