Partialy damaged im...
 
Notifications
Clear all

Partialy damaged image recovery

2 Posts
2 Users
0 Reactions
297 Views
(@donatas)
New Member
Joined: 15 years ago
Posts: 1
Topic starter  

Hi all,

Some time ago, I've imaged HDD using FTK Imager. Imager created 8 E01 files, each 1,5 GB size. Later these Image files was copied to DVD discs.
I've copied 3 image files to DVD disc (Files E01-03 - to first DVD, E04-06 - to second DVD etc.).
Now I have an issue when trying to copy E03 and E06 files from DVD's to my Workstation HDD. Copying process stops at 99,9%.
I suspect, that this issue is caused by disc overburn.

Now I have two questions
1. What software you would recommend, that allows me to copy readable content of those two files from DVD's to HDD.
2. Because 99.9 % of image file content is accessible, is it still possible to open entire HDD image (I understand, that Image hash will not match).

Thanks!!!


   
Quote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

You can have a go with cdcheck
http//www.kvipu.com/CDCheck/
or UNstoppable copier
http//www.roadkil.net/program.php/P29/Unstoppable%20Copier

Another way is (since you are having problems at 99.9%) using a "dd-like tool, like dsfo of the dsfok toolkit
http//members.ozemail.com.au/~nulifetv/freezip/freeware/index.html
It will eventually "error out", but you can use the partial image, adding to it a few "00" sectors.

Problem is that an .E0x files should have a "footer", so cannot say if such "altered" files can be re-joined (I doubt it) and the actual file format is AFAIK a "non-disclosed" one
http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&p=6533045
http//www.forensicswiki.org/wiki/Encase_image_file_format

You may try TESTDISK on the resulting images, but YMMV
http//www.cgsecurity.org/wiki/TestDisk
http//www.cgsecurity.org/wiki/TestDisk_Step_By_Step

jaclaz


   
ReplyQuote
Share: