Hướng dẫn cứu dữ liệu file recovery,get databack,de rescue data recovery master

  • Published on
    03-Jul-2015

  • View
    5.682

  • Download
    7

Embed Size (px)

Transcript

  • 1. Hng dn cu d liu(Bi ot gii Nht Cuc thi vit bi Chuyn mn K thut [KT11]Tc gi: NVD_TSQLQ2 - Nguyn Vit Dun)Ni dung bi vit da trn kinh nghim cu d liu thc t ca tc gi. Trong phn mmGetDataback (GDB) c BQT v nhiu bn thnh vin nh gi l hu ch nht. Chi tit vphn mm ny cc bn tham kho ti mc 2.2 ca bi vit.I. Ni dung bi d thiPhn 1: Gii thiu tng qut cu trc d liu trn a cng v kh nng khi phc d liu1.1. Gii thiu chung1.2. Cu trc ca d liu trn a cng1.2. Nguyn nhn mt d liu1.3. Kh nng khi phc d liuPhn 2: S dng cc phn mm cu d liu2.1. S dng phn mm File Recovery2.2. Cu d liu bng GetDataback (GDB)2.3. S dng phn mm DERescue Data Recovery MasterPhn 3: Tng hp3.1. nh gi3.2. Bng so snh3.3. Kinh nghim thc t3.4. Li khuynPhn 1: Gii thiu tng qut cu trc d liu trn a cng v kh nng khi phcd liu1.1. Gii thiu chungKhi bn xa mt tp tin hay th mc no trong h thng, thc cht lnh ny ch nhdu " xa" trong Directory Entry v nhng thng tin lin quan trong File Allocation Table -FAT (vi phn vng nh dng FAT/FAT32) hoc nh du "xo trong Master File Table -MFT Entry (vi phn vng nh dng NTFS).Lc ny, cc vng (cluster) cha d liu ca tp tin xem nh trng v c tnh l dunglng cha dng n ca a cng mc d d liu vn tn ti. Khi d liu mi c ghi vo,lc ny d liu c mi thc s b xa i v ghi bng d liu mi. Chng ta (v c h iuhnh) u khng th "nhn" thy c nhng d liu b nh du xa nhng nhng phnmm cu d liu vn nhn thy chng khi qut qua b mt a. V vy chng ta mi cn nnhng phn mm ny trong vic khi phc d liu.C rt nhiu phn mm gip bn thc hin vic ny, t min ph cho n c ph nh:EASEUS Data Recovery Wizard Professional 5.0.1, FILE RECOVERY for Windows, NucleusKernel for NTFS Demo, Recuva, Handy Recovery, DERescue Data Recovery Master,EaseRescue File Recovery, Ontrack Easy Recovery, Getdataback, Active Uneraser, FileRecovery, RESTORAT, ntfsundelete...Mi phn mm u c nhng im mnh - yu ring,nhng nhn chung kh nng "cu h" ty thuc rt nhiu vo cu trc d liu trn a cngv nhng thao tc c nh hng n cc vng d liu.

