|
Data recovery with their hands, a General description of the program Fomsoft Disk Analyzer V 5.02.
The program Fomsoft Disk Analyzer is focused on a wide range of users. It will be useful, as professionals professionals
and ordinary users, not possessing special knowledge and skills in the field of data recovery.
With the help of this program user can independently, without resorting to professional services specialists
data recovery and without leaving home, to obtain a preliminary assessment of the complexity of data loss.
The program Fomsoft Disk Analyzer scans disks and generates diagnostic text files that contain detailed information
about the found structures file systems NTFS and FAT. Looking through these analytical files in any text editor
it is possible to assess the degree of complexity of the situation of loss of access to data.
In many cases, loss of information, it is sufficient to use the data in the file FomsoftDiskAnalyzerMINI.txt to
recover lost data with their hands, using the program
Fomsoft Recovery NTFS.
At the end of the analysis process the specified physical or logical disk, the program Fomsoft Disk Analyzer offers
upload lab Fomsoft request for free advice on the situation.
To determine the actual cost of data recovery without the initial diagnosis is impossible. Therefore, some laboratories
skilful use of this aspect, calling approximate price a few rubles, which the user is ready
to pay. While the company kindly sends a "free" courier, takes the media. Subsequently, however, the user is informed,
what's in it, a very difficult case, data recovery cost a lot more.
If the user is not willing to pay the amount, he returned the media is destroyed information,
or disabled the drive that can be restored only by this laboratory.
The program Fomsoft Disk Analyzer
allows to avoid a situation where the user evaluates the difficulty that he encountered problems and is at risk of being cheated
unscrupulous performers.
This free program allows him to make the initial stage of data recovery (diagnostics) own hands and avoid
such issues.
The user receives a comprehensive answer to the following questions:
- As the system sees the storage as a physical device:
- Volume media, for all media.
- For external and internal hard drives:
- Serial number, hard drive;
- firmware management (Firmware);
- model Name of the hard disk;
- What are logical drives located on the physical disk. Each logical drive is displayed:
- file system Type;
- logical drive Letter;
- Capacity;
- the Address of a start sector (LBA)of the logical disk on the physical disk.
- Are there in sector space, bad sectors.
- during the scan it finds and generates the diagnostic files that contain data elements, file structures:
- Initial boot sector logical disks (BOOT sector);
- Record of the master file table (MFT) and its particular record FILE Record;
- Primary sector table file locations (FAT);
- Sector tables of contents of directories (folders) FAT
Looking at the menu, select the disk to scan, the user sees that the drive is not detected by the operating system, not because it is physically
faulty and it should not be "treated in clean room", which is really expensive. In most cases, data recovery can be performed
with your hands or remotely.
we Have much faster, more reliable, safer and cheaper,
than in the case of treatment services with other recovery labs.
The program helps end users without leaving your home to perform a preliminary analysis of the status of the disk device on its own.
It's enough to:
- Download program site laboratory
data recovery Fomsoft, writing it to a USB flash drive or any other known-good disk.
- Start the program with administrator rights.
- Set physical or Boolean drive that has the problem.
- the user may Refine your selection information about files that interest him.
- to Wait for completion of the program, and analyze analytical development files
viewing them in any text editor, for example, free text editor PSPad editor (http://www.pspad.com).
- If the analysis of the results to the user will be difficult, he can date command the program to send data and
request free consultation lab Fomsoft.
The program generates diagnostic files, which contain information about the found structures
file systems. These files have different volume placed in them.
| File name | Structured files
|
|---|
| FomsoftDiskAnalyzer.txt | System file addresses $ AttrDef , one record
The main file table (MFT) for each logical partition. Using the address of this entry, the program
FomsoftRecoveryNTFS
Can independently reconstruct the directory tree of the corresponding logical disk (partition).
| FomsoftDiskAnalyzerSTRING.txt | Filtered chains of fragments of records of the Main File Table (MFT).
| | FomsoftDiskAnalyzerMINI.txt |
- The initial (BOOT) sectors of logical disks (partitions).
