PCbanter

PCbanter (http://www.pcbanter.net/index.php)
-   Windows 10 Help Forum (http://www.pcbanter.net/forumdisplay.php?f=52)
-   -   Disk Drill (http://www.pcbanter.net/showthread.php?t=1109520)

David November 21st 19 12:40 AM

Disk Drill
 
Has anyone reading here used a commercial product called Disk Drill to
recover data?

Fun and games being played by the 'regulars' here!

https://discussions.apple.com/thread...2#251567212022

Can *YOU* get to the link like 'dialabrain'? puzzled

--
David

Shadow November 21st 19 01:02 AM

[OT]NEW_STALKING_TARGET_?
 
On Wed, 20 Nov 2019 23:40:09 +0000, David
wrote:

Has anyone reading here used a commercial product called STALKING_TARGET_? to
recover data?


They have a demo version, that shows files that can be
recovered.

Instead of reading other people's opinions, use the bld*&^dy
thing then post a technical review. IN YOUR OWN WORDS, of course.
You'd be helping someone.

OT_STALKING_REMOVED


---------------
BD: I want people to "get to know me better. I have nothing to
hide".
I'm always here to help, this page was put up at BD's request,
rather, he said "Do it *NOW*!":

http://tekrider.net/pages/david-brooks-stalker.php

61 confirmed #FAKE_NYMS, most used in cybercrimes!
Google "David Brooks Devon"
[]'s.
--
Don't be evil - Google 2004
We have a new policy - Google 2012

Paul[_32_] November 21st 19 11:22 AM

Disk Drill
 
David wrote:
Has anyone reading here used a commercial product called Disk Drill to
recover data?

Fun and games being played by the 'regulars' here!

https://discussions.apple.com/thread...2#251567212022


Can *YOU* get to the link like 'dialabrain'? puzzled


Disk Drill is described in Wikipedia.

https://en.wikipedia.org/wiki/Disk_Drill_Basic

Whether this is a good idea, would depend on whether
the file system in question had a "weakness" where a
failure could be fixed by it.

For example, if the underlying clusters were damaged or
overwritten, you're out of luck.

Here's another example. A prototype of sorts.

https://www.systutorials.com/docs/linux/man/8-e2image/

And its NTFS equivalent.

https://www.systutorials.com/docs/li...n/8-ntfsclone/

ntfsclone --metadata [OPTIONS] SOURCE

What that gives you, on a second disk, is a
"picture" of the system, but all the clusters are
zeroed out. So if you wanted to look at "myholiday.jpg",
the file would be empty. It would have a size, like 74,567
bytes, but every byte read from the skeletal clone would
be a zero (or whatever). For it to be actually zero,
you'd have to erase the destination drive first and
paint it all zero, before doing the ntfsclone.

To do that on NTFS, at a guess you'd need $I30 from
every directory entry, as well as the $MFT. And you'd
be avoiding backing up the data clusters, in the
name of "doing a fast backup of just the metadata".

And while this is amusing and all, it still requires
consolidation work (since the metadata snapshot hardly ever
matches the actual file system holding the clusters).
An "expert" then has to walk the tree, and zorch the
materials that no longer make sense.

Who knows, if the $MFT was erased, maybe it's a good
idea, or maybe just replacing the $MFT with a backup
copy, is more or less as good.

I don't think I've ever had a situation where working
this way would have made a difference. Things like
"undelete" in NTFS, rely on the fact that on erasing
a file, NTFS is very lazy, and just flips a byte on
the $MFT entry, declaring the entry invalid. But all
the materials to restore the pointer are still there.
A backup of metadata is not required in that case,
to "undelete" something that wasn't done with a secure
erasure method.

I think there *is* some value in doing certain kinds
of backups. For example, backing up just the MBR could
be useful to some people. Especially when you discover
that TestDisk is not able to synthesize the correct
MBR when you actually need that to be done. The same
might be said for backing up a MBR+GPT partition table
(128MB), that is, if you can figure out where it is,
and figure out how to snapshot it. It doesn't wiggle
around, so should make an easy target.

