Recovered Data

[NightAngel79]

at my wits end here

recovered data off a co-workers pc and formatted/deleted hard drives, put data on a DVD. It took 2 discs, one was all music and the other was all the pics, docs, etc....

It will not let me access the data on one of the discs
view from 'my computer'

And this is what it looks like when i open the drive

already tried making an ISO with daemon and program said it couldn't open the ISO. I know the data is on there.... any ideas?????

 

[89XJ]

Sounds like the disk got corrupted, this is why I dont like the stock windows burner. It doesnt do a verification after it burns.
Might be screwed...

 

[NightAngel79]

Sounds like the disk got corrupted, this is why I dont like the stock windows burner. It doesnt do a verification after it burns.
Might be screwed...

I hope not... trying various cd recovery programs.... nothing is helping so far

 

[89XJ]

Im not sure theres much you can do, sounds like you have a "coaster".
Maybe someone else knows something I dont though...

 

[A.Nonymous]

Typically this happens if you put a DVD into a CD drive. Doesn't look like this is the case here. The CDs are probably toast.

 

[SUroot]

It would probably be,easier to get the data off the freshly formatted drives. Can you mount them?

 

[NightAngel79]

It would probably be,easier to get the data off the freshly formatted drives. Can you mount them?

Yes. PC i am working on has 2 320's. I formatted them both while mounted with my sata to usb cords, then put them back in PC and formatted AND deleted via the bootable win7 disk.

Since then I have only put win7 and my regular complement of programs via ninite. (about 10 or 12 i suppose)

best i can tell all cd/dvd recovery programs either blow or/and are 30 bucks (us).

ISobuster seems promising......

It is/was a pain to get the hard drives out (not to mention that one of them isn't showing up at all via 'my computer'), that plus the multiple times i deleted/formatted had me figuring I was SOL on that front.....

Isobuster did turn up some stuff but wants money before i will let me even look at what it found

 

[89XJ]

Isobuster did turn up some stuff but wants money before i will let me even look at what it found

Id be kinda skeptical of that...

 

[NightAngel79]

Id be kinda skeptical of that...

Similar to any other trial type program

 

[johnlgalt]

NA - have you looked into a UDF reader? It's possible that all that is wrong is that the disc was never fully closed before removing....

 

[NightAngel79]

NA - have you looked into a UDF reader? It's possible that all that is wrong is that the disc was never fully closed before removing....

Not familiar with that....

second google result for udf reader is this damn isobuster that is giving me issues.... (not to mention wants me to pay for it)

suggestions?


and it looked all good when I did this 2 days ago. only today delivered discs and realized they didnt work (one of them)

 

[9to5cynic]

Not sure where in the format these drives are, but I have used a couple of tools that could help. One I know is free, and the other one I got in class for free, so I don't know the actual price

> scalpel, this is a file recovery tool that preforms automatic file carving. First you'd need to create an image of the disk (probably a huge file - dd if=/bad/drive of=/good/drive/image.dd). Then scalpel on that file will pull out all of the files I could find and put them into nice folders.

> FTK Imager. If the $MFT file is still intact, this should be able to find the files (and tell you which ones were deleted) I'm skeptical of this one because I'm pretty sure even a 'quick' format overwrites the $MFT file. But, the "quick" option should (I think) leave the files.

Now while I do believe that scalpel would work fine, it would require a lot of time, space, and that the drives were not 'fully' formatted.

 

[NightAngel79]

Not sure where in the format these drives are, but I have used a couple of tools that could help. One I know is free, and the other one I got in class for free, so I don't know the actual price

> scalpel, this is a file recovery tool that preforms automatic file carving. First you'd need to create an image of the disk (probably a huge file - dd if=/bad/drive of=/good/drive/image.dd). Then scalpel on that file will pull out all of the files I could find and put them into nice folders.

> FTK Imager. If the $MFT file is still intact, this should be able to find the files (and tell you which ones were deleted) I'm skeptical of this one because I'm pretty sure even a 'quick' format overwrites the $MFT file. But, the "quick" option should (I think) leave the files.

