MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 57 posts ]  Go to page Previous  1, 2, 3
Author Message
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 7th, 2024, 7:41 
Offline

Joined: October 3rd, 2005, 0:40
Posts: 4753
Location: Hungary
Quote:
That is something that I am very much not familiar of, Im going to need more guidance

read File System documentations, check out some working file systems in hex editor to identify main concepts, etc. No guidance can save you the efforts you need to put in learning on your side. One question answered rises a few more questions.
... if you are really interested how things work... Yes, you will need a few days to get a grip of the concepts and it will get a bit easier as you proceed.
FAT file systems are pretty easy ones, good to start with. However, if you are not familiar with the very basics of information technology (bit, byte, word, endianness, logic operations(AND, OR, XOR, shifting), i would recommend looking into that first.
while writing this i realized that i have about 36 yrs of background, so things i think being trivial may not be so. But there's no other way...

_________________
Adatmentés - Data recovery


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 7th, 2024, 7:51 
Offline

Joined: February 2nd, 2023, 19:01
Posts: 90
pepe wrote:
Quote:
That is something that I am very much not familiar of, Im going to need more guidance

read File System documentations, check out some working file systems in hex editor to identify main concepts, etc. No guidance can save you the efforts you need to put in learning on your side. One question answered rises a few more questions.
... if you are really interested how things work... Yes, you will need a few days to get a grip of the concepts and it will get a bit easier as you proceed.
FAT file systems are pretty easy ones, good to start with. However, if you are not familiar with the very basics of information technology (bit, byte, word, endianness, logic operations(AND, OR, XOR, shifting), i would recommend looking into that first.
while writing this i realized that i have about 36 yrs of background, so things i think being trivial may not be so. But there's no other way...

I thought that there may be other methods, I kind of knew about hex comparison. Yes you make it sound easy sir, 36 years is too much ahah


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 7th, 2024, 12:45 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
@Pandemicc, your DMDE screenshot shows an .img file. You can use a hex editor to carve out the region from 0 to 0x7FFF.

https://mh-nexus.de/en/hxd/

My hypothesis is that your old and new exFAT volumes start at LBA 0 and LBA 64, respectively. R-Studio thinks they both start at LBA 64.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 18th, 2024, 18:05 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7864
Location: UK
I've had good results with ReClaime on formatted exFAT drives.

Had one recently where both R-Studio and even UFS Pro produced garbage results, but ReClaime got virtually all data back perfectly.

Probably ReClaime goes about it a different way? It was noticeably slower than the others as it gradually rebuilt the file structure on-the-fly

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 18th, 2024, 18:48 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
AIUI, the OP has already recovered the data with DMDE. If we could see the contents of sectors 0 to 63, I suspect that we will find old exFAT metadata. However, I'm not sure that the OP understands how to carve out this area.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 18th, 2024, 19:49 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 1150
Location: Nederland
pcimage wrote:
I've had good results with ReClaime on formatted exFAT drives.

Had one recently where both R-Studio and even UFS Pro produced garbage results, but ReClaime got virtually all data back perfectly.

Probably ReClaime goes about it a different way? It was noticeably slower than the others as it gradually rebuilt the file structure on-the-fly


Vital in FS recovery is determining offset to filesystem + cluster factor. About every tool can scan for directories and get start clusters for files, but without correct offset to filesystem and blocksize these are useless. If a tool gets garbage results it got one of those two parameters or both of them wrong.

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 18th, 2024, 20:20 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
Here is an unusual case of a ROM based FAT file system with a sector size of 1024 bytes and no 0x55AA signature in the boot sector:

https://www.eevblog.com/forum/repair/what-more-i-can-do/msg5749037/#msg5749037

https://www.eevblog.com/forum/repair/what-more-i-can-do/?action=dlattach;attach=2462675

This freeware tool (ImDisk Toolkit) was able to mount it under Windows:

https://sourceforge.net/projects/imdisk-toolkit/

Quote:
The full package supports the following image file formats (non exhaustive list):

- vhd, vdi and vmdk (static, dynamic and vmdk multipart)
- raw formats (img, ima, raw, vfd...)
- iso, nrg, bin (read-only, and some bin files only)
- dmg, sdi (some versions only)

Some other formats may work but require tests, and the non Windows file systems may need additionnal drivers.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 19th, 2024, 4:14 
Offline

Joined: February 2nd, 2023, 19:01
Posts: 90
pcimage wrote:
I've had good results with ReClaime on formatted exFAT drives.

