LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 10-19-2023, 10:30 PM   #1
ClintongSan
LQ Newbie
 
Registered: Oct 2023
Posts: 1

Rep: Reputation: 0
Testdisk Found What Seems To Be An Android Filesystem...


I recently decided to try and use Testdisk to recover a long-lost directory that had a particular game ISO. I'm definitely a noob when it comes to being proficient but have used Testdisk in the past just never to recover a directory after more than a couple days.
My internal (laptop) hard drive is a 1TB HGST (not SSD) so I wasn't too surprised to see that after about 30 minutes the function was only at 02%. I ran the program with sudo, selected my drive and then selected EFI (the partition scheme I've always known this drive to use) and anyways I came back after a couple of hours and the search was almost done but I don't understand what it was showing. A long list of partitions came up, mostly ext4, and here are some of the partition names for clarity...
system
system_ext
odm
odm_dlkm
product
fsg
oem
...and a few more. I wanna say there was another one that started with F and a couple of others. The thing is, I immediately recognize the file system as being very similar to the file system on my Moto device. But the closest I've ever come to having a backup on this computer is having a backup made by TWRP, which might have files with similar names but usually it's obvious if it's a TWRP backup file. I ran dmesg and as expected, the results were over my head but a lot of stuff in the output having to do with bnep, Bluetooth, audit types, and other confusion.
My question, for anyone that has the time and doesn't mind answering, is what is this likely referring to? Is this common? More specific, I've had suspicion that my phone was hacked or had some terrible malware in the past, is it possible that Testdisk saw some kind of connection to my phone, like Bluetooth, and somehow, strangely, was searching my phone's internal storage?? (My device had never been paired, Bluetooth control via the panel had been Turned Off and though WiFi was ON, I was not connected to any network at all. Furthermore, I was doing all of this via running MX Linux from Live USB, only I had selected to Boot From RAM (load live boot to memory/from memory during boot by choosing this option under Advanced at the MX Linux splash screen. Secure Boot was on and I had booted with UEFI, if that makes any difference. I immediately just canceled out of what I was doing and saved the dmesg and dmesg --syslog to an external USB just for record in case something happened after shutting down.

Again, I really appreciate any input at all anyone might give and clarification. Usually there's a pretty simple explanation for these types of things but this was just strange as could be to me. I bought this PC brand new and also my device has never been rooted as it came from Verizon and supposedly such a thing is impossible...(just waiting for my contract to end this year and back to Google Fi or ATT I go. I apologize if any of this is too much detail or confusing, I was just thinking that many details might help anyone explain, should anyone reply

Thanks again for reading and for your time and take care!

Sincerely
Clint
 
Old 10-20-2023, 12:08 AM   #2
Person_1873
Member
 
Registered: Sep 2007
Location: Australia
Distribution: Gentoo / Debian / Rasbian / Proxmox
Posts: 519

Rep: Reputation: 44
there were some laptops released in the mid 2000's with android installed in a dual boot configuration, is it possible that this laptop falls into that category?
there could have been a some update file, or custom firmware image saved on your drive at some point.

I would doubt that testdisk was reading your phone.
testdisk will only read the disk you point it at.
 
Old 10-20-2023, 04:47 AM   #3
fatmac
LQ Guru
 
Registered: Sep 2011
Location: Upper Hale, Surrey/Hants Border, UK
Distribution: Mainly Devuan, antiX, & Void, with Tiny Core, Fatdog, & BSD thrown in.
Posts: 5,520

Rep: Reputation: Disabled
If you are running MX 'live' - why didn't you just mount the drive?

If this 'recover a long-lost directory' has been overwritten, the info is gone....
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] No package 'x11' found No package 'xext' found No package 'xdamage' found No package 'xfixes' found No package 'x11-xcb' found Jigsaw Linux From Scratch 14 02-23-2021 08:35 PM
[SOLVED] CDROM seems to be there but also seems not to be mounted. Crb999 SUSE / openSUSE 47 02-06-2017 03:33 PM
How to write the found table of the hard disk drive with testdisk? Xeratul Linux - General 1 12-31-2015 05:46 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 06:44 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration