Getdataback for NTFS program: restoring the RAW file system (HDD without partitioning). One way to recover information is the GetDataBack utility.
Hello friends! In this article I would like to talk about program for recovering deleted GetDataBack files for FAT | NTFS. This is a very serious program from the German manufacturer Runtime Software. On the Internet you can find many positive reviews, much more than negative ones. GetDataBack can recover files from the most various media information: from hard drives, flash drives and so on. GetDataBack can even create an image of the storage media you need, and you will restore files from this image without affecting the main media, but for a very good result in recovering deleted files, the program needs to set the appropriate script. Which? Read on.
Unfortunately, the program is paid, but what I like about it is that before purchasing the program, GetDataBack will show you the deleted files that it managed to find, if these are photographs, then you can even view them in a special viewer, and view the contents of text files and even copy. Let's say the search result suits you, then you buy the program, everything is fair.
Of course there are and not quite good point, small part files after recovery may turn out to be inoperative, but this state of affairs is typical for all programs for recovering deleted information; it is not always possible to restore absolutely everything that you accidentally deleted past the recycle bin, even the best program in this regard.
Conclusion about the program's operation at the end of the article.
Program for recovering deleted files GetDataBack for NTFS
The content of the article:How to recover deleted files from a hard drive on which all partitions have been deleted.
How to recover deleted data from a specific partition of a hard drive or flash drive.
How to create a drive image in GetDataBack and recover deleted files from it. Official website of the program, download page http://www.runtime.org/data-recovery-products.htm. However, two versions of this program are posted on the site. The first is designed to work with the NTFS file system, the second - with FAT. The first file system is used to format hard drives and is more common, so when recovering data from a simple hard drive we will use the first version of the GetDataBack for NTFS program. If you want to recover deleted data from flash drives and various cards memory formatted in the FAT, FAT32 file system, then use the second version of the program - GetDataBack for FAT.
Click Free Download
The program is very easy to install on your computer; the installer does not contain anything other than the program itself.
Starting the program
And we find ourselves in its main window. Here we have several scenarios for the program.
The program is not in Russian, but I will show and explain everything to you.
I don't know and will use the default settings.
Quick Scan(sudden loss of partition, unsuccessful partitioning).
Losses file system, for example, after formatting or partitioning the disk.
Significant file system losses, for example, after installing a new OS.
I want to recover deleted files.
Attention: most users always choose last scenario I want to recover deleted files, but in my opinion, the program will give a slightly better result if you select the penultimate one. Significant losses of the file system, for example, after installing a new OS - of course in this case the scanning will take much longer than in the first scenario, but still to you can resort to it if the last search option does not give you anything. Next (Weiter)
Please note: left side window
Physical disks
If you accidentally deleted all partitions on your hard drive and restore them using demon paid programs or DMDE failed, which means you can try to at least restore the files.
Select the hard drive with the left mouse and click next. On the right side of the window you can select scanning parameters, but you need to know which sector to start searching from, so I advise you to trust the program and not change anything in them. Next (Weiter)
When scanning your drive is finished, the found file systems will be displayed on the left side of the program. You can continue searching in the file system offered by the program; if the search results do not satisfy you, continue searching in the next file system in the list. In the lower left corner you can select the "Show all" and "Recommended" (default) options. Next (Weiter)
All folders found by the program are displayed on the left, and their contents on the right. If the program was able to find the files needed for recovery, then you can select the folder or file, right-click on it and select the “Copy” command. If GetDataBack is activated, in the next window you will need to select where exactly to copy the recovered files.
As I already noted, graphic files before recovery can be previewed, and the contents of text files can be seen and even copied. Select any photo, right-click on it and select “View”.
Choose text file and also click “View”
Logical drives
Another thing is if you deleted the files you need on a specific partition of your hard drive, for example on the partition under the letter (H:), then select it and click next.
In this window, continue searching in the file system offered by the program; if the result does not suit you, continue searching in the next file system in the list. Further.
Everything is the same as in the previous case. Select the file, right-click and select "Copy"
Image file.
