RE: Partition Recovery From External USB Hard Drive

["Murda Mcloud" <murdamcloud () bigpond com>]

Use a linux live cd to make an image of the drive first if you can-that way
you can be more sure that the source drive data is not being modified. Mount
the usb drive and away you go.
There are free forensic live cds like helix(open source) etc that have tools
to help you do this. Also FIRE.
Once you have an image you can recover the data that they want.
If you wanted to pay then Sven's suggestion is a great one.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Sven Meeus
Sent: Thursday, May 17, 2007 4:14 AM
To: security-basics () securityfocus com
Subject: RE: Partition Recovery From External USB Hard Drive

Hi,

I have had very good results with Ontrack EasyRecovery. I have recovered
about half a dozen hard disks with it by now, and only one failed because of
heavy mechanical failure of the drive itself.

Regards,

Sven Meeus
Keys BVBA

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Richard Brinson
Sent: terça-feira, 8 de Maio de 2007 13:33
To: security-basics () securityfocus com
Subject: Partition Recovery From External USB Hard Drive

I am currently working with a customer who needs to recover data from an
external USB hard drive which has had it's only partition (NTFS) deleted.
Obviously Windows won't recognise the drive any more so I would like to know
if anyone has any neat tricks or tips to access the drive and rebuild the
partition without using commercial software, and preferrably via USB so I
don't have to rip the drive out of it's casing.
 
Many thanks
 
Richard
AVISO LEGAL

Esta mensagem é confidencial e dirigida apenas ao destinatário. Se a recebeu
por erro solicitamos que o comunique ao remetente e a elimine assim como
qualquer documento anexo. Não há renúncia à confidencialidade nem a nenhum
privilégio devido a erro de transmissão.
Qualquer opinião expressa nesta mensagem pertence unicamente ao autor
remetente, e não representa necessariamente a opinião do Santander Totta, a
não ser que expressamente se diga que o remetente está autorizado para o
efectuar.



DISCLAIMER

This message is confidential and intended exclusively for the addressee. If
you received this message by mistake please inform the sender and delete the
message and attachments. No confidentiality nor any privilege regarding the
information is waived or lost by any mistransmission.
Any views or opinions contained in this message are solely those of the
author, and do not necessarily represent those of Santander Totta, unless
specifically stated and the sender is authorized to do so.