dd for windows is not hard to use
for example:
dd if=<Input file> of=<output file> bs=<blocksize>
dd --list gives the info
using the symbolic link device path e.g. dd if=\\?\Device\HarddiskVolume17
is much faster than using the mountpoint e.g. dd if=\\.\f:
Last edited by SIW2; 26 Feb 2023 at 10:17.
Where can DD for Windows be safely downloaded from? I could only find .tar for Linux.
I got these from chrysocome
dd-0.6beta3.zip
there is a 64 bit version as well but cant upload it direcly here because it is just over 2mb.
onedrive ddrelease64.zip
chrysocome.net - dd for windows
restore is similar
dd if=<path_to_imagefile> of=<destination> bs=<blocksize>
i needed to reboot after restoring for windows to see the restored partition
restored partition looks ok
.img file can be displayed in diskgenius and copy out/view any files/folders
DiskGenius: Data Recovery, Partition Manager, Backup & Disk Utilities
also free paragon image mounter mounts raw images as physical disk
Image Mounter | Paragon Software Group
Last edited by SIW2; 26 Feb 2023 at 09:44.
Thank you for uploading these files. For some reason I can not download the first link (uploaded to ten forums) as it continuously asks me to log in, even when I'm logged in. I will use the hosted ddrelease64.exe and attempt to use with Image Mounter from Paragon.
Update on Feb 26th 2023.
- I have used the original drive in two other enclosures, with different wires and still results in RAW being seen by Windows Explorer. I expected as much but worth a shot.
for unexplained reasons image mounter isnt working on my system at all. It wont even mount a vhd.
Not sure why, I have used it before and found it very useful.
onedrive dd-0.6beta3.zip
I just booted into win11. Image mounter is working here.
When mounted read only the physical disk just shows as raw.
diskgenius shows all the files, allows copying them out and can even preview pics and text documents etc.
but the free version doesnt allow writing to or all sector clone from a virtual disk file.
Last edited by SIW2; 26 Feb 2023 at 16:51.
Ah ha.
mount read/write with image mounter as physical disk
then can fiddle with it, sector editing or whatever with diskgenius and save the changed image or clone directly because it is treated as a physical disk.
Should 'Linux's' block size "bs" be equal to 'Windows's' cluster size, in my case 4096?
- - - Updated - - -
Useful Links:
1. chrysocome.net - dd for windows
2. dd_rescue
3. dd_rescue - Browse Files at SourceForge.net
4. Ddrescue - GNU Project - Free Software Foundation (FSF)
5. GNU ddrescue Manual
6. Finnix
7. grml.org - Release Notes: Grml 2022.11 - Codename MalGuckes
8. https://grml.org/files/grml64-full_2022.11/dpkg.list
9. command line - What's the difference between ddrescue, gddrescue, and dd_rescue? - Ask Ubuntu
Todo List:
- The plan is to install 'grml64-full_2022.11' on to a USB via Rufus (instead of grml2usb or rawwrite).
- Then, use 'ddrescue' from running Grml Live. Capture the 'original corrupted SSD' (satisfied no bad sectors) to another Samsung EVO 870. Need to find out what command to run for this part.
- Extra Step: Attempt to extract the files using yet another image mounter (to verify I have all data).
- After that, run 'e2fsck' in attempt to fix the 'clone of corrupted drive'.
- Failing that, clone the first 2048 sectors from 'Samsung EVO 870 500 GB Empty' to the 'clone of corrupted drive' to see if that can restore the file system (capture from DMDE required as prerequisite beforehand).
dd --list showed Block Size=512 for the source partition.
chrysocome.net - dd for windows
The default block size is 512 which will work for most files and devices but the copy will be a lot faster if you use a larger block size. For example a floppy disk read with bs=1k count=1440 takes almost twice as long than if you use bs=1440k count=1. Don't make the block size too large because windows will run out of memory. 1M is probably a good size and upper limit.
I'll have to use 'ntfsfix' after realising 'fsck' and 'fsck' is FAT32. Although from here (fsck an ntfs drive in Linux - Super User) it doesn't look promising.
Note here (tips [GrmlWiki]).
ddrescue: Probably you already know 'dd' for copying files. ddrescue is an improved version of dd which 'tries to read and if it fails it will go on with the next sectors, where tools like dd will fail.' (manpage of ddrescue). Use this tool if a filesystem/partition is quite broken and you want to restore some data anyway.
NTFS: problems with an NTFS partition? Take a look at the packages salvage-ntfs and scrounge-ntfs. If you want to resize a NTFS-partition use ntfsresize (part of ntfsprogs).
- - - Updated - - -
1. scrounge-ntfs | Kali Linux Tools
2. GitHub - lcorbasson/scrounge-ntfs
3. Guessing Partition Info
The MFT is an important file which contains pointers to all the other files. It also contains the directory structure of your disk. You can leave out this value when recovering your data, in which case scrounge-ntfs will run through your entire hard disk locating retrievable files. Everything will be dumped in one directory however.
- - - Updated - - -
Here's (External Hard Disk is not accessible. "The disk structure is corrupted and unreadable" - Super User) some more info on ntfsfix as a final solution attempt.
- - - Updated - - -
Here (windows 7 - Recreate faulty MBR - Super User) talks about Bootrec.exe (https://support.microsoft.com/en-us/...f-0fbf51f7dd5d).
"This option writes a Windows 7 or Windows Vista-compatible MBR to the system partition. It does not overwrite the existing partition table. Use this option when you must resolve MBR corruption issues, or when you have to remove nonstandard code from the MBR."
- - - Updated - - -
Current Progress:
- Installed Ubuntu on to USB (as Finnix and Grml were terrible for new users and lacking documentation and tutorials).
- Ran 'sudo apt install ntfs-3g'
- Ran 'sudo fdisk -l'
- Noticed that my SSD was not showing.
- Ran 'dmesg'
- Error 'dmseg: read kernel buffer failed: Operation not permitted'
- Fix with 'sudo sysctl kernel.dmesg_restrict=0'
- Ran 'lsblk' to identify the ssd name.
- - - Updated - - -
- Attempted to run 'ntfsfix' on Ubuntu but errors occurred relating to permissions.
Samsung Magician Fix 7.2.1.980
"SamsungMagician has stopped working" on launch
PowerShell:
get-process | where-object {$_.name -like "*Samsung*"} | stop-process -force
Command Prompt:
cd "C:\Program Files (x86)\Samsung\Samsung Magician"
SamsungMagician.exe --disable-gpu-sandbox
- - - Updated - - -
1. Samsung SSD 870 EVO 1TB drive firmware
2. Samsung SSD 870 QVO 1TB drive firmware
3. https://smarthdd.com/database/Samsun...850-EVO-500GB/
x2 Samsung SSD 870 QVO 1TB Firmware SVQ02B6Q
x1 Samsung SSD 870 EVO 1TB Firmware SVT02B6Q
x1 Samsung SSD 850 EVO 500GB Firmware 0204 (Drive Name Missing in Samsung Magician) and Firmware EMT02B6Q in CrystalDiskInfo 8.17.14 x64
Last edited by JumanjiFan; 27 Feb 2023 at 13:56.
Quote
