Code: Select all
photorec /log /d unallocated /cmd /dev/sdc1 fileopt,everything,disable,txt,enable,freespace,blocksize,512,search
Here is my log:
I notice that in the log file, it indicates that the blocksize=2048. Is this just letting me know that the cluster size is 4 sectors or have I got the command syntax wrong? I want to be sure that the command successfully set the blocksize to 512 bytes.Failed to set locale, using default 'C'.
Wed Sep 19 11:52:07 2012
Command line: PhotoRec /log /d unallocated /cmd /dev/sdc1 fileopt,everything,disable,txt,enable,freespace,blocksize,512,search
PhotoRec 6.14-WIP, Data Recovery Utility, March 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.0.0-25-generic (#41-Ubuntu SMP Mon Aug 13 17:58:59 UTC 2012) x86_64
Compiler: GCC 4.4
Compilation date: 2012-03-10T17:35:31
ext2fs lib: 1.41.9, ntfs lib: libntfs-3g, ewf lib: 20100226, libjpeg: 62
Hard disk list
Disk /dev/sdc1 - 7012 KB / 6848 KiB - CHS 856 1 16 (RO), sector size=512 - Generic USB CF Reader, FW:1.01
Load parameters from /home/ade/.photorec.cfg
Partition table type (auto): None
Disk /dev/sdc1 - 7012 KB / 6848 KiB (RO) - Generic USB CF Reader
Partition table type: None
check_FAT: Unusual number of reserved sectors 4 (FAT), should be 1.
check_FAT: Unusual number of reserved sectors 4 (FAT), should be 1.
Unknown 0 0 1 855 0 16 13696 [Whole disk]
P FAT12 0 0 1 855 0 16 13696
FAT12, 7012 KB / 6848 KiB
Interface File Select
fat12_remove_used_space
167 first-level signatures enabled
Analyse
P FAT12 0 0 1 855 0 16 13696
FAT12, 7012 KB / 6848 KiB
Pass 0 (blocksize=2048) STATUS_FIND_OFFSET
Elapsed time 0h00m00s
Pass 1 (blocksize=2048) STATUS_EXT2_OFF
unallocated.3/f0000064.txt 64-75
unallocated.3/f0000076.txt 76-79
unallocated.3/f0000080.txt 80-87
Elapsed time 0h00m05s
Pass 1 +3 files
txt: 3/3 recovered
Total: 3 files found
13596 sectors contains unknown data, 0 invalid files found and rejected.
PhotoRec exited normally.
Thanks