You can create a media image with GetDataBack for NTFS deleted information, which you need to restore and subsequently restore deleted files from this image. After creating the image, you can use the storage medium itself in your work. For example, you can create an image of a flash drive; when the image is created, you can remove the flash drive and start using it, and restore data from the image. Or you can create an image of the entire hard drive. Let's create an image of the partition (H:) of our hard drive as an example. Select our drive (H:) with the left mouse, then select Tools - Create image file.
In this window, select the place where the image will be created, in my case it will be a portable hard drive USB disk under the letter (I:),
Free space there's a lot on it and it's enough for an image. An image of the contents of the disk (H:) is being created.
Once the image is created, you can recover deleted data from the created image. The created disk image (H:) is almost equal in size to the disk itself (H:).
Click Image File (Upload).
In the explorer window that opens, find the image file and click Open.
The process of searching for deleted files begins. When the search is over, you can view the deleted files.
If your program is activated, then deleted files can be restored in a way that is already familiar to you. Right-click on the folder or file you want to restore and select “Copy”. If you have the program activated, select in Explorer exactly where to copy the files needed for recovery. That's all.
My opinion is that the program is good, but I can’t say that free analogues this program: DMDE and R.saver work much worse.
At the end of the article I would like to mention one more interesting and free software data recovery software - iBoysoft Data Recovery, with it you will recover data from formatted, deleted, corrupted or worse than that - RAW section. The program is very simple, even a novice user can handle it.
Everyone knows what a basket is. You delete a file, it is moved to the Recycle Bin, from which it can be restored, and when the file is deleted from the Recycle Bin, it can be restored using standard using Windows no longer possible. You can’t use standard ones, but if you look for a special one, it’s quite possible.
Let's consider a powerful tool for data recovery - the GetDataBack utility produced by Runtime Software. You can download the program from the website www.runtime.org. There are two versions of GetDataBack. One is for working with NTFS, the second is for working with FAT. The first one is best suited for recovering information from modern hard disks, and the second - for various cards and flash memory drives and hard drives, which use the FAT file system to store information. Here we will consider the version for working in NTFS.
If you are embarking on serious data recovery, it makes sense to follow the advice given by the program developers. So, if you have HDD, information from which you want to recover, do not under any circumstances take any action with it. That is, do not write any files to it and do not install programs, including GetDataBack. It is best to install the program on another hard drive (in particular, on another computer) and, connecting your hard drive to this computer, process it using the GetDataBack program.
The fact is that any operation of writing files to disk can lead to new information will be written over the existing one. This also applies to flash memory.
Since the program initially comes with a German interface, I Russified it, and further we will talk about the Russian version of this program.
So, the first step of a user who decides to recover data is to select a typical program operation scenario that will optimize its data recovery efforts.
let's consider possible scenarios data recovery:
I don't know and will use the settings by.
Quick scan (sudden loss of a partition, unsuccessful partitioning) - the file system was damaged, for example, during the operation of the FDisk utility.
File system losses, for example, after formatting or partitioning a disk.
Significant file system losses, for example, after installing a new OS.
I want to recover deleted files.
“I want to recover deleted files” - select this particular scenario and click on the “Next” button.
The left side of the window displays a list of logical drives installed in the system.
In order to begin data recovery from a disk, you must select it. In addition to selecting logical drives, the program provides additional features for file recovery. Thus, restoration can be carried out with physical device- to do this, just click on the “Physical Drives” link, which is located above the “Logical Drives” list.
If you want to restore deleted files, it would be most correct to restore them from that logical drive, from which they were removed. But if you are trying to recover information from a hard drive that has been processed FDisk utility(or from one that was formatted with the quick format command - say, when installing a new OS), it will work best with a physical disk. In addition, if the file system on the hard drive is damaged, operation will be fine. physical disk- the only possibility.
In addition to hard drives connected to the computer, the program can also work with disk images (Image Files) and remote hard drives(Remote Physical Drives) - the corresponding links can be seen on the left side of the program window. There is another link there - Virtual Image (Arrangement Files), which allows you to work with files of a special format (usually text) that describe the data that must be downloaded from various files images With their help, you can “glue together” various data sources.
