WinHex 10.6 Log Out | Topics | Search
Moderators | Edit Profile

X-Ways User Forum » Public Announcements » WinHex 10.6 « Previous Next »

Author Message
Stefan Fleischmann (Admin)
Posted on Friday, Nov 15, 2002 - 13:13:   

A beta version of WinHex 10.6 is now available here.

What's new?

* Gather Free Space is now much faster on NTFS drives.

* Filling disk sectors (e.g. for proper sanitizing or clearing media) generally has become faster, too.

* A command for listing free clusters can now be found in the Access button menu.

* NTFS: alternate data streams, which contain hidden data, are now listed in a Drive Contents Table.

* Under Windows XP, WinHex will now detect surplus sectors on physical disks automatically.

* On NTFS drives, Initialize Free Space now also wipes currently unused $Mft file records for security reasons, as they may still contain names and fragments from files previously stored in them.

* An external viewer program (like Quick View Plus etc.) can now be invoked from within WinHex, to view the currently edited file or selected block. An external text editor can be used for editing the block now, if one is selected.

* TIFF is has been added to the list of preset file types for the File Recovery by Type function.

* A new API function WHX_SetLastError has been added.

* An bug has been corrected that in some cases interrupted the data recovery process with an error message.

* Some minor improvements.
George Robinson
Posted on Monday, Dec 2, 2002 - 8:58:   

I detected a shortcoming of the File Recovery by Type when recovering a deleted Eudora mailbox (.mbx) file.

The mailbox is an ASCIIZ text file of the following tructure:

(variable length preamble)
"???@???"
(email headers)
(email body)
"???@???"
(email headers)
(email body)
etc...
00 00h

The file is very large and very fragmented. However it should be possible to recover most the individual emails into individual files by extracting the text between the "???@???" markers.

Unfortunately File Recovery by Type always looks for the "Header" at cluster boundaries (or at fixed offset) so it is useless for this task because the "???@???" markers can occur at any offset.

If I clear the "Header offset" field or put an asterisk into it, WinHex frowns on me... :(

So I'm spending 5 hours text searching for the "???@???" markers and writing the blocks between them, manualy to separate files. My wrists hurt :(

George
Stefan Fleischmann (Admin)
Posted on Monday, Dec 2, 2002 - 10:08:   

I must agree that File Recovery by Type is not designed for such a situation. A tailored script should help in this case.
Stefan Fleischmann (Admin)
Posted on Sunday, Dec 8, 2002 - 16:59:   

WinHex 10.6 was just released. The beta version will become unavailable.
Forum operated by X-Ways Software Technology AG.