0

I have a hard drive from a desktop PC, which had debian and windows 10 installed. In windows 10 I had disabled automatic updates and the firewall and one day a blue screen appeared, I saw on the internet that the information could be recovered , as long as the option of self-repair of windows, the firewall and automatic updates are enabled. But since I have them disabled, so I couldn't do anything. Then I logged into my linux partition, and my surprise is that after a few minutes, my pc shut down. When I tried to turn it on, I just turned on the power button, the fans started and then stopped, the bios screen did not even appear, that is, without any signal on the screen, the power source emitted a strange sound. So I deduced that the power source stopped working. I removed my hard drive and bought an adapter to convert my internal hard drive to an external one, I connected it to my laptop with windows 10 but the computer doesn't recognize it, I researched on the internet, but according to what it says, you have to format the hard drive to make it work. recognized by windows, now I also comment that I don't remember what type of files linux and windows install. What can I do to recover information from my 2 partitions without formatting?

kevin david Mark
  • 17

1 Answers1

-1

Hopefully, you don't need to pay anyone to do this. If the data is still intact and your hard drive is operational, you can follow a few easy steps to see what's possible.

You will need another fully operational computer with both Windows and Linux installed.

Step 1: Create an image of your drive (Linux).

Open up a Linux terminal and connect your drive (do not mount). You should see the drive registered under devices, something like /dev/sda or /dev/sdb, etc. Let's assume it's /dev/sdb.

To make an image use:

dd if=/dev/sdb of=/path/to/save/data.dd conv=fsync bs=1M

Step 2: Get Autopsy from here. (Windows)

I can't predict what you will encounter, so it's hard to give you a complete answer with all possibilities. However, once you have Autopsy installed, open your data.dd file and let the tool scan and process it.

Since the tool is designed for law enforcement, there's a lot of stuff that won't apply for you. I don't think you really need any ingest modules, but feel free to see if any apply.

Autopsy has a lot of information available online. I would start here.

Very important: do not use your potentially broken drive after you have imaged it. This will help preserve any data that is still accessible (if any).

aqf
  • 127