Re: WAY OT--Crisis...virus! Need help

Scott Manley (spm@star.arm.ac.uk)
Mon, 26 Apr 1999 19:05:11 +0100

> > Seeing the same thing with two of my Win95 boxes and a friend's computer (we
> > don't even share files between ourselves). It wipes out the partition table.
> > ICK! Where did it come from, and is there any way to recover the data?
>
> Not easily. If you know roughly where things line up you can hunt for the
> unix superblocks and FAT tables. Keeping a copy of your partition tables
> on postits taped to the case isnt a bad idea. Its a bit late for that
> though.

I did this once... somehow Lose95 conspired to wipe my partition table.... I
knew that my linux partition was the last one on teh disk so I boted a rescue
disk and used hexdump /dev/hda | more to serach for the ext2fs superblocks and
get the sizes from teh correct field.

I couldn';t be bothered with that kind of effor for my VFAT filesystem though
...

It is possible anyway...

Scott Manley (aka Szyzyg) /------ _@/ Mail -----\
___ _ _ __ __ _ | Armagh Observatory |
/ __| __ ___| |_| |_ | \/ |__ _ _ _ | |___ _ _ | Armagh |
\__ \/ _/ _ \ _| _| | |\/| / _` | ' \| / -_) || | | Northern Ireland |
|___/\__\___/\__|\__| |_| |_\__,_|_||_|_\___|\_, | | BT61 9DG. |
http://star.arm.ac.uk/~spm/welcome.html |__/ \=====================/

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/