Restoring the file system of a USB flash drive - r_nedo - LiveJournal. Program for data recovery from a memory card Recovery of data from a fat32 flash drive

17
May
2013

Hetman Fat Recovery 2.0

Release year: 2013
Genre: Data recovery
Developer: Hetman Software
Developer site: http://hetmanrecovery.com/en/information_recovery/fat-software.htm
Interface language: Multilingual (Russian is present)
Assembly Type: Standard
Bit depth: 32/64-bit
System requirements: Windows 98, XP, 2000, Server 2003, Server 2008, VISTA, 7

Description: Have you lost your data or a system error has made your memory card inaccessible? Accidentally formatted a backup USB flash drive? Drive not readable after internal failure? All the files on the flash drive are gone and Windows offers to format it? Or have you accidentally deleted a lot of files and folders from your working media? Then, Hetman FAT Recovery is what you need.
The program is the best solution in terms of price-performance ratio, which performs a comprehensive recovery of deleted files, folders and data lost after formatting FAT disks. Supporting all versions of the FAT file system, Hetman FAT Recovery recovers information from USB flash drives, digital cameras, MP3 players, various types of memory cards, hard drives, removable drives, and any other media running VFAT, FAT12, FAT16 or FAT32.

Add. information: Recovers information after formatting, deleting, recreating FAT, FAT16 and FAT32 logical partitions on working, damaged, broken or inaccessible disks;
Recovers text documents, compressed archives, digital images, music and video files, and hundreds of other types of files;
The preview function, a step-by-step file recovery wizard, an interface reminiscent of Windows Explorer make working with the program accessible and enjoyable;
The ability to create an image of a damaged disk, the operation of the program in the “Read Only” mode meets the highest standards of information recovery security;
Recovers files deleted with “Shift”+”Del”, lost after emptying the Windows Recycle Bin;
Recovers data lost from digital cameras, mobile phones, portable MP3 players and any other devices connected to a computer with a USB cable;
Recovers information after Quick format (all Windows) and Full format (all versions of Windows, up to Windows Vista) FAT/FAT16/FAT32 partitions;
Supports external and built-in hard drives, USB drives and all kinds of memory cards, including SD, microSD, SDHC, SDXC, CompactFlash, SONY MemoryStick and others.


27
july
2013

Hetman Partition Recovery 2.1 + Portable

Release year: 2013
Genre: Data Recovery
Developer: Hetman Software
Developer website: http://hetmanrecovery.com/

Build Type: Standard + Portable by T_BAG
Bit depth: 32/64-bit
Operating system: Windows XP, Vista, 7, 8
Description: Hetman Partition Recovery provides recovery of deleted files and data from partitions lost after formatting, restoring damaged disks using a step-by-step wizard. This is a reliable and comprehensive solution for cleaning disks and recovering deleted data. Hetman Partition Recovery during...


12
aug
2014

Raise Data Recovery for FAT/NTFS 5.16

Release year: 2014
Genre: Data Recovery
Developer: R.LAB

Interface language: Multilingual (Russian is present)
Assembly Type: Standard
Bit depth: 32/64-bit
Operating system: Windows XP, Vista, 7, 8, 8.1
System requirements:
Hard disk: at least 20MB of free space.
RAM: at least 1GB. Availability of any web browser.
Description: Raise Data Recovery for FAT/NTFS - two programs designed for independent data recovery by non-professionals. Support data recovery from NTFS, FAT, FAT32 including FAT12, FAT16...


27
july
2013

Raise Data Recovery for FAT/NTFS 5.10.1 Portable

Release year: 2013
Genre: Data Recovery
Developer: R.LAB
Developer site: http://rlab.ru/
Interface language: Russian
Build Type: Portable by SamDel
Bit depth: 32/64-bit
Operating system: Windows XP, 2003, Vista, 2008, 7, 8
System requirements:
Hard disk: at least 20MB of free space
RAM: at least 1GB Any web browser
Description: Raise Data Recovery for FAT/NTFS - two programs designed for independent data recovery by non-professionals. Support data recovery from NTFS, FAT, FAT32 including FAT12, FAT16, FAT32. Use...


