• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Recovered Data

NightAngel79

NightAngel79

Mandalorian
Administrator
at my wits end here

recovered data off a co-workers pc and formatted/deleted hard drives, put data on a DVD. It took 2 discs, one was all music and the other was all the pics, docs, etc....

It will not let me access the data on one of the discs
view from 'my computer'
cd%20drive.PNG

And this is what it looks like when i open the drive
cd%20drive2.PNG


already tried making an ISO with daemon and program said it couldn't open the ISO. I know the data is on there.... any ideas?????
 
Sounds like the disk got corrupted, this is why I dont like the stock windows burner. It doesnt do a verification after it burns.
Might be screwed...
 
89XJ said:
Sounds like the disk got corrupted, this is why I dont like the stock windows burner. It doesnt do a verification after it burns.
Might be screwed...
Click to expand...

:eek: I hope not... trying various cd recovery programs.... nothing is helping so far
 
Im not sure theres much you can do, sounds like you have a "coaster".
Maybe someone else knows something I dont though...
 
Typically this happens if you put a DVD into a CD drive. Doesn't look like this is the case here. The CDs are probably toast.
 
It would probably be,easier to get the data off the freshly formatted drives. Can you mount them?
 
SUroot said:
It would probably be,easier to get the data off the freshly formatted drives. Can you mount them?
Click to expand...

Yes. PC i am working on has 2 320's. I formatted them both while mounted with my sata to usb cords, then put them back in PC and formatted AND deleted via the bootable win7 disk.

Since then I have only put win7 and my regular complement of programs via ninite. (about 10 or 12 i suppose)

best i can tell all cd/dvd recovery programs either blow or/and are 30 bucks (us).

ISobuster seems promising......

It is/was a pain to get the hard drives out (not to mention that one of them isn't showing up at all via 'my computer'), that plus the multiple times i deleted/formatted had me figuring I was SOL on that front.....

Isobuster did turn up some stuff but wants money before i will let me even look at what it found :(
 
NA - have you looked into a UDF reader? It's possible that all that is wrong is that the disc was never fully closed before removing....
 
johnlgalt said:
NA - have you looked into a UDF reader? It's possible that all that is wrong is that the disc was never fully closed before removing....
Click to expand...

Not familiar with that....

second google result for udf reader is this damn isobuster that is giving me issues.... (not to mention wants me to pay for it)

suggestions?


and it looked all good when I did this 2 days ago. only today delivered discs and realized they didnt work (one of them)
 
Not sure where in the format these drives are, but I have used a couple of tools that could help. One I know is free, and the other one I got in class for free, so I don't know the actual price ;)

> scalpel, this is a file recovery tool that preforms automatic file carving. First you'd need to create an image of the disk (probably a huge file - dd if=/bad/drive of=/good/drive/image.dd). Then scalpel on that file will pull out all of the files I could find and put them into nice folders.

> FTK Imager. If the $MFT file is still intact, this should be able to find the files (and tell you which ones were deleted) I'm skeptical of this one because I'm pretty sure even a 'quick' format overwrites the $MFT file. But, the "quick" option should (I think) leave the files.

Now while I do believe that scalpel would work fine, it would require a lot of time, space, and that the drives were not 'fully' formatted.
 
9to5cynic said:
Not sure where in the format these drives are, but I have used a couple of tools that could help. One I know is free, and the other one I got in class for free, so I don't know the actual price ;)

> scalpel, this is a file recovery tool that preforms automatic file carving. First you'd need to create an image of the disk (probably a huge file - dd if=/bad/drive of=/good/drive/image.dd). Then scalpel on that file will pull out all of the files I could find and put them into nice folders.

> FTK Imager. If the $MFT file is still intact, this should be able to find the files (and tell you which ones were deleted) I'm skeptical of this one because I'm pretty sure even a 'quick' format overwrites the $MFT file. But, the "quick" option should (I think) leave the files.

