| Author | Message | ||
     Barry Markowitz Username: pim Registered: N/A |
I have recently updated from WinHex v13.6 to v15.4 - and was surprised to see that an option previously available from the Cluster List is no longer available. Namely, 'Copy clusters into new file...' - I have found that this will retrieve files that sometimes cannot be retrieved using the Recover/Copy command (eg. requires specific NTFS permission and the like). Is there a reason this was removed, or can I still use this functionality somehow? | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
> eg. requires specific NTFS permission and the like Sorry, I don't understand. Whether the sectors/clusters are read by one command or the other does not make a difference, and no specific NTFS permissions are needed to read sectors or clusters directly from a disk or an image. (If read from a disk, administrator rights are needed.) > Is there a reason this was removed Redundancy. > can I still use this functionality somehow? Any clusters that could be copied with the earlier command in the context menu of a cluster list can also be copied with the Recover/Copy command. | ||
| barry Username: pim Registered: N/A |
Not sure how this can be explained then - I just tested a recovering a file using Recover/Copy and received an error (Cannot open 'some_file_name'. 3285591040 - -2). Then I used the Copy clusters into new file - and it recovered successfully. | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
OK, that means that the file that is supposedly defined in a FILE record at offset 3285591040 could was not opened because there is no "FILE" signature at offset 3285591040. That is very unusual, and you are right then, the List Clusters command is less picky and does not double-check the signature. Could you copy 1024 bytes from that offset on the volume into a file for me and email it to me? If the data makes sense otherwise I will probably remove the additional check in the next release. |