15
sep
2011

Auslogics File Recovery 3.1.0.0 RePack

Release year: 2011

Developer: Auslogics Software Pty Ltd.
Developer website: http://www.auslogics.com/ru/
Interface language: Multilingual (Russian is present)
Assembly type: Repack
Bit depth: 32/64-bit
Operating system: Windows XP, 2003, Vista, 2008, 7
System requirements: 15 MB hard disk, 256 MB RAM
Description: Auslogics File Recovery is an effective and easy-to-use program for recovering accidentally deleted files, as well as files lost due to viruses or system failures. Any file types With Auslogics File Recovery you can...


22
sep
2014

Auslogics File Recovery 5.0.1.0 Final 5.0.1.0

Release year: 2014
Genre: Recover deleted files
Developer: © 2014 Auslogics. All rights reserved.
Developer site: http://www.auslogics.com/ru/software/file-recovery/
Interface language: Multilingual + Russian
Assembly Type: Standard
Bit depth: 32/64-bit
Operating system: Windows XP, 7, 8
System requirements: 15 MB hard disk space 256 MB RAM
Description: Auslogics File Recovery is an easy-to-use and effective program that can recover files that were accidentally deleted or deleted by malware. Auslogics File Recovery will save your computer from accidental loss...


30
mar
2011

Handy Recovery 5.0 Portable + RePack

Release year: 2010
Genre: Data Recovery
Developer: SoftLogica
Developer website: http://www.handyrecovery.ru/
Interface language: English

System requirements: Pentium III, 512 MB RAM, 10 MB hard disk
Description: Handy Recovery is an excellent program for recovering accidentally deleted files from a hard drive or flash drive, files lost as a result of a virus or software error, power outages or program failures. It is worth noting the possibility of recovering files from damaged hard disk partitions. Reasons for losing in...


06
Jan
2014

Magic Office Recovery 1.0 Silent install

Release year: 2013
Genre: Working with files
Developer: East Imperial Soft
Developer site: www.east-imperial-soft.software.informer.com
Interface language: Russian + English
Build Type: Silent install
Bit depth: 32/64-bit
System requirements: Windows XP, Vista, 7, 8
Description: Magic Office Recovery is not just another file recovery tool! It is equipped with super-powerful algorithms capable of thoroughly scanning the media, detecting the necessary data, verifying recoverable documents. Documents are added to the list of recoverable files only if they are not damaged...


21
Apr
2011

Multi Password Recovery 1.2.8

Release year: 2011
Genre: Password decryptor

Developer site: http://www.passrecovery.com/ru/index.php
Interface language: Multilingual (Russian is present)

Description: Multi Password Recovery (MPR) is a multifunctional Windows solution for decrypting and testing passwords for strength. MPR automatically finds and instantly decrypts passwords from over 80 popular programs without requiring user intervention. In addition to decryption, it shows passwords under asterisks, allows you to copy ...


30
mar
2011

Aid File Recovery 3.2 Portable

Release year: 2010
Genre: Data Recovery
Developer: Aidfile
Developer site: http://www.aidfile.com/
Interface language: English
Platform: Windows XP, Vista, 7
System requirements: - Computer with a processor clock speed of at least 300 MHz - RAM at least 128 MB (allowable minimum - 64 MB).
Description: Aid File Recovery is a program that will allow you to recover files from deleted / formatted partitions, disconnected drives, damaged partition tables, etc. The program supports EXFAT, FAT32, NTFS file systems. Aidfile data recovery recovers data if...


17
mar
2011

Multi Password Recovery 1.2.7 + Portable

Version: 1.2.7
Release year: 2011
Genre: Password decryptor
Developer: Demchenko Alexander
Developer site: http://www.passrecovery.com
Interface language: Multilingual (Russian is present)
Platform: Windows 95, 98, Me, 2000, XP, 2003, Vista, 7
Description: Multi Password Recovery (MPR) is a multifunctional Windows solution for decrypting and testing passwords for strength. MPR automatically finds and instantly decrypts passwords from over 80 popular programs without requiring user intervention. In addition to decryption, it shows passwords under asterisks, allows you to copy ...


