Linux za Sve forum

Regionalni Linux forum
https://www.linuxzasve.com/forum/

Kako vratiti dokumente?

https://www.linuxzasve.com/forum/viewtopic.php?t=13176

Stranica: 7/8.

Re: Kako vratiti dokumente?

Postano: 23 tra 2017, 08:26
Postao/la Leptiric
kada ukucam ovu naredbu lsattr (ili kako vec, kopirala sam je, ne brinite), vrti mi svasta nesto. stoji nesto --------- e ------pa ime foldera/6 znakova gdje vrti slova velika i mala i brojeve.
i to on radi vec 15-tak minuta

Re: Kako vratiti dokumente?

Postano: 23 tra 2017, 09:13
Postao/la Leptiric
Prva naredba (lsattr) ide u nedogled izlistavajući nebulozna imena datoteka. Pretpostavljam da su to izgubljene datoteke. Kako ih vratiti - nemam pojma.
Druga naredba (smartctl -a) daje ovo:

Kod: Označi sve

smartctl -a /dev/sda
smartctl 6.5 2016-01-24 r4214 [i686-linux-4.4.0-72-generic] (local build)
Copyright (C) 2002-16, Bruce Allen, Christian Franke, www.smartmontools.org

Smartctl open device: /dev/sda failed: Permission denied
ladica@ladin-PC:~$ sudo !!
sudo smartctl -a /dev/sda
smartctl 6.5 2016-01-24 r4214 [i686-linux-4.4.0-72-generic] (local build)
Copyright (C) 2002-16, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Model Family:     Western Digital Blue
Device Model:     WDC WD10EZEX-08M2NA0
Serial Number:    WD-WCC3F1CFD533
LU WWN Device Id: 5 0014ee 26152ce45
Firmware Version: 01.01A01
User Capacity:    1,000,204,886,016 bytes [1,00 TB]
Sector Sizes:     512 bytes logical, 4096 bytes physical
Rotation Rate:    7200 rpm
Device is:        In smartctl database [for details use: -P show]
ATA Version is:   ACS-2, ACS-3 T13/2161-D revision 3b
SATA Version is:  SATA 3.1, 6.0 Gb/s (current: 6.0 Gb/s)
Local Time is:    Sun Apr 23 10:07:54 2017 CEST
SMART support is: Available - device has SMART capability.
SMART support is: Enabled

=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED

General SMART Values:
Offline data collection status:  (0x82)	Offline data collection activity
					was completed without error.
					Auto Offline Data Collection: Enabled.
Self-test execution status:      (   0)	The previous self-test routine completed
					without error or no self-test has ever 
					been run.
Total time to complete Offline 
data collection: 		(11760) seconds.
Offline data collection
capabilities: 			 (0x7b) SMART execute Offline immediate.
					Auto Offline data collection on/off support.
					Suspend Offline collection upon new
					command.
					Offline surface scan supported.
					Self-test supported.
					Conveyance Self-test supported.
					Selective Self-test supported.
SMART capabilities:            (0x0003)	Saves SMART data before entering
					power-saving mode.
					Supports SMART auto save timer.
Error logging capability:        (0x01)	Error logging supported.
					General Purpose Logging supported.
Short self-test routine 
recommended polling time: 	 (   2) minutes.
Extended self-test routine
recommended polling time: 	 ( 122) minutes.
Conveyance self-test routine
recommended polling time: 	 (   5) minutes.
SCT capabilities: 	       (0x3035)	SCT Status supported.
					SCT Feature Control supported.
					SCT Data Table supported.

SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME          FLAG     VALUE WORST THRESH TYPE      UPDATED  WHEN_FAILED RAW_VALUE
  1 Raw_Read_Error_Rate     0x002f   200   200   051    Pre-fail  Always       -       0
  3 Spin_Up_Time            0x0027   171   168   021    Pre-fail  Always       -       2425
  4 Start_Stop_Count        0x0032   100   100   000    Old_age   Always       -       972
  5 Reallocated_Sector_Ct   0x0033   200   200   140    Pre-fail  Always       -       0
  7 Seek_Error_Rate         0x002e   200   200   000    Old_age   Always       -       0
  9 Power_On_Hours          0x0032   093   093   000    Old_age   Always       -       5480
 10 Spin_Retry_Count        0x0032   100   100   000    Old_age   Always       -       0
 11 Calibration_Retry_Count 0x0032   100   100   000    Old_age   Always       -       0
 12 Power_Cycle_Count       0x0032   100   100   000    Old_age   Always       -       969
192 Power-Off_Retract_Count 0x0032   200   200   000    Old_age   Always       -       30
193 Load_Cycle_Count        0x0032   200   200   000    Old_age   Always       -       943
194 Temperature_Celsius     0x0022   112   103   000    Old_age   Always       -       31
196 Reallocated_Event_Count 0x0032   200   200   000    Old_age   Always       -       0
197 Current_Pending_Sector  0x0032   200   200   000    Old_age   Always       -       0
198 Offline_Uncorrectable   0x0030   200   200   000    Old_age   Offline      -       0
199 UDMA_CRC_Error_Count    0x0032   200   200   000    Old_age   Always       -       0
200 Multi_Zone_Error_Rate   0x0008   200   200   000    Old_age   Offline      -       0

SMART Error Log Version: 1
No Errors Logged

SMART Self-test log structure revision number 1
Num  Test_Description    Status                  Remaining  LifeTime(hours)  LBA_of_first_error
# 1  Short offline       Completed without error       00%      5467         -
# 2  Short offline       Aborted by host               90%      5467         -
# 3  Vendor (0x50)       Completed without error       00%         0         -

SMART Selective self-test log data structure revision number 1
 SPAN  MIN_LBA  MAX_LBA  CURRENT_TEST_STATUS
    1        0        0  Not_testing
    2        0        0  Not_testing
    3        0        0  Not_testing
    4        0        0  Not_testing
    5        0        0  Not_testing
Selective self-test flags (0x0):
  After scanning selected spans, do NOT read-scan remainder of disk.
If Selective self-test is pending on power-up, resume after 0 minute delay.

Re: Kako vratiti dokumente?

Postano: 23 tra 2017, 11:13
Postao/la shrike
Disk po smartu djeluje zdrqv. Mozes li ovdje pejstqt primjere tih nebuloznih imena? Neki c/p outputa (ne sve samo n3ki uzorak)

Re: Kako vratiti dokumente?

Postano: 24 tra 2017, 03:24
Postao/la Cooleech
Zamolila me Leptirica da stavim sliku tih datoteka, pa evo je. U privitku.

Re: Kako vratiti dokumente?

Postano: 24 tra 2017, 09:23
Postao/la shrike
Ti fajlovi izgledaju previše pravilno nazvano da bi bila samo neka slučajnost. Usuđujem li se pomisliti na malware/crypto?

Nego, jel ima šanse da se rokne ova naredba "hexdump -C file | grep -n 200" Konkretno (dat će dugi output, c/p sve u code tagove):

Kod: Označi sve

hexdump -C /home/lada/3gI.D30R12/OInG6_ | head -n 200

hexdump -C /home/lada/3gI.D30R12/_w15ss | head -n 200

hexdump -C /home/lada/3gI.D30R12/rhxv1X | head -n 200
također za "stat" i "file":

Kod: Označi sve

stat /home/lada/3gI.D30R12/rhxv1X  /home/lada/3gI.D30R12/_w15ss /home/lada/3gI.D30R12/OInG6_

Kod: Označi sve

file /home/lada/3gI.D30R12/rhxv1X  /home/lada/3gI.D30R12/_w15ss /home/lada/3gI.D30R12/OInG6_
To će nam dati bolju ideju što su točno tifilovi.

Re: Kako vratiti dokumente?

Postano: 24 tra 2017, 09:54
Postao/la Leptiric
shrike je napisao/la:Ti fajlovi izgledaju previše pravilno nazvano da bi bila samo neka slučajnost. Usuđujem li se pomisliti na malware/crypto?

