Custom format specification: VHD, Virtual HD Image

Post a reply


This question is a means of preventing automated form submissions by spambots.
Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:

BBCode is ON
[img] is ON
[url] is ON
Smilies are ON

Topic review
   

Expand view Topic review: Custom format specification: VHD, Virtual HD Image

Re: Custom format specification: VHD, Virtual HD Image

by Alt » Sat Dec 29, 2012 2:45 pm

File fragmentation mostly depends on how often data was being deleted, written, and overwritten on the disk. Also, if those VHDs were static or dynamic. Nothing can be said conclusively until the end of data recovery. And if it's successful, the recovered files weren't fragmented. Otherwise, a lot of causes may make data recovery fail. Starting from some bugs or imperfect data recovery algorithms of R-Studio to mistakes during the process of data recovery to fragmented files.

Re: Custom format specification: VHD, Virtual HD Image

by AKazak » Fri Dec 28, 2012 12:20 pm

Alt wrote:4. Pray that the files aren't fragmented.
Thank you!
The deleted files are on external USB drive. Does it guarantee non-fragmented write? How do I know if the files are fragmented?

Re: Custom format specification: VHD, Virtual HD Image

by Alt » Fri Dec 28, 2012 10:32 am

1. Download the latest version of R-Studio.
2. Use this file description file:
<?xml version="1.0" encoding="UTF-8"?>
<FileTypeList version="1.0">
<FileType id="113" group="Disk Images" description="Virtual PC Virtual HD Image" features="" extension="vhd">
<Signature from="begin" offset="512">\x63\x78\x73\x70\x61\x72\x73\x65\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF</Signature>
<Signature from="end" offset="512">conectix\x00\x00\x00\x02\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00</Signature>
</FileType>
</FileTypeList>
3. Disable all other file types when scanning.
4. Pray that the files aren't fragmented.

And good luck for file recovery.

Re: Custom format specification: VHD, Virtual HD Image

by AKazak » Thu Dec 27, 2012 4:40 pm

Alt wrote: I've a question:
does the second sector (Sector 1) of all VHD files contain this string at the beginning:
63 78 73 70 61 72 73 65 - FF FF FF FF FF FF FF FF ?
or a part thereof?
Exactly! I analyzed all VHD files I have in HEX editor and the second sector (Sector 1) always starts with:

Code: Select all

63 78 73 70 61 72 73 65 ff ff ff ff ff ff ff ff
00 00 00 00 00 00 06 00 00 01 00 00

Re: Custom format specification: VHD, Virtual HD Image

by Alt » Wed Dec 19, 2012 1:07 pm

We're testing it.

I've a question:
does the second sector (Sector 1) of all VHD files contain this string at the beginning:
63 78 73 70 61 72 73 65 - FF FF FF FF FF FF FF FF ?
or a part thereof?

Re: Custom format specification: VHD, Virtual HD Image

by AKazak » Tue Dec 18, 2012 9:49 pm

Alt wrote:I'm waiting for the next R-Studio version, it has some improvements in processing known file types. It's going to be released soon.
When the release is expected?

Re: Custom format specification: VHD, Virtual HD Image

by Alt » Mon Dec 10, 2012 3:32 am

I'm waiting for the next R-Studio version, it has some improvements in processing known file types. It's going to be released soon.

Re: Custom format specification: VHD, Virtual HD Image

by Guest » Fri Dec 07, 2012 12:40 pm

Alt wrote:I downloaded the files and will look at them soon.
Have you played with recovery of the test VHD file?

Re: Custom format specification: VHD, Virtual HD Image

by Alt » Wed Nov 28, 2012 5:09 am

I downloaded the files and will look at them soon.

Re: Custom format specification: VHD, Virtual HD Image

by Guest » Tue Nov 27, 2012 6:39 am

Please try to place a sample Original.vhd on a HDD, delete it using Shift+Del and recover with the current vhd.xml .

Top