23
Apr
2011

Multi Password Recovery 1.2.8 Portable

Release year: 2011
Genre: Password decryptor
Developer: Demchenko Alexander
Developer site: http://passrecovery.com/
Interface language: Multilingual (Russian is present)
Platform: Windows 95, 98, Me, 2000, XP, 2003, Vista, 7
Description: Multi Password Recovery is a multifunctional solution for decrypting and testing passwords for strength. Multi Password Recovery automatically finds and instantly decrypts passwords from over 80 popular programs without requiring user intervention. In addition to decryption, it shows passwords under asterisks, allows you to copy a SAM file, ...


25
Apr
2009

Coyote 0.3.0.2 sms 0.8.0.1

Release year: 2007
Genre: Send SMS
Developer: Cwer
Developer site: http://cwer.ru
Interface language: only Russian
Platform: Windows 98, 2000, XP, Vista
Description: A program for sending free SMS to phones of Russian, Ukrainian, Belarusian and other operators.
Features of the program: * the ability to select a gateway to send * proxy support * https support * auto-detection of operators * updating operators * address book with groups * transliteration of messages * automatic breakdown of messages * templates with groups * logging * design themes


03
mar
2017

Adobe components: Flash Player 24.0.0.221 + AIR 24.0.0.180 + Shockwave Player 12.2.7.197 RePack by D!akov

Release year: 2016
Genre: Browser plugin
Developer: Adobe Systems Incorporated
Developer site: http://www.adobe.com/
Interface language: Russian
Assembly type: Repack
Bit depth: 32/64-bit
Operating system: Windows Vista SP2, 7, 8, 8.1, 10
System requirements: Hard disk space: 150 MB Memory: 256 MB Recommended screen resolution: 800x600
Description: Adobe Flash Player is a plug-in designed for all popular browsers - Internet Explorer, AOL, Firefox, Mozilla, Netscape and Opera, with which you can play Flash movies (SWF files), watch online videos and listen to online ...


19
Jan
2010

Ashampoo 3D CAD Architecture 2 2.0.0.2

Release year: 2009
Genre: 3D modeling
Developer: Ashampoo
Developer site: http://www2.ashampoo.com/
Interface language: English
Platform: Windows)
System requirements: -Processor 1.8 GHz; - RAM 256 MB; -Video card 64 MB; - Free Space 1.7 GB.
Description: shampoo 3D CAD is a professional space design program for the home computer. With the help of the program, you can easily design family houses, shopping malls, high-rise buildings and apartments interactively, in a very realistic 3D world. Views and angles of view from different v...


A disc that, for some reason, acquires RAW status is far from a novelty in the world of modern technologies, and, fortunately, we have a solution to this issue. Do not prematurely panic with the thought “I have a broken USB drive, which contains an important presentation prepared for a corporate meeting.” There is a solution and it is very simple. You can not only recover important information from your disk, but also reanimate it without any loss.

Step 1. RAW media data recovery

First things first, you need to recover all the valuable data of the media. In order to do this quickly and efficiently, use the instructions below.

1. Connect RAW device to PC.
Run the recovery program Starus Partition Recovery, point the program to the drive to scan and analyze.

2. The app will scan to find the deleted content. If you need more information, please visit Complete Analysis.

3. You will see a list of all folders and files in them that are present or have been present on the device since the last formatting. You can preview, find the information you need and, if it is several files, select it, then press the key Restore and export the data in a format convenient for you.

Useful articles


After exporting the data, you can proceed to step number two, which will help you format the device from RAW to NTFS or FAT32.

Step-2. Converting the RAW file system to NTFS and FAT32

The main way to format a drive with a file system change is the utility built into the operating system. Follow the instructions below to format the drive.

Method one. Use the Disk Management menu.

1. Right click on the shortcut My computer or through the menu Start. Next, press the key Control.

2. Now select menu Disk Management. In the list that appears, find the RAW device and right-click on it. Everything is fine on our PC, but if yours has the problem in question, then in the column File system will be written RAW.

2. In the dropdown box, select Format, reset the name, repair the NTFS file system and click OK to confirm the operation.

Be sure to wait for the formatting process to complete without interrupting it or disconnecting the computer from the network.

Method two. Restoring RAW to NTFS/FAT32 using the command line.

The command line, being a built-in Windows tool, helps users of the operating system to solve many issues related to their PCs. One of the problems it can fix is ​​the RAW file system. A system that is not readable by Windows and therefore needs to be reverted to its original format - NTFS or FAT32.

Wait for the process to complete and close the command prompt. Your disk is now usable again.

Additional information to help you keep your discs safe from RAW.
If your device is healthy, fully functional and you want to format it, then a sudden power outage can lead to an error in creating logical partitions, which in turn will change the NTFS / FAT32 system to RAW. By avoiding the situations described above, the chance of logical failures is minimized.

This article talks about a topic that is not quite ordinary, let's say, not everyday. It's not every day you have a file system crash, is it? I hope so. So, this article brings up the topic of restoring FAT and NTFS file systems, or at least rescuing some data from irreparably damaged systems. I would like to make a point right away. That these recovery methods use a minimum of third-party software, and, in principle, we can talk about manual recovery. If you really restore manually, then this will have to be done in machine codes, but such "magic" is available only to a few of the most talented programmers on the planet. It also assumes that the reader already knows some basic information about file systems, so we'll get to the point. There are also good articles on this topic on our portal.

It is also worth noting in advance that restoring FAT systems is much simpler and more logical than NTFS. However, this will be seen from the further content of the article.

FAT Recovery: Forging a Broken Chain.

First, let's talk about restoring hard disk partitions, the so-called partitions. If the first cylinder (0/0/1) is clogged with junk (broken information), then it must be completely reset. You can do this using the Disk Editor utility. Further, for subsequent recovery, you need to copy from any other disk to the damaged MBR and PT partitions (sector 0/0/1). After that, you need to delete all records, except for the very first one. Further, it is necessary to enter deliberately incorrect and incredible information into it (why it will be necessary to understand a little later in the text) - for example, enter the maximum possible value in the data on the number of cylinders: 99999999.

After that, we launch the DiskDoctor utility, with the help of which we are looking for malfunctions of our “fake partition”. When the program finds an incredible value, it offers to fix it, along with offering to fix other errors. If the repair is successful, the program indexes already existing partitions (ie, they again become part of the file system, not a dead zone on the disk). If everything went well, then after rebooting you will receive a restored system with a small “fake appendage” in the form of an additional 4 kb partition. In fact, it does not interfere, but it is no longer needed. It can be painlessly removed using any partition editor program.

Now you can go directly to the recovery of damaged data. When recovering data, you should keep in mind that, without reliable information in the file location table (FAT), automatic or semi-automatic recovery of files larger than one cluster by programs like UnFormat or RecreateData is random. Thus, the data recovery algorithm by such programs is based on searching for disk partition clusters with information about subdirectories, analyzing their contents to determine the location of the directories, determining the numbers of the initial clusters of each file, and analyzing the date of creation or deletion of files. Based on this information, a directory tree is built on the logical drive and the location of files in subdirectories. This information is retrievable with a high degree of accuracy. In case of destruction of the root directory (ROOT), the information and files in the root directory are not restored, and the directory names are replaced by purely conventional names.

There is a problem with files that occupy more than one cluster. Such files are restored using a constant random sequential joining of various unfinished clusters. And therefore, the restoration in this case is most likely absolutely incorrect. However, there is a small loophole. If the machine used an operating system from the 9x series, then you can use it. The fact is that these OSes store swap files on their partitions. In which, with a good combination of circumstances, pieces of the root directory, parts of system files, and, sometimes, if their size is small, the entire FAT system can be saved. For. To find such important pieces, you need to browse directories using special masks.

To get started, you can use the mask F8 FF FF FF. After that, you can search for any known or randomly compiled 16 or 32-bit clusters (depending on what file system you have). Thus, the basic algorithm is to look for the most complete and recent parts of the FAT, and then try to compose the most complete version of the file system from them. After that, you can use utilities like DiskDoctor to try to "build" and "run" the resulting build.

NTFS recovery or "when will it end!"