Restoring data from a disk image is not a bad idea. For example, you can create a disk image and work with it quietly, while your disk will be used for other purposes. Or, for example, by creating an image of a flash drive, you can work with this drive in normal mode, and restore the data from the image.
In order to create a disk image, you must select the disk you are interested in in the Select Drive window and select the “Create Image File” command from the “Tools” menu. After this, a window will appear that serves to configure the process of creating a disk image.
Here you can, firstly, enter the path to save the image, and secondly, indicate to the program whether the image file should be split into parts (Multi file checkbox). If you are trying to create image of a tough disk whose size is several tens (or even hundreds) of gigabytes, it is better to check this box.
Also remember that the hard drive on which you save the image must have enough space for this. After completing the setup, you can click on the “Start” button - as a result, you will receive a disk image that you can work with even without the source disk.
After selecting the drive to scan, you can view Additional information about it and set up some Extra options. The corresponding controls are located on the right side of the program window. Setting them up in general case carried out when you select a data recovery scenario.
For example, it makes sense to configure the settings in the “Partial Scan” section when you know exactly which disk sectors should be scanned in search of deleted files. In most cases, it is best not to change them, allowing the program to scan the entire drive.
Click on the “Next” button to go to the next window “Select file system” (Select File System). In this window, the program will first scan the drive. Depending on its size, this operation can take a long time. When the scan is completed, the program will display the file systems it found on the left side of the window.
When the scan is completed, the program will display the file systems it found on the left side of the window. If the Show Recommended switch is selected at the bottom of the window, the file system that the program considers preferable for file recovery will be displayed there.
In most cases, it makes sense to agree with the program. There may be multiple file systems in the list - this could be a result of scanning a large hard drive that is partitioned and formatted for different file systems.
When the file system is selected, you can click on the “Next” button, the program will begin searching for deleted files and display the folder tree of the scanned file system.
On the left side of the window you can see a folder tree - it looks very much like folders Windows Explorer. The contents of the selected pane are displayed on the right side. Files and folders here have special markings, by which you can determine their type; the corresponding legend is given at the bottom of the window:
■ Read-Only - read-only file;
■ Hidden - hidden file;
■System - system file;
■ Compressed - compressed file;
■ DeLeted - deleted file
Deleted files and punks are crossed out.
In order to check the quality of file recovery, you can select the file and click Enter key- the file will be opened in the editor with which it is associated. To view the contents of a file, just select it and press the F3 key. After this, the file will be opened in the built-in viewer. For example, in my case, I was able to see what the BAT file contains.
In general, the utility is not bad. More than once it helped me out when accidentally deleting files or when physical damage disks. Most of the files could still be read and rewritten to other media.
GetDataBack is one of the leading and well-known, not only in narrow circles, tools for data recovery from various media. German program GetDataBack, with its inherent reliability and accuracy, will recover data even if the partition table and boot sector damaged, folders and files destroyed, as a result virus attack, accidental formatting, overwriting, deleting, etc. Even if low level formatting or if the system itself no longer sees the disk, GetDataBack will still return your data to you. A simple and absolutely safe for files, in read-copy-only mode, a three-step, individually customizable recovery system is used. Works like with long names, as well as with non-standard Unicode character sets, such as Japanese, Chinese, Korean, Russian, Greek, etc. GetDataBack returns data from hard drives (IDE, SCSI, SATA), dynamic drives, USB drives, floppy disks, disk images, partitions, Zip/Jaz disks, CF, Smart Media, SD flash cards, USB Flash Drive and iPod drives. Available separately for FAT and NTFS.
Add. information:
A simple and absolutely safe for files, in read-copy-only mode, a three-step, individually customizable recovery system is used. Works with both long names and non-standard Unicode character sets, such as Japanese, Chinese, Korean, Russian, Greek, etc. GetDataBack returns data from hard drives (IDE, SCSI, SATA), dynamic drives, USB drives, floppy disks, disk images, partitions, Zip/Jaz disks, CF, Smart Media, SD flash cards, USB Flash Drive and iPod drives. Available separately for FAT and NTFS.
