Knoppix live cd running need help with finding C

Hi Techs,
I need help finding the C files on an hdd in a laptop running knoppix as a live cd.
I dont see the C files anywhere.
Thank you
Mark O'BrienDispatch Software Support and Server AdministrationAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

andreasSystem AdminCommented:
you should gave some desktop icons showing the partitions of your installed HDD.

if not enter in a root shell
fdisk -l

Open in new window

and post output here.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
andreasSystem AdminCommented:
How big is the installed HDD, which is the installed Operating sytem (X, Win7, Win8). Does  the system support UEFI and GPT booting?

If so, then the HDD might be GPT partitioned, but fdisk command above should also indicate that.

if it shows GPT partitioning then please also issue a

gdisk -l

Open in new window


in a rootshell and post the output here.
rindiCommented:
Open the "PcmanFM Filemanager" of knoppix (the icon next to the knoppix start button in the taskbar). In the left side of the filemanager you'll see the partitions of your disks amongst other things. If the partitions had labels (for example "Windows" for the OS partition, or "Data" for the Data partition), there will be a disk icon with that label name next to it. If there is no such label, you'll just see the disk icon with probably no text next to it.

Just click on one of those disk icons and the partition should get mounted and it's contents displayed on the right part of the display. In the title bar of the fileamager you'll also see something like "sda1", or "sda2" when you have selected the partition. Linux doesn't use drive letters for partitions like Windows does, but rather usually something like "sd" for the disk, "a", "b" etc. for the disk, then "1", "2" etc for the partitions on the disk, hence "sda1", "sda2", "sdb1", "sdb2" etc.

If the reason for using knoppix for accessing your disk is to recover data because the disk is bad, then it is unlikely that you will be able to mount the partitions and directly read or copy the data off. then you need to open a terminal (the icon next to the filemanager), use in that start photorec or testdisk to do a scan of the disk to recover the data.
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

andreasSystem AdminCommented:
abov comment is correct, if your disk is bad you may not get the icons for direct mounting. Posting the output of the 2 tools still helps to find out which are your important partitions. And also if and what harddisks are visible to knoppix.
Sometimes HDDs die totally that they are even not detected totally anymore, than even testdisk/photorec will fail. fdisk / gdisk output helps to see what kind of disks are present and if there is still a valid partitioning.
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
OK thank you.  will check on Monday
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
Here's some screenshots for you guys.  I just dont see anything.  There's no encryption on the hdd.
knoppix-stuff.JPG
rindiCommented:
Not fdisk -1, but rather fdisk -l.

Have you tried as I mentioned to open the partition with your file-manager?
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
Here is fdisk -L.  Also see file mgr.  I believe all it shows is what's in the CD.
2.jpg
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
2
rindiCommented:
As the partition isn't shown in the file-manager, it isn't mountable or accessible. You'll have to scan /dev/sda1 using photorec to see if you can recover the data. I don't know all the options of photorec, but you can find instructions online.
andreasSystem AdminCommented:
You may try to mount /dev/sda1 manually

try the following command

 mount /dev/sda1 /mnt -o ro -t ntfs-3g 

Open in new window

and see if the contents of the C drive appears in /mnt

If the mount fails post error message, you can copy/paste in knoppix with middle mouse key, so you dont have to upload photos each time.

mark the error message in console with lift mouse key and insert into experts exchange via middle mous button at current text-cursor pos.
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
Rindi, what is photorec?  How do you run it?
rindiCommented:
You start it from a terminal like testdisk. It looks the same as testdisk and is from the same manufacturer. You can use it to scan disks for lost data and it allows you to try recovery. But it isn't easy to use, that's why you should check their site for instructions, particularly when you get to the point where you start recovering.
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
Andreas:

knoppix@Microknoppix:~$ mount /dev/sda1 mnt -o -ro -t ntfs-3g
mount: only root can do that
andreasSystem AdminCommented:
do it inside a root shell, can be found in the start (k manu) of the knoppix desktop
or enter
sudo su - in a normal command shell to become root then try again.
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
knoppix@Microknoppix:~$ sudo su -
root@Microknoppix:~# mount /dev/sda1 mnt -o -ro -t ntfs-3g
NTFS signature is missing.
Failed to mount '/dev/sda1': Invalid argument
The device '/dev/sda1' doesn't seem to have a valid NTFS.
Maybe the wrong device is used? Or the whole disk instead of a
partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
what is "in a k manu"?
andreasSystem AdminCommented:
@mark88 should have ben in the k menu. (start menu)

It seems the NTFS filesystem is corrupted. Now its time to to use the recovery tools.

You could try photorec (as root too) and save files to another disk attached to the knoppix linux. DO NOT SAVE inside any partition of the harddisk you try to recover from.
All devices/partitions on sda should not be used for store of the recovered files.

Detailed photorec instructions can be found here:

http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step

You also may make an image to an external drive and try to fix the ntfs filesystem or try Get Data Back for NTFS from runtime software. (Its payware and running in windows, so you need another windows machine where you can run it)
It has a trail version where you can see if it can recover files b4 you buy.
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
How is Knoppix any good if it cant even see this C drive?  Im confused why we went through the last 3 days.
andreasSystem AdminCommented:
if the c drive is corrupted how it can be seen?

If its okay and not corrupted it will show up automatically.

All the above steps were done to rule out methodic errors or a total disk failure, then even photorec/testdisk have no chance of recover anything.
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
If it can be seen, why would I use linux?  Why not just use the recovery tools?
andreasSystem AdminCommented:
if you are familiar with linux, this is "just use the recovery tools"

use fdisk to find out the device names and then call photorec in a rootshell and let it do its work.
rindiCommented:
Sometimes it is possible to mount ntfs partitions that can't be seen in windows. Besides, it includes recovery tools like photorec and testdisk, which are free. You don't have to take the disk out of the PC you want to recover from, as you can boot directly into the knoppix environment from the DVD, you don't have to install anything.
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
Ok.  What are the directions for photorec and testdisk?
andreasSystem AdminCommented:
a good tutorial for photorec and testdisk can be found here:

http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step
http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step

As your partition table seems good i would start with photorec.
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
Too bad Knoppix didn't work for this.  It would have been nice to learn it.
rindiCommented:
Even if Knoppix didn't work for your needs, there's nothing to stop you from using and learning it for other tasks. You have it now, and there's nothing to stop you from booting into it occasionally and using it...
andreasSystem AdminCommented:
Why it diodnt work, what was the result from testdisk and photorec?
Mark O'BrienDispatch Software Support and Server AdministrationAuthor Commented:
I don't have time to try those right now.  I meant it is too bad that Linux couldn't just see the drive.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Linux Distributions

From novice to tech pro — start learning today.