NTFS is much faster and more reliable than FAT. However, this, in turn, leads to a significant complication of the NTFS structure compared to FAT32. Even a detailed study of the structure of records stored in the MFT (master file table) does not guarantee the possibility of recovering data "manually". The situation is aggravated by the fact that today there are practically no tools that provide convenient means of viewing and editing MFT. To restore NTFS, you will need a much wider range of programs: Norton DiskEdit and Paragon Partition Manager, as well as the Partition Table Editor utility, which is part of the Norton PartitionMagic package.

A situation may occur when the Windows operating system fails to recognize a logical disk with NTFS during boot due to damage to the partition table element describing the disk. To get a better idea of ​​the situation that has arisen, it is advisable to run the Norton Partition Table Editor utility. To view a chain of extended extended partition (EPBR) additional tables, follow these steps:

1. Move the cursor to the line corresponding to the extended section (its code is 0Fh).

2. Click the Goto EPBR button below the table.

If you know that the NTFS partition being restored is in the same place, but the corresponding line indicates the wrong type of partition, you can try to force the correct value. To do this, click on the Set Type button and select the required value in the window that opens. For an NTFS partition, it is 07h. If you know the correct values ​​of other section parameters and they differ from those presented in the table, you can (after remembering or writing down the current values ​​on paper) enter them into the fields of the table. To write your changes to disk, click the Save Change button.

Unfortunately, restoring other partitions and data types in NTFS is much more difficult and this is more of a task for a professional programmer than for an advanced user.

Thus, in this article, data recovery techniques were considered in the most common file systems. I would very much like to wish that this knowledge remains only a theory for you, however. As practice shows, failure still happens sooner or later =(

I think that each of us has encountered a problem when, due to a firmware glitch in a camera, camera, PDA, smartphone, or simply because of a special device /dev/hands, the card was formatted, the data was deleted. At one time, I solved this problem quite simply using the Portable version of Ontrack Easy Recovery, but since I have been a user of linux systems for several years, the use of this unlicensed application through wine seemed not quite kosher, moreover, the thirst for research and adventure demanded to find a free one. native analogue for linux systems. The research ended before it even began, as the first line in a Google search led to a set of TestDisk utilities, which I will discuss in more detail below.

And so, TestDist consists of two utilities:
testdisk and photorec Official website of utilities.
Short description:
testdisk is a powerful utility designed to recover deleted partitions and to restore mbr boot records after software errors, some viruses, human errors (for example, when a partition was simply deleted).
testdisk features:
Partition table fix; recovering deleted partitions Restoring FAT32 boot sector from backup Rebuilding FAT12/FAT16/FAT32 boot sector Fixing FAT tables
Rebuild NTFS boot sector Restore NTFS boot sector from backup Fix MFT using MFT mirror Find ext2/ext3 Backup SuperBlock
Recovery of deleted files in FAT, NTFS and ext2 file systems
Copy files from FAT, NTFS and ext2/ext3 remote partitions.

photorec- a utility for recovering data such as video files, documents, archives from hard drives and cdrom drives, as well as photos (hence the name of the Photo Recovery program) from the built-in memory of cameras. The list of file types for recovery is very impressive and you can familiarize yourself with it.

Both utilities are open source, distributed under the GNU General Public License (GPL). Versions are available for linux, unix, as well as for windows platforms.

Most Linux distributions are already included in the standard repository. For debian-based distributions, installation with the command:

In my case, I needed to recover photos from a camera card after the camera accidentally formatted the card. After inserting the USB flash drive into the card reader and running photorec in the console as root, the utility prompted me to select the drive on which I want to recover the data.

In my case it will be /dev/sdb.
Next, select the type of partition table on the disk, for most users it will be Intel / PC.

And then select the entire partition or disk to search for deleted files. Since I needed to recover all deleted files after formatting, I chose to search the entire disk.
After that, photorec is required to specify the type of file system in which the deleted files were stored. In this case, everything is simple, select the second item.

And then on another disk, select the directory where the utility will save the recovered files.

Next, press Y and the program starts its work. For a 32MB card, it took her less than a minute.
Now about the results of the work:
To be honest, at first I had a lot of doubts about the program's abilities. But when I opened the directory with the results of the utility, I was surprised to find that not only the necessary recently taken 10 photos were restored, but also 110 others, the earliest of which was taken 3 years ago and was not overwritten with further use of the card, although it was formatted card repeatedly.
As a result, we have another victory of good over evil, a happy smile of the owner of the camera, another fact of proof that there is a sea of ​​useful and high-quality opensource utilities.