- The first MFT table entry, the $ MFT system file .
- A copy of the first entry in the MFT table, the system file $ MFTMirr .
- MFT records describing the system file $ AttrDef
| FomsoftDiskAnalyzerUSER.txt |
- The initial (BOOT) sectors of logical disks (partitions).
- The first MFT table entry, the $ MFT system file .
- A copy of the first entry in the MFT table, the system file $ MFTMirr .
- MFT records describing the system file $ AttrDef FILE records describing files filtered according to the search filter settings.
| | FomsoftDiskAnalyzerMAXI.txt | All elements of file structures detected by the program on a given disk.
| | FomsoftDiskAnalyzerDISKI.txt | List of physical and logical disks located on them.
| | FomsoftDiskAnalyzerERROR.txt | List of addresses of bad sectors and system error codes.
| | FomsoftDiskAnalyzerMBR.bin | The contents of the zero track of the problematic hard disk.
| | |
The file FomsoftDiskAnalyzerSTRING.txt contains portions of the chains in the MFT that have been discovered on the problem
the hard disk drive. Filtering is ignoring the temporary, auxiliary, chains MFT record, which are formed by
the functioning of the file system older versions of Windows. The size of such chains, a user can install yourself.
By default, temporary (working) chain sequences are considered to be less than 1000 entries FILE Record.
An example of the contents of the file FomsoftDiskAnalyzerSTRING.txt is shown in Fig. A:
Fig. A. Example file content analysis FomsoftDiskAnalyzerSTRING.txt.
The rest of the files have the same structure (Table 1), but differ in the completeness of inclusion of the information about the found elements file structures.
Таблица 1.
| n | description of the attribute of the record file analysis. | note.
|
|---|
| 1. | the Ordinal position of the sector object on the physical disk. | Starting from zero.
| | 2. | Custom record number in the MFT. | All files and folders are assigned unique numbers, identifiers (ID).
| | 3. | the parent item Number (again). | Number (ID) of the folder where you placed the corresponding item (file or folder).
| | 4. | Cluster start placing the data file on a logical disk. | Data in small length are arranged directly in the MFT record.
| | 5. | the file Size. | Length of the file in bytes, or space for folders
| | 6. | Mark deleted item | the Symbol "Y" to the remote element and a space for relevant (existing).
| | 7. | the date and time of creation. | For files $FMT ' - creation time (format).
| | 8. | date and time last modified. |
| | 9. | the Type of the file element. | BMF - NTFS boot sector FRF - record FILE Record for the file; FRD - record FILE Record folder.
| | 10. | the number of the physical disk drive | from 0 to 7
| | 11. | Alpha identifier of the logical drive | from C to Z, if there is a match.
| | 12. | Number of logical sector | If you are able to calculate it
| | 13. | cluster | If there is a logical match.
| | 14. | the Number of sector in cluster or space. |
| | 15. | three-letter extension of the file | the specification is DOS format (8.3).
| | 16. | Long name of the file (folder) | up To 255 characters.
|
An example of a screen view of the file analysis FomsoftDiskAnalyzermMINI.txt is shown in Fig. B.
Fig. B. An example of the contents of the file analysis FomsoftDiskAnalyzerMINI.txt.
An example of a screen view of the file analysis FomsoftDiskAnalyzerm.txt is shown in Fig. C.
Fig. C. Example view analysis file FomsoftDiskAnalyzer.txt.
An example of a screen view of the file analysis FomsoftDiskAnalyzermMAXI.txt is shown in Fig. D.
Fig. D. Example view analysis file FomsoftDiskAnalyzerMAXI.txt.
If the User does not want to risk valuable data, or deal with the problem yourself, it can
to consult with laboratory professionals data recovery Fomsoft.
For this we need to give the program permission to send to Fomsoft request a consultation.
Laboratory specialists will perform an analysis and report its opinion on the e-mail about the challenges and opportunities of data recovery.
This analysis is made within 72 hours free.
To expedite the response, you can contact the lab, working hours from 9 to 22 CET,
on Skype, the username Fomsoft-cz.
|