2. 1.2. Cu trc ca d liu trn a cngTrc tin, chng ta cng tham kho qua cch thc thng tin ca mt tp tin c lu trtrn a cng. Vi phn vng FAT, d liu c lu tr ti 3 ni trn a cng, bao gm:Directory Entry cha thng tin v tp tin gm tn, dung lng, thi gian to v s hiucluster u tin cha d liu ca tp tin; FAT cha s hiu cc cluster c s dng cho tptin v cc cluster cha d liu ca tp tin (vng Allocation). Vi phn vng NTFS, d liuc lu tr trong MFT (Master File Table) Entry v vng Allocation (hnh minh ha).Bt k phn mm cu d liu no cng c gng tm li nhng thng tin t 3 ni ny cth khi phc y ni dung ca mt tp tin, nu thiu (hoc mt) mt trong nhngthng tin ny, d liu khng ton vn hoc khng th khi phc (xem bng). 3. Nh vy, xem xt cc trng hp trn th kh nng khi phc d liu thng kh thp.Trng hp cc cluster ca Allocation b hng hoc b chp , bn hu nh khng th khiphc c v d liu b xa v chp bi d liu mi.1.3. Nguyn nhn mt d liuC nhiu nguyn nhn dn n mt mt d liu, nhn chung c ba nguyn nhn chnh sauy: 1. Li thit b phn cng: y l nguyn nhn hng u dn n mt d liu, chim khong 44%. Li phn cng c th xy ra do c s bt thng v dng in hoc thit hi v vt l ca thit b lu tr... 2. Li phn mm: chim khong 21%, nguyn nhn do Virus ph hoi, h iu hnh h hng... 3. Li ngi s dung: chim khong 32%, nguyn nhn do ngi s dng thao tc khng ng cch nh: xa nhm, format hay fdisk khi cha sao lu d liu... 4. Khi phc d liu l qu trnh s dng cc thit b hay phn mm chuyn dng tm kim d liu b mt, nn nh y cng ch l mt gii php lm gim thiu thit hi, d liu khng th no c khi phc hon ton nh trc.1.4. Kh nng khi phc d liuTp tin b xa: Nh cp trn, vic xa tp tin s nh du xa trongDirector Entry v nhng thng tin lin quan trong bng FAT hoc MFTEntry. V l thuyt, kh nng khi phc y tp tin ny l cao. Tuynhin, kt qu thc t i khi khng c nh mong i v mt s nguynnhn: sau khi xa, ngi dng c gng thc hin mt s thao tc nhm lyli d liu, HH ghi d liu mi vo cc cluster c nh du xa...Phn vng b xa (hoc to li) nhng cha nh dng (format): Huht d liu u c th khi phc c trong trng hp ny v FAT v MFTkhng b nh hng khi ngi dng xa v to mi phn vng.Phn vng b format :Vi phn vng FAT, vic nh dng s xa bng FAT,Boot Record v th mc gc (Root Directory) nhng Partition Table v dliu trong Allocation vn cn. Nhng tp tin c dung lng nh hn kchthc mt cluster (32KB, mc nh ca FAT32 hoc theo ty chn ca bnkhi nh dng), tp tin c khi phc hon ton v chng khng cn nthng tin trong bng FAT. Vi nhng tp tin c dung lng ln, nhiucluster lin tip nhau, chng s b phn mnh khi c s thay i ni dungtheo thi gian. Vic tm v rp cc cluster c lin quan vi nhau l cngvic kh khn, nht l vi nhng tp tin c dung lng ln v hay thay i.Mt s phn mm cu d liu c kh nng khi phc m khng cn thngtin t bng FAT. tuy nhin, ni dung nhng tp tin sau khi tm li s khngy hoc khng th c c. V vy, bn s cn n mt phn mm ckh nng trch xut nhng ni dung cn c c t nhng tp tin ny .Vi phn vng NTFS, vic nh dng s to MFT mi, tuy nhin kt qu khiphc s tt hn phn vng FAT v NTFS khng s dng bng FAT xcnh cc cluster cha d liu ca cng tp tin.Phn vng b format v ci HH mi hoc s dng Ghost: Trnghp ny thc s l kh khn v Directory Entry (FAT), MFT (NTFS) bxa. Gi s bn c 10GB d liu lu tr trn phn vng 20GB, phn vngny b format v chp 5GB d liu mi. 4. Nh vy, bn khng th khi phc nhng d liu b chp m ch c th khi phc dliu t 5GB tr v sau.Phn 2: S dng cc phn mm cu d liuTrong phn ny ti ch cp cch n gin nht khi mi ngi s dng cc cng c khiphc nhng d liu cn thit ca mnh, ch khng mong mun l c th em n cho ccbn k nng hay k thut chuyn su khi phc v cu d liu (bng c) v ch mtkha cnh no mong bn c thng cm.2.1. S dng phn mm File RecoveryHng dn ci t phn mm.Trc tin bn copy file chy ca Files Recovery c th thc hin c chng trnhFiles Recovery (Bn c th thy c biu tng ca n nh sau)Bn c th download phn mm ny ti a ch: http://www.file-recovery.net/download.htmHng dn cch s dng c th thc hin chng trnh bn tin hnh cc bc nh sau: Bc 1: Click double vo biu tngFiles Recovery: hoc bn c th nhp chut phi vo biu tng v chn open 5. Bc 2: Bn s thy c giao din ca Files Recovery nh sau:Bc 3: Khi bn nhp chut vo menu File s xut hin cc menu con:Open Image: m ra file nhClear Log: lm sch logSave Log: lu ng dn ca logExit: thot khi chng trnhBc 4 :Khi bn click chut vo menu View s xut hin cc menu con: 6. Scan: Qut Stop:Dng li Bc 5:Khi bn click chut vo menu Help s xut hin cc menu con:Contents: Ni dung Recovery Service on the Web: Dch v khi phc trn mngFile Recovery Online: Khi phc trc tuynFrequently Asked Questions: Thng xuyn hi nhng cu hiHelp:Tr gip Lsoft Home Page:Lsoft trang ch About Recovery Service Tool: Cng c khi phc Bc 6: Khi bn click vo biu tng ScanHp thoi Scan s list ra danh sch tn cc drive, type, file system, totalsize hin ti trnmy tnh ca bn: 7. Bc 7 : Bn chn tn a v nhp chut vo nt Scan, khi File Recoverys hin thcho bn danh sch cc folder v cc file c trong a: Sau bn chn tn file cn cu v nhp nt Recover: 8. Ngay sau khi bn nhp chut vo nt Recover hp thoi xut hin nhc bn rng: chn folder ni m bn s lu khi phc :C 3 la chn : Make folder new: To folder miOk: Chp nhn (lu ng dn mc nh) Cancel: t chi Khi ny chng trnh tin hnh qu trnh tm kim: 9. Bc 8: Nu nh bn chn Cancel nh bc 7 th gi y sau khi tm kim nhng file xa bn Click chut vo menu file chn Save log lu li file m bn mun cu v chn save.Ch : khi ta dng chng trnh File Recovery cu d liu chng ta thy cc file c ccmu khc nhau nh:File c mu vng: bnh thng th cc file l cc file cha b xa.File c mu xm bc: file ny b xa tuy nhin kh nng phc hi li file lkh cao. Gn nh l ta c th phc hi li nguyn vn d liu nh ban u.File c mu en: file ny b xa tng i lu, ta kh c kh nng khi phcli c hay l nu c khi phc li c i chng na th file cng kh ckh nng tr v hin trng ban u c bi v mt s d liu trong file bxa mt ri (do l ta ghi d liu khc nn n). Ngoi ra giao din ca FileRecovery cn cho ta bit c file c to vo ngy gi no, ngy ta thayi (xa) file i v cn dung lng ca n l bao nhiu. 10. 2.2. Cu d liu bng GetDataback (GDB) bao gi bn gp phi tnh hung nh th ny cha: Mt ngy p tri no , m myln, khng detect c cng, d liu b virus n mt sch snh sanh, v.v... Th l tt ccc cng trnh, d liu bn lm lu nay bng chc khng cnh m bay. Nhng lc nh vy,bn phi lm sao y? ng lo, trn th trng hin nay c rt nhiu phn mm phc hi dliu cho bn chn la. Xin mch bn s dng mt trong nhng chng trnh :GetDataBack (GDB) ca Runtime Software (http://www.runtime.org/data-recovery-software.htm).GDB c hai phin bn, mt dng cho h thng FAT v mt dng cho h thng NTFS. Vic sdng hai phin bn ny hon ton tng t nn mnh ch gii thiu phin bn dng cho FAT.GDB s gip bn truy tm li nhng d liu mt do cng b h v virus ph, d liu bxa nhm, format hay Fdisk a.Vi ngi dng bnh thng, GDB c th gip bn t phc hi d liu ca mnh thng quasu bc rt d hiu. Ngoi ra, vi ngi dng c trnh cao hn, GDB cung cp nhngchn la nng cao nhm gip vic phc hi c hiu qu hn. GDB c th phc hi d liut cng, phn vng, a mm, file nh ca a (Drive Image), Zip, a mng.Tng thch vi Windows 95/98/ME, Windows NT, 2000, XP, WIN 7. GDB ch c a h vsao chp ton b d liu phc hi c ln mt a khc.a. Tnh nng GetDataback for FAT and NTFS 3.03)GetDataBack Data Recovery l mt chng trnh khi phc d liu an ton, nhanh chng vd s dng gip bn cu d liu b mt t cc s c c th xy n cho cng ca bn.Vic khi phc d liu thng thnh cng hn so vi nhng g bn mong i - d nhin lbn cng khng cn a cng ti cc dch v khi phc d liu.Cc cng c mnh m, d s dng c thit k khng ch dng undelete cc d liu,partition b xo nhm m cn c th khi phc d liu cc file, th mc, partition b xosau khi Fdisk, Format, Mt