Now while I do believe that scalpel would work fine, it would require a lot of time, space, and that the drives were not 'fully' formatted.
Click to expand...

I fear that my only option is get the file off the DVD.... they pull up in isoblaster but it won't let me 'extract' them. There is an error message that pops up and goes away so fast i have NO chance of seeing what it says...

backup.PNG


Thats how far i get with the disk and the iso i created.... that is EVERYTHING i need of the disk but i cant get any further... :(
 
9to5cynic said:
Hmm.. do those file sizes look right to you? To me, a .92KB music folder seems small.
Click to expand...


When i double click it it shows tons of stuff in there, can't access that either though.

Running a deep scan on the drive now. It wont let me access the drive via 'my computer' though. not sure why, i only got it to show up when i used advanced options in Power Data Recovery... that scan wont finish until i'm asleep though. guess I'm waiting till tomorrow to see if I lost ol girls data
 
Yeah, file sizes in KBs don't sound right at all. There is still a small chance that you can scalpel them out of the the raw data that is on the disk, b/c at this point it looks like the MFT is FUBARd. However, usually that also leads to corrupted file structure names as well...

Unless it originally copied only shortcuts?
 
johnlgalt said:
Yeah, file sizes in KBs don't sound right at all. There is still a small chance that you can scalpel them out of the the raw data that is on the disk, b/c at this point it looks like the MFT is FUBARd. However, usually that also leads to corrupted file structure names as well...

Unless it originally copied only shortcuts?
Click to expand...

What else can I try with the disk though? It shows that the 4.4(ish) gigs of data are on there so I'm pretty sure it wasn't an error on my part, never know though.

I am running recovery software on the drives now but so far having no luck really. Using Power data recovery and scanning the drive via a usb to ata/atapi bridge (just a sata to usb cord pretty much). The drive won't even show up in drive list via my computer or when i tried to use recuva. Not sure how i screwed this whole process up....
 
OK, I think I'm confusing myself - did you go back to the drives, or is this still off the corrupted DVD?
 
johnlgalt said:
OK, I think I'm confusing myself - did you go back to the drives, or is this still off the corrupted DVD?
Click to expand...

Went back to the drives cause I was getting NO WHERE with the disc. Running Power data recovery on it now but keep getting cryptic error message.. think i might try a trial version of Easeus and see what that does for me...
 
NightAngel79 said:
Went back to the drives cause I was getting NO WHERE with the disc. Running Power data recovery on it now but keep getting cryptic error message.. think i might try a trial version of Easeus and see what that does for me...
Click to expand...

If you are willing to try scalpel (it is the easiest solution here), I do have an in depth guide (step by step... It has all you need) I wrote for another member. I would post it here (still may after editing) but as of now it has a bunch of personal info from terminal output. PM me if you want it.

Nkk
 
NA - you could also see if you can get a trial of FTK Imager from Access Data, I can't remember if they have a trial or not... If it is out there grab it though, very nice program.
 
nkk said:
If you are willing to try scalpel (it is the easiest solution here), I do have an in depth guide (step by step... It has all you need) I wrote for another member. I would post it here (still may after editing) but as of now it has a bunch of personal info from terminal output. PM me if you want it.

Nkk
Click to expand...


Yea sure, I'd like to check it out.

9to5cynic said:
NA - you could also see if you can get a trial of FTK Imager from Access Data, I can't remember if they have a trial or not... If it is out there grab it though, very nice program.
Click to expand...


FTK? Haven't heard of it but will checkout out.

Easueas (or whatever it is called) was doing its thing when I left for work. Will see where I'm at when I get home
 
so i'm completely striking out here. data recovery on the HDD has been unproductive so far. Not sure what to do with this below, scouring all the listings and coming up blank. The pic is all from deep scanning one drive but can't find ANY pics/music/docs....
hdd.PNG


I'm back to the discs..... what else can i try on the disc???????
 
You must log in or register to reply here.
Back
Top Bottom