Results 1 to 9 of 9

Thread: Surface scanning tool...

  1. #1
    Antionline Herpetologist
    Join Date
    Aug 2001
    Posts
    1,165

    Surface scanning tool...

    Hey, does anyone know of a tool that can be used to perform a surface scan on a hard disk with no partitions/filesystems. Obviously, the tool cannot be destructive nor can it attempt to move the data elsewhere, as I need it for data recovery and cannot risk it overwriting valid data.

    Cheers,
    cgkanchi
    Buy the Snakes of India book, support research and education (sorry the website has been discontinued)
    My blog: http://biology000.blogspot.com

  2. #2
    Jaded Network Admin nebulus200's Avatar
    Join Date
    Jun 2002
    Posts
    1,356
    I would think that dd could be used to dump the disk to an image and then you can use autopsy to browse through, reconstruct the MBR/FAT (or whatever is used to hold the file structure). I can also allow you to manually browse through different portions of the disk and to look at slack space if needed (though its manual and slow). They are all free but you need linux. Regardless, since you are playing with an image at that point, no risk to the disk.
    There is only one constant, one universal, it is the only real truth: causality. Action. Reaction. Cause and effect...There is no escape from it, we are forever slaves to it. Our only hope, our only peace is to understand it, to understand the 'why'. 'Why' is what separates us from them, you from me. 'Why' is the only real social power, without it you are powerless.

    (Merovingian - Matrix Reloaded)

  3. #3
    Antionline Herpetologist
    Join Date
    Aug 2001
    Posts
    1,165
    Needing linux isn't a problem. I already have it . Anyway, I could always use a live cd and install programs to /tmp and/or the ramdisk. This approach struck me, but I don't know what the state of the disk is (I'll be getting another disk to dd it over to on Saturday). Also, something that surface scans a disk without a filesystem would be a useful tool to have in case you have a totally fscked disk.

    Cheers,
    cgkanchi
    Buy the Snakes of India book, support research and education (sorry the website has been discontinued)
    My blog: http://biology000.blogspot.com

  4. #4
    Dissident 4dm1n brokencrow's Avatar
    Join Date
    Feb 2004
    Location
    Shawnee country
    Posts
    1,243
    Try Spinrite. It's a bootable CD. You'll have a couple of recovery options.

    http://www.grc.com/sr/spinrite.htm
    “Everybody is ignorant, only on different subjects.” — Will Rogers

  5. #5
    Jaded Network Admin nebulus200's Avatar
    Join Date
    Jun 2002
    Posts
    1,356
    Originally posted here by cgkanchi
    Needing linux isn't a problem. I already have it . Anyway, I could always use a live cd and install programs to /tmp and/or the ramdisk. This approach struck me, but I don't know what the state of the disk is (I'll be getting another disk to dd it over to on Saturday). Also, something that surface scans a disk without a filesystem would be a useful tool to have in case you have a totally fscked disk.

    Cheers,
    cgkanchi
    IIRC, dd does not require a file system...I don't remember if Autopsy requires you to select a file system type or not; however, I would assume it would need it b/c at some point it would need to know how to break out the disk (ie, how many sectors to a cluster)...

    As far as bootable CDs, I am pretty sure Helix has all of this on there: http://www.e-fense.com/helix/
    There is only one constant, one universal, it is the only real truth: causality. Action. Reaction. Cause and effect...There is no escape from it, we are forever slaves to it. Our only hope, our only peace is to understand it, to understand the 'why'. 'Why' is what separates us from them, you from me. 'Why' is the only real social power, without it you are powerless.

    (Merovingian - Matrix Reloaded)

  6. #6
    Antionline Herpetologist
    Join Date
    Aug 2001
    Posts
    1,165
    IIRC, dd does not require a file system
    No, it doesn't.

    Cheers,
    cgkanchi
    Buy the Snakes of India book, support research and education (sorry the website has been discontinued)
    My blog: http://biology000.blogspot.com

  7. #7
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Hi cgkanchi

    My first move would be to look at the tools on the HDD suppliers website. They generally have some pretty low level diagnostic capabilities?


  8. #8
    Antionline Herpetologist
    Join Date
    Aug 2001
    Posts
    1,165
    Jesus Christ! I ran spinrite at level 2 (surface scan and recover data) and the damn thing read 34 odd megs in >12 hrs. Is this anywhere close to normal for spinrite? Because if it is, there really was no point in my buying it :-S. This is a 200GB disk we're talking about here! There's no way on earth I'm taking a month to recover this data, even with the obscene payoff!

    Cheers
    Buy the Snakes of India book, support research and education (sorry the website has been discontinued)
    My blog: http://biology000.blogspot.com

  9. #9
    Dissident 4dm1n brokencrow's Avatar
    Join Date
    Feb 2004
    Location
    Shawnee country
    Posts
    1,243
    Something's not right. Last time I used Spinrite it went thru a Level 2 recovery on a 40 gb hdd in about 24 hours.
    “Everybody is ignorant, only on different subjects.” — Will Rogers

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •