A computer components & hardware forum. HardwareBanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » HardwareBanter forum » General Hardware & Peripherals » Storage & Hardrives
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

reading stranded clusters and FAT tables / data recovery / large partitions



 
 
Thread Tools Display Modes
  #1  
Old December 28th 04, 04:06 PM
David R Wille
external usenet poster
 
Posts: n/a
Default reading stranded clusters and FAT tables / data recovery / large partitions

I am currently trying to read data from a corrupted FAT32 partition
and am looking from some technical advice. The logical drive concerned
contained several 100 mp3 files, for which I have the audio CDs and
separate backup, but also a few dozen video mpg's which I would like
to retrieve. The full partition size is just under 40GB and I believe
the cluster stucture must still be intact since Windows Explorer
reported 0 files found but only 13GB free, the rest presumably still
assigned.

My question is the following. Although undelete software does not seem
able to help (I think the pointer to each cluster is corrupted, this
is a large volume and I think these are addressed differently) I can
still read the file sizes. Given the the cluster information (used to
determine, for example, the free storage allocation) can I then match
the file names to the clusters using file size? The files are large
(50-500MB) so their precison is quite high and also I don't have many
of them.

I am currently using Active@Undelete which is very nice but could also
process and FAT information using Perl or R. Are there any simple
introductions to this subject or simple programs which can read FAT
information or extract clusters to files on another file system.

As you can see, I am no expert in this field but am happy programming
and dealing with numbers etc.

If it helps, I suspect that the initial data loss may have been caused
by RealPlayer crashing during a library re-sync but this may only be a
presumption.

- david
  #2  
Old December 28th 04, 04:13 PM
Paul Rubin
external usenet poster
 
Posts: n/a
Default

I'm no expert either but I thought FAT32 was just like FAT16 except
the pointers were wider. That is, there are two separate copies of
the FAT (primary and secondary) just in case the primary gets
clobbered in a crash. Maybe that can solve your problem. Also, the
FAT entry points only to the first file block. Each block then
contains a pointer to the next block.

Maybe this program can help also:

http://www.briggsoft.com/dsnoop.htm
  #3  
Old December 28th 04, 06:20 PM
Maxim S. Shatskih
external usenet poster
 
Posts: n/a
Default

I would scan the whole disk for directory blocks.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation

http://www.storagecraft.com

"David R Wille" wrote in message
om...
I am currently trying to read data from a corrupted FAT32 partition
and am looking from some technical advice. The logical drive concerned
contained several 100 mp3 files, for which I have the audio CDs and
separate backup, but also a few dozen video mpg's which I would like
to retrieve. The full partition size is just under 40GB and I believe
the cluster stucture must still be intact since Windows Explorer
reported 0 files found but only 13GB free, the rest presumably still
assigned.

My question is the following. Although undelete software does not seem
able to help (I think the pointer to each cluster is corrupted, this
is a large volume and I think these are addressed differently) I can
still read the file sizes. Given the the cluster information (used to
determine, for example, the free storage allocation) can I then match
the file names to the clusters using file size? The files are large
(50-500MB) so their precison is quite high and also I don't have many
of them.

I am currently using Active@Undelete which is very nice but could also
process and FAT information using Perl or R. Are there any simple
introductions to this subject or simple programs which can read FAT
information or extract clusters to files on another file system.

As you can see, I am no expert in this field but am happy programming
and dealing with numbers etc.

If it helps, I suspect that the initial data loss may have been caused
by RealPlayer crashing during a library re-sync but this may only be a
presumption.

- david



  #4  
Old December 31st 04, 10:30 PM
external usenet poster
 
Posts: n/a
Default

Many thanks for these replies. Directory Snoop
(http://www.briggsoft.com/dsnoop.htm) does indeed appear to be able to
read and save both fat tables and number clusters and this with
directory scan information from active@undelete should be enough to
piece everything together. The active undelete documentation includes a
nice summary of FAT structure with some links to Micosoft resources
that I have still to follow. One again many thanks.

David

 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT +1. The time now is 02:02 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 HardwareBanter.
The comments are property of their posters.