Thursday, May 23, 2013

AnyFound Photo Recovery
"AnyFound Photo Recovery Free Edition is a powerful application designed to help you recover deleted photos from any location on your computer.
The program is based on a wizard-like recovery, which means the user only has to follow a few steps to get back the photos he accidentally removed from the local disks.
With a very clean and intuitive interface, AnyFound Photo Recovery Free Edition can work not only with any hard-disk, but also with removable USB devices, so just plug a flash drive into the USB port and perform a quick scan. 
The app supports the most popular image formats out there, such as JPG, BMP, GIF, PSD, PNG, TIFF, PPM, PSP or MIX. 
Once the file scan process comes to an end, AnyFound Photo Recovery Free Edition displays the files to be recovered, with a preview screen right in the main window to let you recover the right files easier. Plus, it shows file size, file type, modification time, creation time and last access time to easily identify a file to be recovered. 
There's no other configuration screen, so what you see is what you get, which means AnyFound Photo Recovery Free Edition should complete the recovery job pretty quickly. 
The amount of resources needed to get the job done is just minimal and the application works flawlessly on all Windows version. 
Overall, AnyFound Photo Recovery Free Edition does what it says and provides a simple interface to help you benefit from all its great features."

Foremost - Cool Forensic/Data Recovery Tool Developed by the Air Force

"Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is commonly referred to as data carving. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive. The headers and footers can be specified by a configuration file or you can use command line switches to specify built-in file types. These built-in types look at the data structures of a given file format allowing for a more reliable and faster recovery.
Originally developed by the United States Air Force Office of Special Investigations and The Center for Information Systems Security Studies and Research , foremost has been opened to the general public. We welcome any comments, suggestions, patches, or feedback you have on this program." 
This is a console tool with Windows and Linux versions. 

Tuesday, May 21, 2013

Freeware Only Today - GRT Recover My File 3.0 - Giveaway of the Day
"Have you deleted important files from your disk, or your hard drive became corrupted, or you have formatted disk losing your important files and folders? "GRT Soft offers data recovery solution which can recover and restore your data in the original format. These tool has the great and original capability to end up at complete and valuable data recovery.
GRT Recover My File is fast and easy-to-use solution. No technical or data recovery skills are required to undelete your files. GRT Recover My File tool helps you to recover deleted files from FAT16, FAT32 and NTFS Partition." - Only 28% thumbs up rating...not so good. Only freeware today at Giveawayoftheday.

Sunday, May 19, 2013

Free Only Today - Asterisk Password Decryptor 3.01.95 - Giveaway of the Day
"Asterisk Password Decryptor is a powerful tool to recover lost or forgotten passwords. It allows you to reveal the hidden passwords on password dialog boxes and web pages that are hidden by the row of asterisks (*****). You can simply drag the icon to any password box to find the real password hidden by the asterisks."
Free as in free beer or freeware, only today from Giveaway of the Day. Users on the site gave it a 48% positive rate which is not too bad as the programs on this site go.

Tuesday, May 14, 2013

Free Only Today - Easy File Undelete - GiveAwayofTheDay -
"Easy File Undelete is a solid and thorough utility that is used for restoring files, deleted from any type of storage media imaginable. It supports recovering files from recycle bin and makes it possible to even restore shift-deleted files, those that bypass the recycle bin in the process of deletion. The programs capabilities permit scanning even the largest hard drives, without any volume limit in a relatively short time and allow restoring the maximum number of files that are still recoverable.
With over 90 file types supported, this recovery program can be called one of the most versatile undelete solutions available these days."

Sunday, May 05, 2013

Free Only Today - KRyLack Archive Password Recovery - from Giveaway of the Day
"KRyLack Archive Password Recovery is a program to recover lost or forgotten passwords to files of the following types: ZIP, RAR (including v3.x and v4.x, SFX, multi-volume and archives with encrypted filenames) and ACE archives."
Available for free as in free beer only today at GiveAwayOfTheDay. 

Saturday, May 04, 2013

Nice Popular Mechanics Article on Data Recovery

"...Actually, the first thing to do is determine if it really is a hard-drive failure you're confronting, and not one of the countless other equipment glitches that can cause a boot failure. If you have access to another computer, remove the failed hard drive from your sick PC, and hook it up as a secondary drive to the alternate computer. The easiest way to do this is through a USB universal drive adapter—it costs about $30 and is a good device to have around for all sorts of hard-drive diagnostics.
On a Mac, the process is a bit simpler. Use a FireWire cable to hook your nonworking Mac to a working Mac, then, "target boot" the nonworking machine by holding down the T key as you power it on. With either method, it's possible that your failed hard drive will show up on your healthy computer and reveal its files, in which case your hard drive is probably fine, but your operating system needs to be reinstalled. (Don't forget to offload your files before you do that.)..."
Nice advice on doing a "Target Boot" with 2 Macs. Didn't know about that strategy. 