Nego, jel ima šanse da se rokne ova naredba "hexdump -C file | grep -n 200" Konkretno (dat će dugi output, c/p sve u code tagove):

Kod: Označi sve

hexdump -C /home/lada/3gI.D30R12/OInG6_ | grep -n 200

hexdump -C /home/lada/3gI.D30R12/_w15ss | grep -n 200

hexdump -C /home/lada/3gI.D30R12/rhxv1X | grep -n 200
također za "stat" i "file":

Kod: Označi sve

stat /home/lada/3gI.D30R12/rhxv1X  /home/lada/3gI.D30R12/_w15ss /home/lada/3gI.D30R12/OInG6_

Kod: Označi sve

file /home/lada/3gI.D30R12/rhxv1X  /home/lada/3gI.D30R12/_w15ss /home/lada/3gI.D30R12/OInG6_
To će nam dati bolju ideju što su točno tifilovi.

Kod: Označi sve

stat: cannot stat '/home/lada/3gI.D30R12/rhxv1X': No such file or directory
stat: cannot stat '/home/lada/3gI.D30R12/_w15ss': No such file or directory
stat: cannot stat '/home/lada/3gI.D30R12/OInG6_': No such file or directory
mozda je zato jer su ova imena dok ih je jos vrtio?

Re: Kako vratiti dokumente?

Postano: 24 tra 2017, 09:57
Postao/la Leptiric
mislim da kraj naredbe izlistavanja nismo ni docekali. jer je to radio u nedogled.

Re: Kako vratiti dokumente?

Postano: 24 tra 2017, 10:13
Postao/la Leptiric
pokrenula sam opet lssatr i kopirala par logova, pa s tim imenima pokusala ove sve naredbe, ali uvijek daje no such file or directory.

Re: Kako vratiti dokumente?

Postano: 24 tra 2017, 10:43
Postao/la shrike
Korigirao sam naredbu gore, head -n 200 je umjesto grep -n 200 (automatski već nakon | pišem grep iz nekog razloga ...). Ovako kako si opisala bi značilo a se sadržaj foldera konstantno mijenja što je ekstremno bizarno. lsattr naredba je zato jer sam htio vidjeti da li ima na razini filesystema neka specijalna svojstva, ali nema. Možeš koristiti ls -lha umjesto toga. Ako je to istina neki program mora tamo nešto raditi (ipak provjeri da li daješ točnu putanju), probaj ovo (reći će nam što drži sadržaj tog foldera otvorenim)

Kod: Označi sve

lsof | grep '3gI.D30R12'
Ovo bi nam moglo onda isto nešto reći (iako češ morat instalirati sysdig za ovo):

Kod: Označi sve

sysdig -c fdbytes_by fd.filename "fd.directory=/home/lada/3gI.D30R12/"

Re: Kako vratiti dokumente?

Postano: 24 tra 2017, 10:56
Postao/la Leptiric
shrike je napisao/la:Korigirao sam naredbu gore, head -n 200 je umjesto grep -n 200 (automatski već nakon | pišem grep iz nekog razloga ...). Ovako kako si opisala bi značilo a se sadržaj foldera konstantno mijenja što je ekstremno bizarno. lsattr naredba je zato jer sam htio vidjeti da li ima na razini filesystema neka specijalna svojstva, ali nema. Možeš koristiti ls -lha umjesto toga. Ako je to istina neki program mora tamo nešto raditi (ipak provjeri da li daješ točnu putanju), probaj ovo (reći će nam što drži sadržaj tog foldera otvorenim)

Kod: Označi sve

lsof | grep '3gI.D30R12'
Ovo bi nam moglo onda isto nešto reći (iako češ morat instalirati sysdig za ovo):

Kod: Označi sve

sysdig -c fdbytes_by fd.filename "fd.directory=/home/lada/3gI.D30R12/"
za ovu prvu dobijem:

Kod: Označi sve

lsof: WARNING: can't stat() tracefs file system /sys/kernel/debug/tracing
      Output information may be incomplete.
Vremenska zona: UTC+01:00
Stranica: 7/8.

Powered by phpBB® Forum Software © phpBB Limited

HR (CRO) by Ančica Sečan