Now while I do believe that scalpel would work fine, it would require a lot of time, space, and that the drives were not 'fully' formatted.

I fear that my only option is get the file off the DVD.... they pull up in isoblaster but it won't let me 'extract' them. There is an error message that pops up and goes away so fast i have NO chance of seeing what it says...

Thats how far i get with the disk and the iso i created.... that is EVERYTHING i need of the disk but i cant get any further...

 

[9to5cynic]

Hmm.. do those file sizes look right to you? To me, a .92KB music folder seems small.

 

[89XJ]

They're all in Kb... Disk is screwed.

 

[NightAngel79]

Hmm.. do those file sizes look right to you? To me, a .92KB music folder seems small.

When i double click it it shows tons of stuff in there, can't access that either though.

Running a deep scan on the drive now. It wont let me access the drive via 'my computer' though. not sure why, i only got it to show up when i used advanced options in Power Data Recovery... that scan wont finish until i'm asleep though. guess I'm waiting till tomorrow to see if I lost ol girls data

 

[9to5cynic]

Hmm... well, hope it works! Sending some positive computer powers your way through the wires.

 

[johnlgalt]

Yeah, file sizes in KBs don't sound right at all. There is still a small chance that you can scalpel them out of the the raw data that is on the disk, b/c at this point it looks like the MFT is FUBARd. However, usually that also leads to corrupted file structure names as well...

Unless it originally copied only shortcuts?

 

[NightAngel79]

Yeah, file sizes in KBs don't sound right at all. There is still a small chance that you can scalpel them out of the the raw data that is on the disk, b/c at this point it looks like the MFT is FUBARd. However, usually that also leads to corrupted file structure names as well...

Unless it originally copied only shortcuts?

What else can I try with the disk though? It shows that the 4.4(ish) gigs of data are on there so I'm pretty sure it wasn't an error on my part, never know though.

I am running recovery software on the drives now but so far having no luck really. Using Power data recovery and scanning the drive via a usb to ata/atapi bridge (just a sata to usb cord pretty much). The drive won't even show up in drive list via my computer or when i tried to use recuva. Not sure how i screwed this whole process up....

 

[johnlgalt]

OK, I think I'm confusing myself - did you go back to the drives, or is this still off the corrupted DVD?

 

[NightAngel79]

OK, I think I'm confusing myself - did you go back to the drives, or is this still off the corrupted DVD?

Went back to the drives cause I was getting NO WHERE with the disc. Running Power data recovery on it now but keep getting cryptic error message.. think i might try a trial version of Easeus and see what that does for me...

 

[nkk]

Went back to the drives cause I was getting NO WHERE with the disc. Running Power data recovery on it now but keep getting cryptic error message.. think i might try a trial version of Easeus and see what that does for me...

If you are willing to try scalpel (it is the easiest solution here), I do have an in depth guide (step by step... It has all you need) I wrote for another member. I would post it here (still may after editing) but as of now it has a bunch of personal info from terminal output. PM me if you want it.

Nkk

 

[9to5cynic]

NA - you could also see if you can get a trial of FTK Imager from Access Data, I can't remember if they have a trial or not... If it is out there grab it though, very nice program.

 

[NightAngel79]

If you are willing to try scalpel (it is the easiest solution here), I do have an in depth guide (step by step... It has all you need) I wrote for another member. I would post it here (still may after editing) but as of now it has a bunch of personal info from terminal output. PM me if you want it.

Nkk

Yea sure, I'd like to check it out.

NA - you could also see if you can get a trial of FTK Imager from Access Data, I can't remember if they have a trial or not... If it is out there grab it though, very nice program.

FTK? Haven't heard of it but will checkout out.

Easueas (or whatever it is called) was doing its thing when I left for work. Will see where I'm at when I get home

 

[NightAngel79]

so i'm completely striking out here. data recovery on the HDD has been unproductive so far. Not sure what to do with this below, scouring all the listings and coming up blank. The pic is all from deep scanning one drive but can't find ANY pics/music/docs....

I'm back to the discs..... what else can i try on the disc???????