Hardware :: What Does Hidden Data Between MBR And A First Partition Mean
Sep 1, 2010
I have SATA Western Digital 120GB 5 yeras old hard drive. There are four primary partitions. In order FAT-32, JFS, EXT4 and the last SWAP. Yesterday I copied the third ext4 partition with Clonezilla. Everything was OK. But Clonezilla issued therey strange for me message (and upsetting): "Hidden data between MBR and first partition" It was about 32KB. Clonezilla copied this hidden part as well as MBR. Clonezilla sugested that these hidden data may be used for some technical reasons. Now my questions:
1. What does it mean hidden? I partitioned disk with GNU fdisk.
2. Where they may come from these hidden data?
3. Should I be aware of them? Is it possible this is a some kind of hardware virus?
4. How to clean disk?
i'm wondering if it's possible to restore the original image file that you have hidden data in with steghide. The basic Idea is you have a photo using gpg sign it and then embed the signature. then remove the signature at a later time and check it with the signature. I hope another "inverse" algorithm doesn't need to be written to undo the first (if a "inverse algorithm is possible). This assume you already have the pass phrase or that there is no pass phrase. I already know how to retrieve the original file just want to remove the hidden data from the Image and restore it's attributes.
I have 1 Drive i.e Z: which is kept hidden in my Windows 7. But its showing in Ubuntu as 250GB Partition. I want to hide that drive from Ubuntu, how can I do that? This is first time i've been using Ubuntu.
Does Fedora install create an HPA? Is there any recommended disk editors for 64bit to view/ copy the HPA? Other softwares to view/copy the HPA? How to reset to native max size?
I was installing Ubuntu on my new laptop (with plans to dual boot with Win 7) and, I'll admit, I did something stupid. You see, there was a 1 meg free space before the Windows 7 'hidden partition' and it was driving me nuts. So, what I did, was use gparted to move the hidden partition to the start of the drive (yes, a 1 meg move). Install of Ubuntu went off without a hitch, but after reboot things went a bit differently. The Recovery partition shows up as a possible boot partition in GRUB, in Windows 7 I can now see the recovery partition as a normal NTFS drive, and I can no longer use the features that the partition gives. I know this might be more of a 'ask on a Windows forum' question, but I was hoping someone else had done something like this and knew how to restore the hidden partition to being, well, hidden.
I have got a Acer Aspire 9300 which came with one of Bill Gates unreliable operating systems and a recovery partition in case something goes wrong. I surely installed linux (now on opensuse 11.4) as quickly as possible. mounting this hidden recovery partition under linux? All I can see is this from "fdisk -l"printout:
Disk /dev/sda: 120.0 GB, 120034123776 bytes 255 heads, 63 sectors/track, 14593 cylinders, total 234441648 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x34fe34fd [Code]....
I assume that the partition in question is between blocks 0 and 2047?
Little explanation: OEM HP pcs come with an HP_RECOVERY partition which contains an installer which will wipe the HD and install vista (shivvers) Now despite how much I looooove vista, I was wondering why the OS_TOOLS partition shows up in places and recovery doesn't... especially cause niether have a hidden flag...
(As a side note, what the hell does OS_TOOLS do? google yields no answers)
Right now I only have Windows 7 64bit installed. I'd like to keep it installed and have a hidden Truecrypt system partition that holds Ubuntu. I've installed Ubuntu once before, but it was a while ago so I don't remember the details. Also, I'm not entirely sure how to work Truecrypt as I've never used it before. Do I install Ubuntu first and then run Truecrypt, if so, how do I deal with the fact that installing Ubuntu involves many partitions. Does Truecrypt recognize this automatically or do I have to somehow encrypt them all?
I just got a new acer laptop that came loaded with Win 7, and I want to dual boot with Ubuntu. Naturally the laptop didn't come with a Win 7 disc, but instead has the stupid recovery partition. I've made the recovery DVDs from the eRecovery program but....
