| Author | Message | ||
     Henk-Jan van der Kamp (Smrman) |
Hi there, recently my little nephew accidentally pulled the Ibook Mac laptop from my sister off the table, something is damaged. I managed to get a very helpful site that assisted step by step in opening the notebook undamaged. Took out the harddrive and managed to make a Hex dump, meaning : Tools -> open disk was used, then after opening the physical drive using file -> create disk imagei created a winhex whx backup. Now the question is, how do I interpret that Hexdump ? Is it the same "format" as ISO ? Or are there utils that can read the image file and determine what is the folder structure ? I am trying to gather some of the files from that drive that were important. Any suggestions are welcome .. talk to me in nerd language, I will understand ;-) | ||
| Stefan Fleischmann (Admin) |
A WinHex backup file cannot be interpreted (see program help). If "raw image" or "evidence file" had been selected as the output format, that would have been possible, with a specialist or forensic license for WinHex. The WinHex backup file, however, can be restored to a different hard disk, with any type of license, where the destination hard disk should be of the same size of larger, and then you will again see the directory structure, provided that the file system is not too much damaged. |