Had one recently where both R-Studio and even UFS Pro produced garbage results, but ReClaime got virtually all data back perfectly.

Probably ReClaime goes about it a different way? It was noticeably slower than the others as it gradually rebuilt the file structure on-the-fly

even UFS? wow! I always thought that the UFS is the mother of all.


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 19th, 2024, 4:15 
Offline

Joined: February 2nd, 2023, 19:01
Posts: 90
fzabkar wrote:
AIUI, the OP has already recovered the data with DMDE. If we could see the contents of sectors 0 to 63, I suspect that we will find old exFAT metadata. However, I'm not sure that the OP understands how to carve out this area.

yes DMDE already did the job but I would love to carve out sectors and provide more information, I just do not know how


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 19th, 2024, 8:19 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 1150
Location: Nederland
Pandemicc wrote:
pcimage wrote:
I've had good results with ReClaime on formatted exFAT drives.

Had one recently where both R-Studio and even UFS Pro produced garbage results, but ReClaime got virtually all data back perfectly.

Probably ReClaime goes about it a different way? It was noticeably slower than the others as it gradually rebuilt the file structure on-the-fly

even UFS? wow! I always thought that the UFS is the mother of all.


At some point tools have to decide on cluster-factor and filesystem offset. Any tool can make a mistake, thinking one specific tool is above that is foolish. Now assume boot sector, backup boot sector, FAT and all that is gone/wiped/overwritten you lose everything that can give easy clues so you basically have to take directory structures that you find, say pointing to start clusters of JPEGs > make assumptions about data area offsets + cluster size and see if you can find FF D8 FF headers. Or variant, take startclusters and cross reference against file headers you find. But if all files found through file system are corrupt then chances are FS start and/or clustersize was wrong.

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 19th, 2024, 13:33 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
Arch Stanton wrote:
At some point tools have to decide on cluster-factor and filesystem offset. Any tool can make a mistake, ...

ISTM that an intelligent user could determine where the original boot sector was located and then insert a dummy at that location.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 19th, 2024, 13:42 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
Pandemicc wrote:
yes DMDE already did the job but I would love to carve out sectors and provide more information, I just do not know how

Open you image file in HxD.

https://mh-nexus.de/en/hxd/

Edit -> Select Block
    start offset = 0
    length = 8000
    radio button = hex
    OK

Edit -> Copy
File -> New
Edit -> Paste insert
File -> Save as

ZIP your file and upload it here.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 19th, 2024, 15:47 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 1150
Location: Nederland
fzabkar wrote:
Arch Stanton wrote:
At some point tools have to decide on cluster-factor and filesystem offset. Any tool can make a mistake, ...

ISTM that an intelligent user could determine where the original boot sector was located and then insert a dummy at that location.


Yes, or you can 'virtually' enter the values in DMDE > tools > reopen volume parameters.

Attachment:
fat32bs.png
fat32bs.png [ 5.65 KiB | Viewed 6191 times ]

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 20th, 2024, 17:12 
Offline

Joined: February 2nd, 2023, 19:01
Posts: 90
fzabkar wrote:
Pandemicc wrote:
yes DMDE already did the job but I would love to carve out sectors and provide more information, I just do not know how

Open you image file in HxD.

https://mh-nexus.de/en/hxd/

Edit -> Select Block
    start offset = 0
    length = 8000
    radio button = hex
    OK

Edit -> Copy
File -> New
Edit -> Paste insert
File -> Save as

ZIP your file and upload it here.

I hope I did it right, only three lines contains data. https://we.tl/t-6abNFhG7VW


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 20th, 2024, 17:52 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
There is only a new partition table. There are no old metadata.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 20th, 2024, 17:55 
Offline

Joined: February 2nd, 2023, 19:01
Posts: 90
fzabkar wrote:
There is only a new partition table. There are no old metadata.

Disk was formated, hence my recovery adventure. could it be because of that?


Top
 Profile  
 
 Post subject: Re: ST2000LM007 cloned but no file works
PostPosted: December 20th, 2024, 18:09 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
Pandemicc wrote:
fzabkar wrote:
There is only a new partition table. There are no old metadata.

Disk was formated, hence my recovery adventure. could it be because of that?

It would have been the repartitioning rather than the reformatting that destroyed the old metadata.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 57 posts ]  Go to page Previous  1, 2, 3

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 43 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group