Page 1 of 1

Recover 128 bytes file from UFS

Posted: 03 Mar 2014, 17:37
by luislupe
I erased the file system of a 2 GB UFS partition by mistake and with it a 128 byte file with random data as the geli password for an encrypted partition in the same disk. I tried photorec, but couldn't find a way to search for such kind of files. Is it possible to find a 128 byte file of random data using photorec or another tool?

Re: Recover 128 bytes file from UFS

Posted: 08 Mar 2014, 18:59
by cgrenier
PhotoRec uses file signature to identify the files to recover. If your file content is random, no signature can be written.
Data carver utilities (tools like PhotoRec) won't help. Maybe the commercial utility UFSExplorer can undelete the file.