From what I read the acer recovery setup is extremely picky and will refuse to work after the partitions have been messed with. Apparently the ALT+F10 to start the recovery process on boot won't even work if acer's MBR is overwritten. What's worse, even the recovery DVDs won't work without the MBR! (At least from what I've been reading... I guess if you install a different HD you are SOL) So how does one get around this? I couldn't care less about acer's stupid recovery partition, but if I ever need to send the computer in for service I think they actually charge extra to restore their crap.
just a general weirdness, but some folders that are in my /home folder don't show up. if i check "show hidden folders", they still don't show up. for all terms and purposes, they are simply not there. however, if i search for them through the search tool, or beagle, they show up as being in my /home folder. so, anyone have any idea how this happened, or how i can remedy this?
I've been using Ubuntu 10.10 for just under a week. Recently, a partition called 'Data' has disappeared, and all my music and documents along with it. The folder is not to be seen in Places or on my desktop. My only way of finding it is to go to terminal. But when I try to open it there I get an error saying I don't have permission to read it. In Puppy Linux and SliTaz I can easily find the partition and read it. What should I do to bring it back in Ubuntu?
I usually repartition a disk by backing up, deleting the partitions, formatting them and repartition. I just did a 200 gig backup (so i am safe) and i want to join 2 (ext3) partition together, sdb1 (data4) and sdb5 (data5) into one big partition. Is there a way to do it without scraping the data in sdb5 (data5). It would save me from rewriting the data back to that new partition (200 gig is time consuming).
Since August of 2009 I have been under attack by corporate Black Hats. I found a 105GB FAT16 Hidden partition on my hard drive. Seventy four percent full (78GB). What led me to this was the fact that I couldn't help but notice that my Internet connection was a revolving door that never stopped spinning. So I went looking for why.
I removed the hidden flag, and patched the partition, but couldn't open that thing no matter what I did. I tried for a month. The attacks started as soon as I stopped these guys from accessing that data. At this point we are 9 months into 24/7 attacks. I have interviewed with the FBI, and local law enforcement, but they are intent on making me out to be a conspiracy nut. I am not at all. All they wanted to do is quiz me on my computer skills. If I managed to draw the attention of a corporate security group they killed it.
I am a US Navy trained Electronics Technician. 58 years old with ECM experience. I have been doing both bench, and field service on all manner of electronics for 40 years. My last job was supporting field engineers, and technicians for Samsung Electronics of America. The attacks have spread to my mother, and best friend. My phones are bugged internally at the phone company, and my modem has had its firmware altered to call them. They run around inside my ISP like they own the place.
I have a separate ext4 partition which contains all my data (music, movies, etc). When I delete files from this partition it is very slow because it copies files from my data partition to the Trash folder in my home partition. How can I avoid this? Can't the trash be configured so that it uses a trash folder in each partition instead of copying files to another partition (which is slow).
Last time,I changed the icon for the ding-dictionary,it used the gear-wheel symbol before. The I saw,that the hidden directories also used the new icon,and now they are all gone Did install the old 256.53-NVIDIA-driver last night,but that should not be the reason ?
I recently purchased a dell inspiron N4010 with windows 7 preloaded...i want to install fedora into it and i want keep it as my primary operasting system.... but what worries me is that the windows setup files is stored in a hidden recovery partion.... So if i install fedora will i lose this ??? if no will i will be able to install windows from that partion?
I decided to swap my existing small hard drive for a bigger one which went well. Then I formatted the old drive using a windows vista machine before putting it on my spares shelf. To my amazement after formatting my 20GB hard drive had become an 8GB hard drive. I fear the worst but remember that Ubuntu put a large swap file on the drive and wonder if Vista has just ignored the system partition. I tried attaching it to my Ubuntu laptop which reports a healthy 8GB hard drive even after formatting again. I don't know enough about Ubuntu to try repartitioning it in that so I tried DSKCHK in windows which reported a healthy 8 GB hard drive. Is all hope lost or is it a "hidden" partition which might be recovered under Ubuntu? If so, how?
How do I solve the problem of "No swap space, check if decopserver is running" Presume an increase in hidden partition required, my guess. Am using the original Xandros OS.
Well, my laptop slid off my couch and crashed down onto hardwood floor. The hard drive is shot. I was using grub and had both ubuntu 10.10 and windows 7 on it. Can't load either OS.
