cgsecurity.org

Hi. On my system testdisk.log is created in my /home directory. You can search for it if necessary with: find / -name testdisk.log

I think photorec got past the point on the drive with the serious damage because it started to recover files very fast and the cpu was at approx 80% for about 25 minutes. Many more thousands of files recovered. Now it is slow again but sectors are being read at a consistent rate it seems. Perhaps it ...

A little info on .dat files:
http://askleo.com/whats_a_dat_file/
http://ask-leo.com/how_do_i_figure_out_what_kind_of_file_i_have_without_the_file_extension.html

If you don't know which app created the .dat file perhaps photorec will rebuild the file for you so it may be worth a try to recover it ...

There are lots of tutorials/how-tos on the web for using the tools including this site. I think you would mount the image as a loopback device in order to extract the data or perhaps rebuild partition tables etc. I found this info helpful (might want to read the comments too): http://www.andremiller ...

Whether linux can "open" or do something with your data depends of course on whether there is a linux app that works with that type of data but certainly linux can copy the data files to another drive at the very least. If you already have an ubuntu installation you might want to just try plugging ...

I don't think you really need data recovery for that. I would just use a linux live cd or live usb flash drive that automatically mounts the drives and simply copy the data you need from the drive with the files to another drive. Here's a link to a step by step tutorial for creating a ubuntu live ...

Some raid configurations (like raid2) wite data to drives so that accessing the data is fast and each sequential bit is written to a differnt drive so that if you have 2 or more drives in the raid it will write a single file's data across all the drives. So in order to rebuild the file you would not ...

Hi. Not everyone is familiar with "directory snoop" so perhaps it would be better to ask the question in a directory snoop forum. In directory snoop what does an item in red indicate? Just my opinion but I would let testdisk run its course and attempt to rebuild the partition table if it is possible ...

I've been recovering data from a 3TB usb hard drive (western digital mybook). I accidentally knocked it off of a low shelf while it was reading or writing data. Partition tables are gone it seems and I am recovering data in the raw mode and photorec is building the files (over 20,000 files recovered ...

Photorec writes a file called photorec.ses to your home folder it seems. If you quit your session (and maybe works with "stop" as well but I'm not sure about that) on the drive you are recoverting from and restart it again photorec will check to see if the photorec.ses file exists and will ask you ...