Find and Mount - Find Lost Partitions
"Partition Find and Mount is an easy to use software that locates and mounts lost partitions in read-only mode, thus allowing you to safely access them with any file manager, including Windows Explorer.
All versions of NTFS and FAT file systems are supported..."
Free version is limited to 512KB/second transfer.

Securely Erasing Your Drive Before You Dispose It

Much to my surprise through a couple of articles I recently posted to this blog, I discovered that writing over data on a drive many times does not add any additional security, despite what I learned earlier in my career. Apparently the rumor started when a professor Gutman discovered that the edges of an old kind of a hard drive were still magnified with data remnants even after being overwritten with random data. 

Daniel Feenberg, an economist at the private National Bureau of Economic Research, reported that the truth was that he had used an electron microscope to discover this data, and he could never recover more than a very small amount of it. So in fact for all practical purposes overwriting data once, especially in newer drives, does appear to erase beyond the ability of anybody but 1 or 2 scientists in the world to recover and even then they might be able to recover only a little. Furthermore these data remnants are not available in an SSD when it has been overwritten. 

A legitimate argument against these claims is the issue of sector both conventional hard drives and SSDs automatically set aside during every day use as no longer reliable. When you overwrite your disk, these disk sectors are not overwritten so they conceivably might retain data that is recoverable.

To deal with the latter data remnants is a small utility called Secure Erase which is built into all drives larger than 15 GB for the last 12 years. That applet is set off by a command from the operating system but then works independently of it and even overwrites or erases data found in the set aside disk sectors. From the link above you can download a piece of freeware which will command the hard drive to go through its secure erase routine. 

Also of use is the Wikipedia article on the subject of data remnants:

Here are some quotes from that article:
"As of November 2007, the United States Department of Defense considers overwriting acceptable for clearing magnetic media within the same security area/zone, but not as a sanitization method. Only degaussing or physical destruction is acceptable for the latter.[4]
On the other hand, according to the 2006 NIST Special Publication 800-88 (p. 7): "Studies have shown that most of today’s media can be effectively cleared by one overwrite" and "for ATA disk drives manufactured after 2001 (over 15 GB) the terms clearing and purging have converged."[1] An analysis by Wright et al. of recovery techniques, including magnetic force microscopy, also concludes that a single wipe is all that is required for modern drives. They point out that the long time required for multiple wipes "has created a situation where many organisations ignore the issue all together – resulting in data leaks and loss. "[5]
For the truly paranoid using secure erase,  followed by magnetic degaussing, and then physical destruction should kill the data beyond anybody's ability to recover for a long time into the future of forensics...Apparently the best in physical destruction methods destroy disks into particles 1/125 inch in size but this is still bigger than the size on a platter of a single 512-byte record block in size, however securely erasing and degaussing said disk should be acceptable "data sanitization" to all governmental legal requirements.

Some very recent disks encrypt the data within the disk's own operating system and before writing it to the disk. Apparently changing a disk of this sort's encryption key renders the data beyond recoverability at an even higher level than the previous methods mentioned. Health and other other organizations requiring extreme levels of data security may benefit the most from storing the data on these types of drives to begin with.

Since these issues regard government standards and criminal penalties, please do not take my word for it but read the articles and their provided  references.

Classic Article on Hard Drive Data Recovery
"...Now some of you are asking "if you can't recover data that has been overwritten just once, why do companies sell software that does multiple overwrites?"
I have an opinion on this, but I can't back it up with any facts. Here it is anyway:
Company A brings out DataDeathstar, a program that will eradicate your rebel files by overwriting them once. This is all you need.
Company B makes a similar product, perhaps without such a copyright-infringing name, but in order to sound better than Company A, they claim they can do multi-pass overwrites. Perhaps they back this decision up with the Gutmann article mentioned earlier.
Now if the cost is the same, Joe User will choose the program with more features - the version that does multi-pass overwrites.
This then precipitates an escalation in the number of wipes any package will perform, to make them sound better than their competitors. Eventually we end up with the Department of Defense 35-pass "standard", or the Bilbo-level Eleventy-billion Insano-wipe...."
In my next article, I will cover Secure Erase, an app built into most hard drives since 2001, which is basically all that you need to delete your data off a hard drive you are disposing of. Changing the disks hardware encryption key is one other step you can take if you are paranoid.

Drying Out a Water Damaged Cell or Smart Phone with Dried Rice - This is a neat video. I hope it works for you!

Eassos Recovery 4.2.1 - Free as in Freeware - Only Today from Giveaway of the Day Eassos Recovery is professional data recovery software which provides complete soluti...