INFO "Filename: 49C7D454d01 Path: D:\?
Size: 30.6 KB (31,348)
State: Very poor
Creation time: 1/31/2010 19:59
Last modification time: 1/31/2010 19:59
Last access time: 1/31/2010 19:59
Comment: This file is overwritten with "D:\Programas\Mozilla Firefox\chrome\pippki.jar.moz-backup"
6 file cluster(s) overwritten (0, 1, 2, 3, 4, 5)
4 cluster(s) allocated at offset 6301398 4 cluster(s) allocated at offset 6305132"
Your wallet file has the first 6 of its 8 sectors overwritten by some Firefox file, and
not Recuva, which amounts to the first 24KB of the 30.6KB gone from your hard disk. It is highly likely the Berkeley DB table that holds the private keys was at the beginning of the file and therefore overwritten. Unless you have clones from before the time you installed Firefox, your odds of recovery are low. I'm not sure if even a recovery service can help you here since the sector data was overwritten.
Thank you Sir!
I agree with it being overwritten with Firefox! Recuva is just the recovery software I was dumb enough to use without having cloned the HD beforehand. (don't judge too much installing Firefox... it was all the rage back then).
This certainly lowers the Chance of Success and increases a bit the frustration - it really seems that it is close. How I wish the private keys were at those last 6 KB!
If you were in my shoes, do you think considering professional data recovery service would be an option? I read somewhere that sometimes it is possible to infer underlaying data after being overwritten (it sure beats my simple brain model of a hard drive where you have either a 0 or a 1 recorded in a magnetic plate). If going for that would you still Clone beforehand or just don't touch it any more?
Cheers
- Can I use a partitioned External USB Drive or should I buy an HD to clone to?
The software support both option (to single file or another drive), but i would recommend first option.
- Would you recommend another program for a second clone?
If you're linux user, you could use built-in tools called
ddThank you Sir!
Straight to the point. I will look into linux DD (a decade or so ago I did play around with Linux but never used it day to day - I couldn't Game with it!!!)
Cheers
- Would you recommend another program for a second clone?
If you're linux user, you could use built-in tools called
dd dd is a very dangerous tool because a single mistype of a disk letter will overwrite the wrong disk and cause even more data to be lost. So I would not recommend it for newbies.
For example, you have an empty hard disk at /dev/sdc, your bad hard disk as at /dev/sdb and your operating system is at /dev/sea, normally you'd type
dd if=/dev/sdb of=/dev/sdc bs=4K, but if you are careless and are just pressing up and down arrow keys on the terminal to get this command you ran before, you might forget to change "sda" to "sdc" and it will overwrite your OS drive!
Thank you for the warning Sir!
If going this way I will make sure to test on something else before.
Cheers
[moderator's note: consecutive posts merged] (@mod thank you and sorry!)