Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > NZ Computing > Data recovery, formatted HFS+ sata drive

Reply
Thread Tools

Data recovery, formatted HFS+ sata drive

 
 
Dave Doe
Guest
Posts: n/a
 
      10-08-2010
In article <(E-Mail Removed)-september.org>,
http://www.velocityreviews.com/forums/(E-Mail Removed) says...
>
> In article <(E-Mail Removed)>,
> (E-Mail Removed)mer says...
> >
> > In article <(E-Mail Removed)-september.org>,
> > Dave Doe <(E-Mail Removed)> wrote:
> >
> > > In article <(E-Mail Removed)>, (E-Mail Removed)
> > > says...
> > > >
> > > > On 2010-10-06, Bret <(E-Mail Removed)> wrote:
> > > > > On Tue, 5 Oct 2010 22:27:33 -0700 (PDT), Nik Coughlin wrote:
> > > > >
> > > > >> We got burgled today, great huh.
> > > > >>
> > > > >> My flatmate lost her laptop with years of work on it. Yeah, I know,
> > > > >> backups right. She has some.
> > > > >>
> > > > >> She upgraded the hard disk some months ago and I have the old hard
> > > > >> disk. It's been formatted but not used at all since being formatted.
> > > > >>
> > > > >> I'm able to see the files using a piece of software called SalvageData
> > > > >> Mac:
> > > > >>
> > > > >> http://www.salvagedata.com/recovery-...vage-data-mac/
> > > > >>
> > > > >> It seems to work because I can browse files and it has a preview
> > > > >> function which I've used to look at some of the images on the disk
> > > > >> successfully.
> > > > >>
> > > > >> They want US$190 for a license to activate it before I can actually
> > > > >> recover the data though. She's willing to pay it but first I wanted to
> > > > >> see if anyone has any experience with this or other software, or if
> > > > >> you think I should talk to someone like Computer Forensics NZ first,
> > > > >> or just if anyone can offer any other useful advice.
> > > > >>
> > > > >> Thanks a million
> > > > >
> > > > > Not an answer, but I think you should image it and work with that just to
> > > > > be safe.
> > > >
> > > > Indeed. Should be the first thing you do
> > >
> > > Why??? It will just be an image of a formatted disk. There is no way to
> > > read any underlying data (the image won't get that, so won't contain
> > > it).
> > >
> > > The main thing is to just ensure it is put in a PC as a non-master
> > > drive.

> >
> > No, no , no, no ,no you should do a sector image,
> > On a Mac using OSX you would do something like
> >
> > dd if=/dev/disk1 of=/dev/disk2
> >
> > or what ever the relevant disk IDs are.

>
> Shows you how much you know. dd doesn't do a full sector based image -
> just the boot sectors.
>
> You know what dd stands for?
>
> dd is pottentially a good file recovery program. I wouldn't use it as a
> sector based imager - because it isn't.
>
> ddrescue is a full sector based imager.
>
> dd can be very dangerous - and if the OP has not had experience with it,
> I would not recommend it.
>
> There are other much nicer (GUI) sector based imaging programs around -
> many commercial of course. I wouldn't use any of them though - as such
> an intensive read of the drive will only lessen the chance of data
> recovery. A few years back I used to deal with a data recovery dude in
> Palmy (Alan someone). He died of a heart attack a few years ago - so I
> don't deal with him anymore. He was good, *and* cheap (typically about
> $300 for a drive recovery - but it could be twice or three times that).
> I spoke to him on many occasions and his advice was NOT to (sector)
> image the drive. Just send it to him, with another new drive as big or
> bigger - and he'd send at least the latter back. I never got all the
> reasons from the dude about why it shouldn't be imaged - but one of them
> was a potentially bad controller. While the OP's HDD controller is
> probably good - it can't be ruled out entirely.
>
> The general technique I got from Allen (not sure that's his name now) -
> is that he would first examine the disk, dig in a bit. Try and find out
> what the problem is, based on the customer info and his initial
> forensics. Typically he never imaged the disk.
>
> Feel free to phone up some other data recovery specialists and ask them
> - they won't recommend you image the disk. And the probably won't image
> the disk if you send it to them. There is simply no need. For example,
> take Testdisk - it has backup functions on most of its write procedures.
> eg. you can save existing partition information before making changes.
>
> Here's an example page from their site...
> http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step


Sorry... I got a bit carried away and forgot to make the point I was
gonna make.

That being, data recovery is all about reading the disk's image. But
that's not what whomever orginally said it, said. That you should take
an image of the disk. As I replied, that will simply do an OS based
image of a blank formatted disk (as that's the present condition of the
disk).

(That is, what I believe most people would read that as - as opposed to
sector based reading - which is what most data recovery s/w will do).

So yes, you *do* want to read the disk's image - that's what data
recovery is all about - reading sector by sector / track by track -
minimising the head movement (as opposed to an OS based attack, which
will result in a FAT MFT read, and heading off into the file location,
and back - and so forth.

ddrescue (as opposed to dd) - would be a better approach - personally, I
prefer Testdisk - it's easy to drive, and it works. (I used to use
ddrescue).

With Testdisk, you can try and read the old MFT/FAT/partition info - get
it, and sector read and recover the data (no need to deeply analyse the
entire disk). It's cool. (ddrescue can do the same IIRC).

--
Duncan.
 
Reply With Quote
 
 
 
 
lizaright lizaright is offline
Junior Member
Join Date: Jun 2011
Posts: 1
 
      06-15-2011
Mac operating system stores data in two file systems HFS or HFS+ file system. But sometimes you may lose data from Mac system because of many reasons including accidental deletion or software errors. In this case if backup copies are not available you can recover lost from Mac HFS or HFS+ partitions using HFS data recovery application.
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Cloning so a SATA drive, boting form a SATA drive? R. Giggs. Computer Information 26 11-08-2012 06:54 AM
Does x64 require a SATA RAID Driver to install non-RAID SATA Drive =?Utf-8?B?VGhlb3JldGljYWxseQ==?= Windows 64bit 6 07-18-2005 05:45 AM
Transferring Files From Old IDE Drive To New PC With A SATA Drive: How ? Robert11 Computer Support 3 11-07-2004 09:43 PM
burner not recognized & free data recovery for a formatted drive allen Computer Support 0 01-19-2004 08:40 PM
windows installs to c only not sata if both are formatted already Diehard Computer Information 8 01-18-2004 02:37 AM



Advertisments