Hi,
first the background of this problem: My sister managed to spill water over her macbook, of course she has no backup and exams at university coming up in a few days.. So me, being a nice brother, promised her to recover her files. Well, after laughing at her for not having a backup
I am still able to connect to the macbook (mainly the graphic card seems to be broken, neither primary screen nor external monitors work) via eth cable, but can't access any shared folder. Bonjour shows the mac, but it drops connections due to "invalid user /pw" (and I checked these dozen of times..) Also connecting via target mode & firewire did not work. So I opened the mac, removed the harddrive and plugged it into some SATA-USB connector - it was recognized immediately. My computer is a mac mini with osx 10.9.3 (as far as I remember, the broken macbook had at least any 10.9.x version installed.
Now the confusing part comes:
"du -sh /path/to/external/Volume/Users" results in the output
408G Users/
which seems to be about as much data as it should contain. But an "ls -al" on /Users/$name shows no content. Also any "du -sh" on a subdirectory of ../Users does not show where the data could be hidden.
Unfortunately, I do not know if she uses file vault.
Any help finding and recovering the files would be great
first the background of this problem: My sister managed to spill water over her macbook, of course she has no backup and exams at university coming up in a few days.. So me, being a nice brother, promised her to recover her files. Well, after laughing at her for not having a backup
I am still able to connect to the macbook (mainly the graphic card seems to be broken, neither primary screen nor external monitors work) via eth cable, but can't access any shared folder. Bonjour shows the mac, but it drops connections due to "invalid user /pw" (and I checked these dozen of times..) Also connecting via target mode & firewire did not work. So I opened the mac, removed the harddrive and plugged it into some SATA-USB connector - it was recognized immediately. My computer is a mac mini with osx 10.9.3 (as far as I remember, the broken macbook had at least any 10.9.x version installed.
Now the confusing part comes:
"du -sh /path/to/external/Volume/Users" results in the output
408G Users/
which seems to be about as much data as it should contain. But an "ls -al" on /Users/$name shows no content. Also any "du -sh" on a subdirectory of ../Users does not show where the data could be hidden.
Unfortunately, I do not know if she uses file vault.
Any help finding and recovering the files would be great