0

I was trying to burn an iso image to a DVD with the command:

sudo dd if=/path/to/iso.iso of=/dev/sdb bs=1024k status=progress

However, I ended up overwriting about 1.4 GB on my USB drive which had important data on it before I killed the process with Ctrl+C! I had like 10 GB of data on the drive, so it's not all gone. I tried to recover the data with testdisk, but I can't find the data. I know that PhotoRec could recover photos and videos from my USB drive, but I also had .odt, .docx, .pptx and many other types of files. I also had my encrypted diary on the USB drive (with its private key).

Is there any way I could recover the data? I know that the USB drive was formatted with NTFS.

P.S. After this, I corrected the command to:

sudo dd if=/path/to/iso.iso of=/dev/sr0 bs=1024k status=progress

This command returned an error message saying the /dev/sr0 is read-only despite that the DVD was completely blank and not used before.

Kamil Maciorowski
  • 81,893
Kseniya Kolokolkina
  • 11

1 Answers1

0

First, you can try to create a binary file from your USB drive:

dd of=~/myusb.bin if=/dev/sdb bs=4M (of course replace /dev/sdb with your USB device path)

Then I recommend you to try binary forensics tools, which detect file headers to recover whole files, like:

cactuschibre
  • 190