Hi, > Since the partition now begins by a valid and complete ISO 9660 filesystem > it might be necessary to deface the filesystem before any search for > remnants of the original file system structure can get onto the right track. > > So if the rescue effort does not show sufficient results, then the whole > ISO filesystem could be erased in order to point the rescue team to the > interesting rest of the partition.
Yes, I aws afraid that having a valid filesystem on top of the previous one could lead to some misunderstanding in TestDisk. I'll definitely try what you are suggesting. > - Determine the byte size of the ISO image that was copied to /dev/sda5. > > - To get some reasonable throughput, divide the byte size by 2048 which > will yield the block count. Let's assume the result is 714752. > > - Now zeroize the ISO's range in /dev/sda5: > dd if=/dev/zero bs=2048 count=714752 of=/dev/sda5 Thanks. Hopefully something good will come out. In any case I already did a PhotoRec run to extract as many files I could from the partition. Something has been retrieved, I'll need a lot of time to go over everything though. Thanks again! Andrea
