On 07/03/2012 02:23 PM, Predrag Punosevac wrote:
Dear All,
I messed up my wife's USB (FAT16) by accidentally pulling it
from my OpenBSD box before it was completely umounted. Running
fsck_msdos is producing message
"Invalid signature in the boot block 2700"
Windows 7 is reporting USB drive as non-formated and chkdsk tool is
not even attempting to recover anything.
Could people who are familiar with forensic/data recovery tools share
their wisdom with me and let me know if I can repair this thing and how?
In the past based upon recommendation on this list I used PhotoRec to
recover "erased" pictures. Some other recommendations that came up
during that conversation were:
sysutils/testdisk
sysutils/sleuthkit
and
fatback
I wonder if any of those would help now?
Thank you!
Predrag Punosevac
START by making an image of your existing flash drive to another one or
a file, using dd. (dd if=/dev/rsd3c of=/home/me/oh-shit.img bs=32k)
Now you can poke at it with any tools you wish, and roll back if need be
and poke at it with OTHER tools.
Nick.
