Tuesday, February 7, 2012
Linux, Security, Rants and Raves

Categories


 

February 2008
S M T W T F S
« Jan   Mar »
 12
3456789
10111213141516
17181920212223
242526272829  

Archives


When files disappear, Magic Rescue saves the day

February 14th, 2008 by Baldy

 

If you’ve ever had that sick realization that you made a mistake immediately after emptying your Trash or deleting a file with Shift-Del, then Magic Rescue may be the cure you’re looking for. Magic Rescue searches block devices for particular file types, then restores them to a designated directory where you can sort through them.

When files disappear, Magic Rescue saves the day

Posted in Software | No Comments »

TestDisk and PhotoRec 6.9 released

February 14th, 2008 by Baldy

 

TestDisk and  PhotoRec 6.9 have been released!
TestDisk is a powerful free data recovery program! It was primarily designed to help recover lost partitions and/or make non-booting disks bootable again when these symptoms are caused by faulty software, certain types of viruses or human error (such as accidentally deleting your Partition Table).
PhotoRec is a File Recovery program designed to recover lost files; including video, documents and archives from Hard Disks, CDRom and lost pictures from digital camera memory (thus, its Photo Recovery name). PhotoRec ignores the filesystem and goes after the underlying data, so it can still find files even if your media’s filesystem has been severely damaged or re-formatted (overwritten data, of course, can not be recovered).
You can download the latest version from
http://www.cgsecurity.org/wiki/TestDisk_Download
TestDisk & PhotoRec 6.9 comes with numerous improvements.
EFI GUID Partition Table is now supported. EFI GPT is used mainly on Itanium, MacBook and Mac Pro.
Both utilities can use sudo if the user is not root, this functionnality will be enable for MacOSX at least so users won’t have to go in command line. Under Linux, disk model is now displayed to help identify the media.
Internal card readers are now better supported under Windows.
TestDisk
New filesystem support have been added: encrypted LUKS, Mac HFSX, Linux raid md 1.0/1.1/1.2 (0.9 was already supported).
UFS, UFS2 filesystem are better identified now.
TestDisk 6.9 handles Mac partition table partially overwritten by an Intel partition.
It display Unicode filenames correctly and can handle Unicode filesname when copying files from an NTFS partition when supported by the underlying libraries. TestDisk warns if the media is in read-only instead of read-write access.
It’s now possible to copy files from a delete FAT partition found by TestDisk (already possible for NTFS) without having to rewrite the partition table. In the advanced functionality, raw partition imaging capability have been added.
PhotoRec
PhotoRec 6.9 can search for lost files in ext2/ext3 unallocated space only (Was available for FAT and NTFS)
It has a better session support that allow a recovery to be strop and restart later. Windows forensics has been improved with the addition of Windows Enhanced MetaFile .emf (Printing), MS Windows Link .lnk, Internet Explorer index.dat (navigation history…). Nunmerous new file formats have been added.
This version fixes Mac Adress Book and Outlook 64-bits .pst recovery and NTFS free space recovery.
Support for .mov, .zip, FastTrackerII Extended Module .xm and ACE archive has been improved.

TestDisk & PhotoRec 6.9 released

Posted in Software | No Comments »