Dotaz: Recovery dat - poskozena SD karta

[Joe]

Zdravim znalci a znalkyne, stala se mi takova neprijemnost, jeste nez se mi podarilo zkopirovat fotky z SD karty, tak ta odesla :( resp, asi doslo k poskozeni FAT tabulky.

Udelal jsem si dump ddckem, jinak pro vlozeni dmesg rika

[  127.541071] usb 2-4: new high speed USB device using ehci_hcd and address 2
[  127.674388] usb 2-4: New USB device found, idVendor=058f, idProduct=6366
[  127.674397] usb 2-4: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.674404] usb 2-4: Product: Mass Storage Device
[  127.674409] usb 2-4: Manufacturer: Generic
[  127.674413] usb 2-4: SerialNumber: 058F0O1111B1
[  127.674703] usb 2-4: configuration #1 chosen from 1 choice
[  127.805333] Initializing USB Mass Storage driver...
[  127.805558] scsi5 : SCSI emulation for USB Mass Storage devices
[  127.805843] usb-storage: device found at 2
[  127.805845] usbcore: registered new interface driver usb-storage
[  127.805853] USB Mass Storage support registered.
[  127.805855] usb-storage: waiting for device to settle before scanning
[  132.804265] usb-storage: device scan complete
[  132.806880] scsi 5:0:0:0: Direct-Access     Multi    Flash Reader     1.00 PQ: 0 ANSI: 0
[  132.808289] sd 5:0:0:0: Attached scsi generic sg2 type 0
[  133.287599] sd 5:0:0:0: [sdb] 15564800 512-byte logical blocks: (7.96 GB/7.42 GiB)
[  133.288603] sd 5:0:0:0: [sdb] Write Protect is on
[  133.288607] sd 5:0:0:0: [sdb] Mode Sense: 03 00 80 00
[  133.288609] sd 5:0:0:0: [sdb] Assuming drive cache: write through
[  133.291625] sd 5:0:0:0: [sdb] Assuming drive cache: write through
[  133.291632]  sdb: unknown partition table
[  133.296975] sd 5:0:0:0: [sdb] Assuming drive cache: write through
[  133.296981] sd 5:0:0:0: [sdb] Attached SCSI removable disk

Jinak ja vidim, ze tam ty data jsou, viz maly grep hd z image

0081cc00  50 31 30 33 30 39 36 30  4a 50 47 20 00 00 01 83  |P1030960JPG ....|
0081cc20  50 31 30 33 30 39 36 31  4a 50 47 20 00 64 09 83  |P1030961JPG .d..|
0081cc40  50 31 30 33 30 39 36 32  4a 50 47 20 00 64 0e 83  |P1030962JPG .d..|
0081cc60  50 31 30 33 30 39 36 33  4a 50 47 20 00 64 13 83  |P1030963JPG .d..|
0081cc80  50 31 30 33 30 39 36 34  4a 50 47 20 00 00 18 83  |P1030964JPG ....|
0081cca0  50 31 30 33 30 39 36 35  4a 50 47 20 00 64 23 83  |P1030965JPG .d#.|
0081ccc0  50 31 30 33 30 39 36 36  4a 50 47 20 00 00 26 83  |P1030966JPG ..&.|
0081cce0  50 31 30 33 30 39 36 37  4a 50 47 20 00 00 63 83  |P1030967JPG ..c.|
0081cd00  50 31 30 33 30 39 36 38  4a 50 47 20 00 64 66 83  |P1030968JPG .df.|
0081cd20  50 31 30 33 30 39 36 39  4a 50 47 20 00 00 a9 83  |P1030969JPG ....|
0081cd40  50 31 30 33 30 39 37 30  4a 50 47 20 00 00 ad 83  |P1030970JPG ....|
0081cd60  50 31 30 33 30 39 37 31  4a 50 47 20 00 00 b0 83  |P1030971JPG ....|
0081cd80  50 31 30 33 30 39 37 32  4a 50 47 20 00 00 b2 83  |P1030972JPG ....|
0081cda0  50 31 30 33 30 39 37 33  4a 50 47 20 00 00 b6 83  |P1030973JPG ....|
0081cdc0  50 31 30 33 30 39 37 34  4a 50 47 20 00 64 b7 83  |P1030974JPG .d..|

Jenze nevim, jak obnovit FAT tabulku, pripadne co si s tim pocit, rad bych to zkusil prvne sam - pokud se nezadari, tak navstivim odborniky.

Nejake napady?

---

---

Odpovědi

[Joe]

0Jeste dodam, ze pri rucni specifikaci FS mount -o loop working ./mnt -t vfat, dostavam nasledujici info

[ 2515.780134] FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 2515.780230] FAT: bogus number of reserved sectors
[ 2515.780236] VFS: Can't find a valid FAT filesystem on dev loop0.

[kotyz]

Tak si mi podarilo obnovit vsechny soubory pomoci programu "photorec" z balicku "testdisk".

[little.owl]

Mate stesti, JPEG se obnovuje velmi snadno, staci hledat 0xFF, 0xD8 a 0xFF, 0xD9 a vedet cosi FAT filesystemu.

[Joe]

Bylo tam i par videii (MOV), nicmene pri hlubsim zkoumani bylo jasne, ze FAT tabulka je poskozena jen minimalne, neco bylo s MBR