Raw Data Recovery - Data Recovery Perth

I spoke previously about the fat file system and how primarily it’s used with flash drives , camera memory cards and micro sd cards in phones see here. Today I want to talk about the need for raw data recovery on the above media where the fat file system has become corrupted and your files are not displayed. It’s easy to corrupt the fat file system if the 2 File allocation tables , which are at a fixed location at the start of the drive, have bad sectors . See image below

We then need to perform a raw data recovery which means scanning the data area of the drive in a linear fashion from the start of the drive to the end. During the raw recovery process the software tools I use look for file signatures. A file signature is sequence of bytes at the start of the file which are identical for that particular file type ,eg a word document, and in addition we look for a sequence of bytes at or near the end of the file which are also identical.

Raw Recovery Software

There are 3 tools I prefer to use when performing raw data recoveries. R-Studio is my goto to tool for doing a raw recovery and you can view a complete list of File Types R-Studio can recover here. It is always a good idea to double check your results and I use Active File Recovery for this purpose as it can sometimes produce better results especially with jpgs. Open source software Photorec is very handy when you need to find a particular raw/file camera image format or a more obscure video format. A complete list of file types Photorec can discover can be found here. This tool has saved the day on numerous occasions and for an example see the following post

Creating Custom File Signatures

Occasionally I need to perform raw recoveries on media where the file type is not common and there is no built-in signature. So I will just talk about what is needed when this happens, R-Studio allows you to create your own signatures. I has it’s own built-in hex editors and tools to but I prefer to use a simple Hex Editor program and create the xml file R-Studio requires. The picture below is from a drafting package called Chief Architect and we will create a signature that R-Studio can use.

The picture below is of 2 chief architect plans tiled horizontally in a hex editor and what we are looking for here is a signature that is common to all Chief Architect files somewhere near the start of the file. In the image below we saw that there is a sequence of 16 bytes 48 bytes from the start of a plan file which are identical. You should examine more files than just 2 files but we will just examine 2 for today.

In the picture below we see are 2 Chief Architect plan files only now are looking for a signature that is common to all Chief Architect files somewhere near the end of the file. In the image below we saw that there is a sequence of 38 bytes from the end of a plan file which are identical.

Hex File Signatures for raw data recovery

The picture below is of an xml file which can be incorporated into R-Studio to be used by that program when performing a raw recovery and which will find chief architect plan files. See the following post for a successful recovery of Files using this method.

For more info on our deleted file recovery services.

Some of our Reviews

     Excellent  
     Based on 17 reviews 
    
 
 
   
 
 
        
   Rob Pennefather 
 2023-12-22
 
 
  Lost coverage of my Samsung 3g phone when vodafone chopped the 3g network coverage . Data Recovery Perth with their amazing knowledge and tech skills reconnected my phone to the 4g network saving me from buying or upgrading a new phone ! Highly recommend Data Recovery Perth for all your computer phone and IT issues !!!
  
 
       
   Virginie Chetty 
 2023-11-16
 
 
  Digby completely saved my business by recovering important files from my failed laptop
  
 
       
   Ian Brodie 
 2023-11-16
 
 
  Lost data on a failed hard drive. It seemed to be gone for good but after a weeks work Digby recovered it all. Excellent work. Recommended.
  
 
       
   Rose Reilly 
 2023-07-29
 
 
  Great service from Digby . Very knowledgeable and helpful in fixing my IT issues
  
 
       
   Vaughan 
 2023-07-14
 
 
  I've used Data Recovery Perth to recover some files that I was told by another business were irrecoverable.  I not only had these files fully recovered but was very happy with the cost to perform this.  Speedy recovery and excellent service, definitely recommend.
  
 
       
   plumboss 
 2023-07-12
 
 
  Hi Digby,
I would like to thank you for retrieving files from my hardrive.
The files are very important to my work.
I\'m taking your advise and investing in a new hardrive.
Thank you
John Abrahams
  
 
       
   Bill E 
 2023-07-08
 
 
  Data Recovery Perth recovered some critical data from a failed laptop that I thought was totally lost, great job.
  
 
       
   Nathan Davis 
 2023-06-23
 
 
  I had a old Raid 10 computer that failed and which had photos and videos on it that I didn't want to loose. I searched for data recovery services and all the places I found charged exorbitant prices. Came across Digby and found his price was very reasonable and he got all my data back! So I would say to anyone needing data recovery use Digby's services and not the other places as he gets the job done for a fair price.
  
 
       
   Milan Adrijasevic 
 2023-06-15
 
 
  Recently I had a hard drive die on one of my work computers . Data Recovery Perth got all my data back and had me working in no time.
  
 
       
   Stuart 
 2022-12-10
 
 
  I recently used Digby's data recovery service and was impressed by his intelligence and helpfulness.

He was able to recover data from my network HDD that I thought was lost forever, and did so with a level of expertise and attention to detail that was truly impressive.

I am so grateful for his help, and would highly recommend him to anyone in need of data recovery. Thank you, Digby!

REQUEST A QUOTE

Address

126 Whatley Crescent Maylands

call:(08) 6180 6959



126 Whatley Crescent

}

6 Days a week from 8:00am – 5:00pm



[email protected]