What options do I have for trying to recover data off the ubuntu partition? I tried loading livecd...for some reason, it won't work. Does livecd require a working harddisk?
Is there any way to split partition, in which my ubuntu 11.04 is.I don't wanna loose data, but I dont wanna reinstall it too.P.S. Now I have 750gb HDD, I want to split off 100gb~ for dual boot win7
Well i have an 20GB HDD (/dev/sdb) formated with ext4 and has very important files on it .All of sudden something went wrong and the 20GB partition has been lost . Now how do i have to recover that partition and primarily recover those files . Gparted shows no partition on it but unpartitioned space .
I have a 10gb partition I use for data. The /home is there, and I mount any other data partitions (like /music stuff) onto /data. These other mounted partitions add up to something like 60gb of diskspace, but since they're just mounted on /data, I believe they only take up 4096 bytes per mount point.
Some time ago, I found that the /data parition was full. There was only 330mb of data in /home, so I was perplexed. I found a cache dir under .opera that reported itself as having 132TB (yes, that is terrabytes) of files. I thought deleting the offending directory was the answer, so I deleted that cache dir and every file or subdirectory in it, but the /data partition is still like 99% full. I am a wee bit confused.
This very full /data partition is my only jfs partition. The other mounted filesystems are either ext3 or ntfs. Is it possible that the journal of this filesystem is corrupted? Or is hidden somewhere on the /data parition, taking up a bunch of space? (I obviously don't know enough about filesystem to know whether or not this is a likely scenario.) Is it possible to zero out (or delete and re-create) the journal, if so? The only other thing I can think of is to move all the /home data off, delete the partition, then re-create it and move /home back. I will do that if need be, but I'd rather learn something from the experience, weird as it is.
My data are in /dev/sda5 (ext3). There's an empty partition /dev/sdb5 (ext3). I want /dev/sdb5 to be a mirror image of /dev/sda5, the command to invoke should be :
I was trying to delete a logical drive in windows xp and the damn disk management tool in windows not only deleted my other windows partition but also my linux /data ext3 partition. Now I have a unallocated space in place of these partitions. The data is still there but the entries in the partition table have been removed. So how do I recover my partition. I was trying to use the following tutorial. [URK]
I used the sudo parted /dev/sda -- and then rescue START END command and could get back the /data partition. But it gives me the following error while mounting the partition. mount: wrong fs type, bad option, bad superblock on /dev/sda7, missing codepage or helper program or other error. In some cases useful info is found in syslog - try dmesg | tail or so.
What does this mean. How to I fix this? Also when I try to recover my windows partition using parted it scans for a while and then does nothing. It doesnot ask for writing the lost partition in the partition table. What do I do?
I created an ext3 partition to be able to share data or files between CentOS 5.3 and F11 (and possibly other distros...) on /dev/sda5. I created the folder under /mnt and edited fstab and it's mounting ok and it lets me write to the drive.
But it's only seeing the files I wrote to it in F11, not the files or folders I created in CentOS; not even the text files created in gedit. I read some messages on here, and made myself the owner of the folder (data2share) and rebooted and it's still not seeing the files.
Might it be because F11 is using ext4 and CentOS is using ext3 ?? To test that theory, I started my external usb drive that's also formatted ext3 and it's seeing those files just fine. So I'm stumped.
Here's the output from /sbin/fdisk -
Code: Disk /dev/sda: 250.0 GB, 250059350016 bytes 255 heads, 63 sectors/track, 30401 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Disk identifier: 0x8f97908e Device Boot Start End Blocks Id System
I want to install Ubuntu side by side with Windows. I have a big NTFS partition that has a folder with the same name as my username (let's say "joe"). Inside "joe" I have my personal files. Outside "joe" but still in the partition, there is random stuff that doesn't really belong anywhere, or now useless programs that I had to install there because the main Windows partition ran out of space. If during the Ubuntu installer I choose to use that partition as /home and make a user called "joe", will everything work fine?
I am completely ubuntu right now, and I need to create a partition for XP without losing all the work I have on ubuntu. How can I shrink ubuntu's partition to make a 15 gb partition for XP without losing data?According to Gparted:
