Software for imagin...
 
Notifications
Clear all

Software for imaging a drive with bad sectors

19 Posts
13 Users
0 Reactions
3,556 Views
Igor_Michailov
(@igor_michailov)
Honorable Member
Joined: 20 years ago
Posts: 529
 

We did a bit more than was described in the article. D


   
ReplyQuote
(@rye04)
Active Member
Joined: 9 years ago
Posts: 5
 

In the past I have used R-Studio for bad drives (http//www.r-studio.com/). Note, this is not forensically sound but can be considered reasonable.


   
ReplyQuote
passcodeunlock
(@passcodeunlock)
Prominent Member
Joined: 9 years ago
Posts: 792
 

myrescue is a good free utility for creating the image of the readable areas and fill with zeros the unreadable ones. myrescue continues the process on read errors, it has a parameter for read retries as well.

After the first run, rerun the process focusing to the bad areas only with higher read retries until you get out the maximum possible results.


   
ReplyQuote
mokosiy
(@mokosiy)
Trusted Member
Joined: 13 years ago
Posts: 55
 

Here is a very good example once SWAT stormed suspect’s apartment, while he was damaging his hard drive with a hammer. He had 30 minutes to totally destroy the drive. After the accident we got the drive. We changed damaged system board and used Data Extractor to image the drive. We got 98% of data. After we used EnCase Forensic for examination.

If after 30 minutes with a hammer 😯 all the guy managed to actually damage was the PCB (i.e. heads and platters were fine and not even misaligned) it doesn't really stand as a good example, OR you did much, much more than replacing the board (and possibly swapping the also undamaged ROM) …

HDD could be in any state after that. Really, we do not know the details ) Maybe it was a small hammer in hands of drunk man trying to hit the device with poor accuracy 😉


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Really, we do not know the details ) Maybe it was a small hammer in hands of drunk man trying to hit the device with poor accuracy 😉

Sure ) , but then that would have been wink

He had 30 minutes to totally destroy the drive, and he failed miserably at it.

mrgreen

I also have some reserves on using "to storm" to describe an action that took 30 minutes, but then I am notoriously picky …

jaclaz


   
ReplyQuote
Igor_Michailov
(@igor_michailov)
Honorable Member
Joined: 20 years ago
Posts: 529
 

He had 30 minutes to totally destroy the drive, and he failed miserably at it.

A ship engine failed, no one could fix it.
Then they brought in a man with 40 yrs. on the job.
He inspected the engine carefully, top to bottom.
After looking things over, the guy reached into his bag and pulled out a small hammer.
He gently tapped something. Instantly, the engine lurched into life. The engine was fixed!
7 Days later the owners got his bill for 10k.
'What?!' the owners said 'You hardly did anything. Send us an itemized bill.
the reply simply said
Tapping with a hammer. $2
Knowing where to tap $9,998


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

He had 30 minutes to totally destroy the drive, and he failed miserably at it.

A ship engine failed, no one could fix it.
Then they brought in a man with 40 yrs. on the job.
He inspected the engine carefully, top to bottom.
After looking things over, the guy reached into his bag and pulled out a small hammer.
He gently tapped something. Instantly, the engine lurched into life. The engine was fixed!
7 Days later the owners got his bill for 10k.
'What?!' the owners said 'You hardly did anything. Send us an itemized bill.
the reply simply said
Tapping with a hammer. $2
Knowing where to tap $9,998

Yep ) , it is one of the variations of a story that has been attributed to several people.
http//answers.google.com/answers/threadview?id=183998
http//www.snopes.com/business/genius/where.asp

This is the version that (with some reference) the Smithsonian attributes to Charles Steinmetz
http//www.smithsonianmag.com/history/charles-proteus-steinmetz-the-wizard-of-schenectady-51912022/

One appeared on the letters page of Life magazine in 1965, after the magazine had printed a story on Steinmetz. Jack B. Scott wrote in to tell of his father’s encounter with the Wizard of Schenectady at Henry Ford’s River Rouge plant in Dearborn, Michigan.

Ford, whose electrical engineers couldn’t solve some problems they were having with a gigantic generator, called Steinmetz in to the plant. Upon arriving, Steinmetz rejected all assistance and asked only for a notebook, pencil and cot. According to Scott, Steinmetz listened to the generator and scribbled computations on the notepad for two straight days and nights. On the second night, he asked for a ladder, climbed up the generator and made a chalk mark on its side. Then he told Ford’s skeptical engineers to remove a plate at the mark and replace sixteen windings from the field coil. They did, and the generator performed to perfection.

Henry Ford was thrilled until he got an invoice from General Electric in the amount of $10,000. Ford acknowledged Steinmetz’s success but balked at the figure. He asked for an itemized bill.

Steinmetz, Scott wrote, responded personally to Ford’s request with the following

Making chalk mark on generator $1.

Knowing where to make mark $9,999.

Ford paid the bill.

jaclaz


   
ReplyQuote
mgilhespy
(@mgilhespy)
Estimable Member
Joined: 16 years ago
Posts: 102
 

but then I am notoriously picky …

Your notoriety is well deserved and from my perspective at least, your pickiness more often enriches a topic of conversation than stifles it. D


   
ReplyQuote
DrGunlove
(@drgunlove)
Active Member
Joined: 13 years ago
Posts: 5
 

X-ways. Brilliant tool generally.


   
ReplyQuote
Page 2 / 2
Share: