From owner-freebsd-questions Tue May 12 22:09:12 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id WAA11512 for freebsd-questions-outgoing; Tue, 12 May 1998 22:09:12 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from warped.nirvana.net (root@nirvana.net [206.137.129.223]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA11493 for ; Tue, 12 May 1998 22:08:57 -0700 (PDT) (envelope-from chris@nirvana.net) Received: from chris.conner (d7@ip23.trenton.nj.pub-ip.psi.net [38.12.233.23]) by warped.nirvana.net (8.9.0.Beta5/8.6.9) with SMTP id BAA04222 for ; Wed, 13 May 1998 01:07:26 -0400 Message-Id: <3.0.32.19980513010823.006c1c78@nirvana.net> X-Sender: d7@nirvana.net X-Mailer: Windows Eudora Pro Version 3.0 (32) Date: Wed, 13 May 1998 01:08:31 -0400 To: freebsd-questions@FreeBSD.ORG From: Chris Conner Subject: Last sector of partitions set to 0 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hello, Recently one of our FreeBSD machines was compromised. We do know that the last sector of each partition was set to zero. Is it at all possible to recover the data on this drive, by somehow restoring the partition table? Even if we could just get it back temporarily, to recover some things, it would be a great help. We are almost sure of the exact partition table, but we don't want to risk losing any data by messing around with anything, before consulting you guys. Any help would be greatly appreciated, Chris Conner chris@nirvana.net 609-588-0078 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message