reallymine icon indicating copy to clipboard operation
reallymine copied to clipboard

Suggestion...

Open Zibri opened this issue 2 years ago • 1 comments

Can you all please try this?

Install sg3_utils for linux or cygwin.

Open a bash shell.

determine the device name of your drive using sg_scan

dev=YOUR_DEVICE

copy and paste this line:

printf -v sec $((0x$(sg_raw 2>/dev/null -r 8k $dev 85 09 0e 00 00 00 10 00 80 00 00 00 00 10 2f 00 -o -|cut -c 9-16|xxd -l 16 -ps|rev|while read -N1 a;do read -N1 b;echo -n $b$a;done|cut -c 3-)))

echo Sector is: $sec

then go check that sector (echo $sec)

alternatively if you know the device name (not the sg_raw one) you can:

dd if=/dev/sdc bs=512 skip=$sec count=1 of=DUMPED.bin Since I don't know what's there, put count=128 or more..

You might find the the block reallymine is looking for without searching the whole hd.

On my 14 TB harddrive this points to a sector (which in my case is empty because it is all empty now)

Zibri avatar Feb 03 '23 06:02 Zibri

Data view in Victoria image

By the way I have the same data also in ID 98. You might want to check that too.

printf -v sec $((0x$(sg_raw 2>/dev/null -r 8k $dev 85 09 0e 00 00 00 10 00 98 00 00 00 00 10 2f 00 -o -|cut -c 9-16|xxd -l 16 -ps|rev|while read -N1 a;do read -N1 b;echo -n $b$a;done|cut -c 3-)))

echo Sector is: $sec

Zibri avatar Feb 03 '23 06:02 Zibri