This is a detailed step-by-step guide to recovering deleted data on FAT file systems ( FAT12/16/32) and VFAT.

  • The FAT filesystem is most commonly used on memory cards, digital cameras, and USB flash drives.
  • VFAT is typically used on external hard drives formatted with WIndows.

You should immediately please you: recovering deleted information does not cause any particular difficulties. In addition, consider the fact that when you delete a file or folder, the item is only marked as "writable" in the file table. The difficulty lies in the fact that when the same space is used by other files, they will be overwritten and it will either be impossible to restore them, or it will be possible, but only partially. TestDisk can detect a deleted item on a hard drive or other media when scanning - when it finds the beginning of the file. Accordingly, if the file has not yet been overwritten, it can be easily restored.

Well, friends, let's start recovering files on a disk with the FAT file system.

Launching the TestDisk Application

If you haven't already installed the TestDisk application on your disk, now is the time to do so. Download the TestDisk distribution by clicking on the button Download.

Unzip the archive, including subdirectories, to disk.

To fully restore a deleted partition or restore the file system of a hard drive, flash drive, sd card, etc., you need administrator privileges to gain access to the physical device.

  • If you are using DOS, run TestDisk.exe
  • For Windows, run TestDisk (for example, testdisk-6.9/win/testdisk_win.exe) from your account in the administrator group. If you are using WIndows 7 and above, use the Run as administrator option.
  • For Linux, you need root access to run the TestDisk application (sudo testdisk-6.9/linux/testdisk_static)
  • If you are using Mac OS X, not as root, you can run the TestDisk program like this: testdisk-6.9/darwin/TestDisk . This will restart TestDisk with the sudo command.

If you want to restore a partition from a system image, run

  • testdisk image.dd to extract a "raw" disk image (in the raw file system)

    • testdisk image.E01 to recover files from Encase EWF image
    • testdisk "image.*" - if the image consists of several files.

To recover a file system not found by TestDisk, run testdisk device, i.e.:

Testdisk /dev/mapper/truecrypt0 or testdisk /dev/loop0 to recover NTFS or FAT32 boot sector files from a TrueCrypt partition. A similar method works with a filesystem encrypted with cryptsetup/dm-crypt/LUKS

Testdisk /dev/md0 - to restore the filesystem located at the top of a Linux RAID storage device.

Create a journal

Select the Create command while it makes sense to add data to the log or run TestDisk using a read-only device.

Creating a log file in TestDisk

Selecting a disk for recovery

All hard drives must be identified by the TestDisk program and have the correct size.

Selecting a disk for recovery in the TestDisk application

Use the up and down keys to select a hard drive with a lost partition or multiple

Press Enter to continue.

If available, use raw device /dev/rdisk* instead of /dev/disk* for faster data migration

Partition table type selection

In the TestDisk application, you will see the partition table types.

Selecting the partition file system type

Select partition table type - usually the default is fine as TestDisk automatically detects the table type

Press Enter to continue.

Starting the recovery process

Select the Advanced option.


Select the Advanced option for the FAT partition

Select the FAT partition with the destroyed data and then select the Undelete command.


Specify the file system type as FAT16

File recovery in FAT system

Deleted files and directories are marked in red.

To reconstruct a file, select an item and press c to copy the file.

To restore a deleted directory, find it in the list and, similar to the previous step, press the c key to restore the contents later.


Restoring the contents of a deleted directory

Saving files to disk

Specify the location of the successor on the disk where you want to write the recovered files from the FAT partition.

FAT file recovery completed


Completing a restore in the Test Disk app

To ensure security, the TestDisk application avoids copying files after reconstruction directly to the disk where the specified files are located. You need to keep in mind that you need to avoid writing to the current disk, since there is a high chance that the files will not be restored and old deleted data will be overwritten.

If you have not been able to find the erased information, you can always try an alternative. To recover photos and other files, we recommend downloading the free PhotoRec application from the TestDisk developer.