*******

And a word of warning for you. *Don't* use the Gparted
on a Knoppix disc, on your Mac file system. I presented
a year 2003 Mac file system to Gparted, and I was surprised
how GParted was all ready to work on it! I thought it
was a miracle. until Gparted *destroyed* the partition
table at the front :-/ So while some of these programs
may choose to "tease" you with capabilities, you should
have a suitable backup before doing that. Fortunately for
me, I had multiple copies of that file system, so my
blood pressure hardly even spiked. In times past, the
program would have refused to touch the disk.

Any time you use Disk Utilities of various sorts, they
need to be "dialed in". Trust no one. When I bought a
copy of Acronis Disk Director, it had a function to
"change the cluster size on the fly". I was suspicious
(that's hard to do). I ran it, and everything at first
looked good... until I looked at some DLL files in the
System32-type area, and they had "zero size". Nobody
makes DLLs with zero size, and I knew I had ruination.
Again, since I had a backup, no harm was done. It was
pure luck that I happened to notice that. I didn't have
a test plan that said to check for that. I likely
would have discovered on a reboot, that it was trashed.

And in case you ask, why would you need to change the
cluster size, the cluster size on C: is normally 4096.
By accident, I installed Windows 10 on a partition where
the cluster size was 65536 (a backup data partition). And
on a certain release of Windows 10, the OS no longer
tolerated that situation. That meant I needed to change
it to 4096, so the next OS upgrade could work. And ADD
let me down, and the transition could not be done that way.

Paul

Diesel November 23rd 19 05:57 AM

Disk Drill
 
David
Wed, 20 Nov 2019 23:40:09 GMT in alt.computer.workshop, wrote:

Has anyone reading here used a commercial product called Disk
Drill to recover data?


Yep, amongst others. So long as you understand it's limitations, it's a
useful program.


--
Being able to say no is the root of reclaiming your life.

David November 23rd 19 11:54 AM

Disk Drill
 
On 23/11/2019 04:57, Diesel wrote:
David
Wed, 20 Nov 2019 23:40:09 GMT in alt.computer.workshop, wrote:

Has anyone reading here used a commercial product called Disk
Drill to recover data?


Yep, amongst others. So long as you understand it's limitations, it's a
useful program.


Thanks. How much did you pay for YOUR licence, Dustin?


Wolffan[_3_] November 23rd 19 12:34 PM

Disk Drill
 
On 23 Nov 2019, David wrote
(in article ):

On 23/11/2019 04:57, Diesel wrote:
David
Wed, 20 Nov 2019 23:40:09 GMT in alt.computer.workshop, wrote:

Has anyone reading here used a commercial product called Disk
Drill to recover data?


Yep, amongst others. So long as you understand it's limitations, it's a
useful program.


Thanks. How much did you pay for YOUR licence, Dustin?


and yet another new nym.


David November 23rd 19 01:27 PM

Disk Drill
 
On 23/11/2019 11:34, Wolffan wrote:
On 23 Nov 2019, David wrote
(in article ):

On 23/11/2019 04:57, Diesel wrote:
David
Wed, 20 Nov 2019 23:40:09 GMT in alt.computer.workshop, wrote:

Has anyone reading here used a commercial product called Disk
Drill to recover data?

Yep, amongst others. So long as you understand it's limitations, it's a
useful program.


Thanks. How much did you pay for YOUR licence, Dustin?


and yet another new nym.


No, not at all. I've been David throughout my lifetime. It stems from
the fact that my father was named David but called 'Dave'. To
differentiate, everyone called dad Dave and his bonny boy, me, David. :-D


















































































(I know that's not what you meant!)