This program exists in two versions - GetDataBack for FAT and GetDataBack for NTFS, each of which only works with the mentioned file system type. The program interface is a typical step-by-step "Wizard". At the first stage, you have to choose the type of recovery - recovery of deleted files, recovery of data as a result of formatting/deleting a partition, recovery of “chaotically erased” data. In the next step, you specify the partition or area of the disk to search, and GetDataBack begins scanning. The process is not fast, so the advantages of the program include the ability to save intermediate results at any stage of recovery. the program will show you the sections it found in the specified area. Finally, after selecting a partition, GetDataBack will list all the files found and allow you to restore the selected ones.
GetDataBack allows data recovery both on the computer on which the program is installed and on a remote one - for example, on any computer on the local network.
Work with the following types carriers:
. hard disks With IDE interfaces, SCSI, SATA
. USB drives
. Firewire drives
. separate sections
. dynamic disks
. floppy disks
. disk images
. Zip/Jaz drives
. Compact Flash, Smart Media, Secure Digital cards
. USB Flash drives, iPod drives
Attention! If you have lost data on FAT or NTFS, we recommend that you first take a look. In most cases, it shows results on par with the best paid programs and will allow you to save time and money.
If you need to restore from file system types that are not supported by R.saver, or work from under Mac OS, Linux or FreeBSD, we recommend good program written by our compatriots. It costs less than analogues, the results are at the same level, the range of applications is wider.
We also recommend reading the article if you are faced with this task for the first time. It describes in detail and clearly methods for recovering data from working media; the article also describes terminology, without knowledge of which it will be more difficult to understand the text.
As a rule, operating algorithms various utilities differ even on the same file systems. And for specific severe damage maximum volume The data can be recovered by a program that is not the one that shows the best results in most cases. Therefore, if you find yourself in a situation where the first program you used could not save everything that was required, try several others.
In the general case of working with physically functional drives, the algorithm is as follows: download demo versions, scan, see what has been restored, purchase the program that showed the best result. If the media is physically faulty (or you suspect it is), first make a sector-by-sector copy to a healthy one. You can download programs for making sector-by-sector copies from our
Below is a brief description of the interface and the use of several popular programs to recover data:
Detailed description of interfaces R.saver And UFS Explorer available on their home pages and in the built-in Russian-language documentation.Warning: although software, described below, does not carry out destructive actions (it should not write to the disk from which data is being recovered at all), there is a certain probability that the loss of information occurred due to a physical malfunction that you cannot determine. AND further work with this disc using software methods will lead to aggravation of the situation, up to the complete impossibility of data recovery. Therefore, in in case of critical loss important information, we strongly recommend that you immediately contact specialists.
We also draw your attention to the fact that during the data recovery process, you should exclude any write to the media (or partition, if data is lost only on a specific partition) from which you are going to recover information. This applies to both the installation location of the program and the location where the result is saved.
R-Studio
Developer: R-Tools Technology Inc.
Version at the time of writing: 5.4 build 134120
Demo version limitations: does not recover files larger than 64KB
About the program
- Microsoft Windows: FAT and NTFS, including FAT12, FAT16, FAT32, exFAT, NTFS, NTFS5.
- Apple Mac OS: HFS, HFS+(HFSX).
- FreeBSD, OpenBSD, NetBSD, Solaris: UFS1, UFS2.
- Linux: Ext2, Ext3, Ext4.
System requirements:
- Network connection for data recovery over the network.
Main features:
- Recovery by signatures.
- Working with software and hardware RAID arrays.
- Built-in hexadecimal editor.
- Creating a startup disk for data recovery.
Interface
This program has clear instructions in Russian, where all functions are described in detail.
Let's launch R-Studio with administrator rights. On the left we see a list of drives connected to the system with the partitions located on them (hereinafter referred to as the drive selection interface). If you select a device or partition, its status and properties are displayed on the right side of the interface. At the bottom of the screen there is an area where the operation and error log is displayed, and at the top we see a toolbar.
The buttons are implemented in the form of icons, the appearance of which changes from version to version. You can find out what an icon means by hovering over the button and waiting for the tooltip to appear. You can also start scanning or open a section from the drop-down menu after clicking right click mouse on the drive or partition icon.
data
If, as a result of the above actions, it was not possible to recover part of the data, or the recovered files contain incorrect information, then in the drive selection interface we open another card option (from the “green” or “yellow”) and repeat the operations described in paragraphs 5-8 .
If R-Studio displays reading errors, this may mean there is unreadable sectors. Perhaps the loss of data was caused by their appearance. The more there are, the slower the scanning and reading of information will be. If there are a large number of bad sectors (>50), we recommend reducing the number of read attempts. To do this, select the hard drive in the drive selection interface, select the “I/O Tries” parameter in the list that appears on the right side of the screen and set it to 1. As cardinal decision For this problem, you can also recommend contacting a specialized organization - as a rule, they have software and hardware systems specifically designed to perform this type of work.
The package contains many functions such as creating virtual image media, data recovery over the network (including without downloading operating system using "R-Studio Agent Emergency"), working with RAID arrays, HEX editor, etc. There are also more fine-grained reading and recovery settings. But using these features requires a significant amount of specialized knowledge, so there is no point in describing them in one article.
EasyRecovery Professional
Developer: Kroll Ontrack
Version at the time of writing: 6.21
Limitations of the demo version: recovers only 1 file, works for 30 days
About the program
The following file systems can be accessed in read mode:
System requirements:
- Windows XP/2003/Vista/Windows 7 on an Intel compatible platform.
- Minimum 64 MB random access memory, mouse and sufficient disk space to save the required information (files, disk images, etc.).
- Microsoft Internet Explorer® 6.0 or higher.
- Screen resolution no less than 1024 x 768.
- Administrator rights? required for installation and launch.
- Disabled antivirus protection.
Main features:
- Recovering deleted files based on service records.
- Recovery by signatures.
- File system reconstruction.
- Diagnosis of disk condition.
- “Repair” of documents, ZIP archives and Microsoft files Outlook.
- Creating a startup disk for recovery or diagnostics.
- Opportunity fine tuning recovery.
Interface
The software package does not have a Russian-language version of the interface and help, so working with it is somewhat more complicated.
On the left we see the toolbar, on the top - the control panel. The toolbar contains the following icons: “Disk Diagnostics”, “Data Recovery”, “File Repair”, “Email Repair” Email). We are primarily interested in data recovery.
IN specified menu we see various options recovery, a button to continue the saved recovery session and a button to create boot floppy programs. We will not consider the last two functions now.
Approximate recovery algorithm
First we need to decide on the type of recovery. If the file system is not damaged, no recording was made to the media, and you need to recover deleted files - select “DeletedRecovery”. If the file system was damaged or the media was formatted, then we first advise you to try “FormatRecovery”, and if it does not help, you can only use “RawRecovery”, which will result in files sorted by type. The names are not restored in this case.
First, we will look at the recovery algorithm using “AdvancedRecovery”, since in this case we can choose any of the above recovery types.
“FormatRecovery” differs only in that in it the search for MFT is disabled initially, and in “DeletedRecovery” there are settings for searching files by mask, so there is no point in considering these types of recovery within the framework of this article.
In cases where the file system is significantly damaged, it is advisable to use the program EasyRecovery in the “RawRecovery” mode (search by signatures). The disadvantage of “RawRecovery” is that the result of recovery will be a set of files without names, sorted by type. However, using this method, it is possible to recover information in the most severe cases, when all other methods have failed.
To start this mode, select “RawRecovery”. From the list that appears, select the required drive(the program shows the structure of the disks along with the partitions that were deleted).
Click the “Next” button. We watch the progress bar and wait for the result.