Wolffan[_3_] November 23rd 19 03:06 PM

Disk Drill
 
On 23 Nov 2019, David wrote
(in article ):

On 23/11/2019 11:34, Wolffan wrote:
On 23 Nov 2019, David wrote
(in article ):

On 23/11/2019 04:57, Diesel wrote:
David
Wed, 20 Nov 2019 23:40:09 GMT in alt.computer.workshop, wrote:

Has anyone reading here used a commercial product called Disk
Drill to recover data?

Yep, amongst others. So long as you understand it's limitations, it's a
useful program.

Thanks. How much did you pay for YOUR licence, Dustin?


and yet another new nym.


No, not at all. I've been David throughout my lifetime.


that’s not the new part, idiot. You keep changing the email domain part.
Every time you do that, and you’ve done it at least four times over the
last week, that’s a new nym.

It stems from
the fact that my father was named David but called 'Dave'. To
differentiate, everyone called dad Dave and his bonny boy, me, David. :-D

(I know that's not what you meant!)


we all know that you’re a nymshifting liar. And a filicide.


Shadow November 23rd 19 04:37 PM

Disk Drill
 
On Sat, 23 Nov 2019 06:34:12 -0500, Wolffan
wrote:

and yet another new nym.


And a rather appropriate one this time.



No sizes scare him. He'll bend over for anyone.
Well, on the upside, he's being honest for once.
[]'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012

Shadow November 23rd 19 04:58 PM

[OT]Disk Drill
 
On Sat, 23 Nov 2019 12:27:22 +0000, David
wrote:

To differentiate, everyone called dad Dave and his bonny boy, me, David.


Bonny means "pretty". Your father was SO proud when you got
into the team as a cheerleader. "She might be wearing a skirt, but
she's my BOY!!!! A BONNY BOY!!!!"
That's probably what you (barely) remember.

100 blank lines and the confession:

(I know that's not what you meant!)


Yes, he was complaining about your new #FAKE_NYM. I think it's
perfect. "You're not afraid of any fellow inmates raping you, in fact,
you're looking forward to the abuse." It's implicit.

OT up, you're stalking to Win 10 again.

---------------
BD: I want people to "get to know me better. I have nothing to
hide".
I'm always here to help, this page was put up at BD's request,
rather, he said "Do it *NOW*!":

http://tekrider.net/pages/david-brooks-stalker.php

62 confirmed #FAKE_NYMS, most used in cybercrimes!
Google "David Brooks Devon"
[]'s



--
Don't be evil - Google 2004
We have a new policy - Google 2012

Diesel November 24th 19 07:08 AM

Disk Drill
 
David
Sat, 23 Nov 2019 10:54:15 GMT in alt.computer.workshop, wrote:

On 23/11/2019 04:57, Diesel wrote:
David
Wed, 20 Nov 2019 23:40:09 GMT
in alt.computer.workshop, wrote:

Has anyone reading here used a commercial product called Disk
Drill to recover data?


Yep, amongst others. So long as you understand it's limitations,
it's a useful program.


Thanks. How much did you pay for YOUR licence, Dustin?


That has what to do with your question?




--
'If you can read this, you're too close to my car.'

David November 24th 19 09:04 AM

Disk Drill
 
On 21/11/2019 10:22, Paul wrote:
David wrote:
Has anyone reading here used a commercial product called Disk Drill to
recover data?

snipped great content for brevity only
Â*Â* Paul


Once more I must thank you for your diligence in responding to me, Paul.

I apologise for the delay in my response. I have had difficulty in
finding a short thread which I'd like you to read. It refers to me
actually USING Disk Drill to recover data!

https://groups.google.com/forum/#!search/Builders$20Laptop$20$2BUbuntu/alt.politics.scorched-earth/czTnrjttJ5A/2XqeKZe_V5oJ

I hope you can find time to read what I said and did! ;-)

David

David November 24th 19 09:36 AM

Disk Drill
 
On 24/11/2019 06:08, Diesel wrote:
David
Sat, 23 Nov 2019 10:54:15 GMT in alt.computer.workshop, wrote:

On 23/11/2019 04:57, Diesel wrote:
David
Wed, 20 Nov 2019 23:40:09 GMT
in alt.computer.workshop, wrote:

Has anyone reading here used a commercial product called Disk
Drill to recover data?

Yep, amongst others. So long as you understand it's limitations,
it's a useful program.


Thanks. How much did you pay for YOUR licence, Dustin?


That has what to do with your question?


It's a test of your honesty, Dustin.

Now Philo, he *IS* an HONEST chap!

https://groups.google.com/forum/#!search/Builders$20Laptop$20$2BUbuntu/alt.politics.scorched-earth/czTnrjttJ5A/2XqeKZe_V5oJ

You should try to be more like him. :-)

Paul[_32_] November 24th 19 11:50 AM

Disk Drill
 
David wrote:
On 21/11/2019 10:22, Paul wrote:
David wrote:
Has anyone reading here used a commercial product called Disk Drill
to recover data?

snipped great content for brevity only
Paul


Once more I must thank you for your diligence in responding to me, Paul.

I apologise for the delay in my response. I have had difficulty in
finding a short thread which I'd like you to read. It refers to me
actually USING Disk Drill to recover data!

https://groups.google.com/forum/#!search/Builders$20Laptop$20$2BUbuntu/alt.politics.scorched-earth/czTnrjttJ5A/2XqeKZe_V5oJ


I hope you can find time to read what I said and did! ;-)

David


Disk Drill, used that way, is not going to have a pre-made
copy of the metadata before it starts. That means its
"special properties" are not being used, and it's turned
into an "ordinary" program.

If the $MFT is trashed, then it can only do what other
utilities do. Namely, look for clusters with a recognizable
signature, and assume the adjacent clusters are part of the
same file (which they might not be). If a disk drive is
highly fragmented (which your builder-friend might have
for a partition state), then certain kinds of data recovery
produce mostly broken files. I've gone through a 100,000
fragments like that in a recovery attempt, and the recovered
material was "mostly crap" and unusable.

For the recovered data, you'd have to check each file
to see whether it was intact or not.

If more of the file system was functional, then perhaps
a ddrescue method would be a way to do it. (ddrescue copies
sectors until after multiple applications, it cannot
recover any more sectors.) Then you work on the "copy"
of the partition, on a disk which is healthy.

Using programs like Recuva and PhotoRec, those are examples
of free programs with slightly different approaches for
data recovery.

I don't know enough about how directory entries (files with
a $I30 entry), point to data files. The $MFT does have a cluster
list, which suggests the $MFT is pretty important. Some other
file systems, the linkages are distributed, and some "experts"
at work, could repair those just as smooth as could be.
They took a course, which included how to do that :-)
And, they were pretty good. They were put out of a job
when better file systems with journals came along, as
the OS was better able to unwind a mess at startup.
We didn't have to trouble them with that sort of
data recovery any more.

Paul

Shadow November 24th 19 01:13 PM

[OT]Disk Drill
 
On Sun, 24 Nov 2019 08:36:23 +0000, David
wrote:

It's a test of your honesty,redacted


CUT_STALKING


What did YOU score in the "test of honesty".
Oh wait, you'll *LIE*.
What a silly questiion.

The thread you started never was about software. How "honest"
of you!
OT up.(yes, I noticed, you've added more follow up groups, all
OT)

---------------
BD: I want people to "get to know me better. I have nothing to
hide".
I'm always here to help, this page was put up at BD's request,
rather, he said "Do it *NOW*!":

http://tekrider.net/pages/david-brooks-stalker.php

62 confirmed #FAKE_NYMS, most used in cybercrimes!
Google "David Brooks Devon"
[]'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012


All times are GMT +1. The time now is 03:49 PM.

Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright © 2004 - 2006 PCbanter
Comments are property of their posters