Working in this mode, the program collects files in parts based on existing signatures, a list of which can be seen by clicking the “File Types” button. Using the proposed tools, you can add your own signatures.
As a scan result, we get a list of files with names like FIL1.RAR, FIL2.RAR, etc., sorted according to types into various folders. In selecting objects for subsequent saving, the functions of searching, displaying in accordance with the filter and viewing the contents of the file, called up by pressing the “Find”, “Filter Options” and “View File” buttons, respectively, can help.
Mark the checkboxes next to the necessary files and folders, click “Next”, select a folder and save the recovery result into it. We can also save the session.
We wait for the saving process to complete and check the recovered data. If everything is in order, the recovery process is complete.
Manufacturers claim to work with unreadable sectors, but if there are a large number of them, the program may stop working. You can use a program for sector-by-sector copying to intermediate media and work with the copy, or contact specialists.
GetDataBack
About the program
The following file systems can be accessed in read mode:
- Microsoft Windows: FAT12, FAT16, FAT32 or NTFS.
System requirements:
- Windows 9x/ME/NT4.0/2000/XP/ 2003/Vista/Windows 7 on an Intel compatible platform.
- Minimum 32 MB of RAM, a mouse and sufficient disk space to save the required information (files, disk images, etc.).
- Administrator rights are required to install and run under WinNT/2000/XP/2003/Vista/Windows 7.
Main features:
- Recovering deleted files based on service records.
- Recovery by signatures.
- File system reconstruction.
- The ability to create an image file of a physical disk, partition or part thereof.
- Network recovery support.
- Ability to fine-tune recovery.
Interface
GetDataBack exists in two versions: for FAT12-32 file systems and for NTFS. They are sold separately.
There is no Russian-language interface or help. When you first start the program, it may start with the German interface language. The screenshot shows a menu item in which you can switch to English.
At the top of the window there is a control panel, on the left - helpful information and advice, Workspace is an instruction for selecting the desired recovery option.
The interface of the main part of the program is presented as follows: in the upper part there is a control panel, in the left there is a panel for selecting a drive and its properties. On the right we see the selection of the scanning area and scanning settings.
Approximate recovery algorithm
The program can cope with a small number of unreadable sectors. If there are a large number of them, it is better to make a sector-by-sector copy to an intermediate medium and work with the copy.
GetDataBack is an easy to use program that gives good results. Overall quite comfortable, there are important settings. A serious drawback, in our opinion, is the separation of versions for FAT and NTFS systems. The user may not always know which of these two systems he had.
Recuva
About the program
The following file systems can be accessed in read mode:
- Microsoft Windows: FAT12, FAT16, FAT32, NTFS.
System requirements:
- Windows 2000/XP/Vista/Windows 7 on an Intel compatible platform.
- Minimum 32 MB of RAM, a mouse and sufficient disk space to save the required information (files, disk images, etc.).
- Administrator rights are required to install and run under WinNT/2000/XP/2003/Vista/Windows 7.
Main features:
- Recovering deleted files based on service records.
- File system reconstruction.
- Convenient recovery wizard.
- "Secure file deletion" function.
- Possibility of recovery deleted messages and unsaved documents.
- Possibility of installation on a portable storage device.
Recuva gained popularity as it was one of the first free file recovery programs. Simple and clear, but inferior in capabilities to many applications on the market.
Interface
When you first launch the program, it immediately launches the recovery wizard, which, step by step, figures out what needs to be restored and how. Working with the recovery wizard is simple, but many users will find it more convenient to perform recovery from the main view of the program.
By clicking the “Cancel” button, you can disable the wizard; you can also check the checkbox so that the recovery wizard does not start when launched.
The main view of the program: at the top left is the drive selection menu, below is the scanning results panel, at the top right we see the search (and filter) panel, below it is information about the files (preview, summary, hexadecimal view), at the very bottom of the window is the status bar .
Approximate recovery algorithm
From Recuva You shouldn’t expect anything supernatural, but if you need to quickly and easily recover a just deleted file, you can try it. For more serious problems, we recommend turning to the above programs.