ngun, b nhim vi rt,li phn mm.Cho d c bt c iu g xy n vi cng ca bn - GetDataBack s gip bn khi phcd liu khi partition table, boot record, FAT/MTF hay th mc gc ca bn b mt hoc b h 11. hi; khi phc cc d liu b mt do xo nhm, virus, format, fdisk, mt ngun, li phnmm gy nn s c h thng ...Khi phc li mi th - Thut ton cao cp gip cho tt c cc th mc v th mc con ct chung v tn ca chng c thit lp li mt cch chnh xc. Khi phc d liu an ton- Cc d liu khi phc c thit lp ch read - only, iu ny c ngha rng chngtrnh s khng bao gi ghi ln phn a m bn dang khi phc.Ch : nguyn tc cu d liu trn vn l: khi b xa nhm, format, ghost nhm tuyti khng s dng cng , nu s dng d liu mi s b ghi ln d liu c, xc sutthnh cng s thp hn.b. Hng dn s dng Bc 1: Cc bn khi ng GDB sau nhn NEXT tin hnh ci: Bc 2: Ca s u tin m bn nhn thy khi chy GDB cng l bc 2. Trong bc ny, GDB s tin hnh qut tm cc a vt l hay logic c trn my (ty thuc vo chn laca bn). 12. Trong ca s bn tay tri l danh sch rt nhiu a vt l quy c nh sau:- FD: a mm- HD: a vt l (HD128 l a th nht, HD129 l a th hai,...)- Logical Drives: a logic (phn vng)- Image files :Tp tin nh Nh vy, trong trng hp ny, a h ca ti l a th nht nn ti ch cn nh du chn vo HD128. Bn c th nh du chn vo mc Logical Drives GDB c th hin th c th tng phn vng trn a th hai ny. Nu bn to tp tin nh, bn c th chn vo mc Image File. GDB s qut tm tp tinny cho bn, nu khng bn c th t tm n trong bc 2.Bn phi ca ca s l ni bn s chn cha cc tp tin, hay th mc tm thi c GDB to ra trong qu trnh lm vic. Bn khng c chn nhng th mc trn a h lunhng th mc hay tp tin tm ny.Xong xui, cc bn nhn Next sang bc 3Bc 3: Vi nhng chn la bc 2 nu trn, sang bc 3 bn s nhn thy cu trc ca a nh trong hnh: 13. Lu : Nu khng va vi cch hin th nh vy, hoc khng tm thy a m bn cnphc hi, bn c th nhn nt Back, quay tr li bc 1 thc hin li vic la chn.Bn di ca s Bc 2 ny c hai mc l Image File... v Remote... Bn c th chn ImageFile... xc nh v tr ca tp tin nh m bn cn phc hi d liu trong . Bn c thchn nhiu file nh cng lc. Chn Remote... xc nh a cn phc hi trn my khcthng qua mng LAN, hoc gia hai my ni vi nhau qua cng COM. Lc ny, my cha cng tt (remote) ci GDB v my cha cng h (host) phi ci chng trnh HDHostBy gi, bn hy nhp chut chn a vt l hay phn vng m bn mun phc hi (y, ti chn phn vng th hai) v nhn Next sang bc th 4.Bc 4: bc ny, nu cha nm r v cc khi nim sector, h thng tp tin,... bn cth mc nh v nhn Next chuyn sang bc 5.Tuy nhin, ti s gii thiu cc mc trong bc ny bn no c kh nng c th cthm: Search entire drive:Tm trn nguyn a. Search partial drive: Tm trn mt vng xc nh ca a. Trong mc ny,nu bit c d liu nm t sector no n sector no, bn c th nhp svo hai bn di, nu khng bn cng c th nh mc nh. Nu bnkhoanh vng cng nh, cng chnh xc th thi gian tm s cng c rtngn li v kh nng tm c s cao hn. File system to recover: Xc nh h thng tp tin ca a (FAT12, 16, hay32....). 14. Nu bn khng t xc nh c th c th mc nh hoc nh du chn vomcExcessive search chng trnh tm cho bn. Tuy nhin, vic ny s lm cho qutrnh phc hi ko di thm.Template: Mc ny thng khng cn thit, bi l GDB t ng tm h thng tp tin chobn. Trong nhng trng hp him hoi (v d nh a mm ca bn ch cha vi tp tin vGDB khng th xc nh c th bn c th to ra mt Template nhn dng h thngtp tin). to cc template, bn c th tm tp tin GDB.ini trong th mc ci t ca GDB.Bn c th tham kho cu trc ca file ny trong phn Help ca chng trnh.Bc 5: Sau khi qu trnh qut a hon tt, GDB s lit k cc h thng tp tin trongca s bn tri ca bc 5.GDB qut a ca bn rt k (c bit khi cng ln, c nhiu phn vng hoc a c format nhiu ln), v tm ra tt c nhng h thng tp tin tn ti trn . Theo mcnh, hu ht nhng h thng tp tin tm c c cht lng tt nht c nm trn cng.Mu xanh l cy biu th h thng tp tin c cht lng khong 50%, iu ny cho thyy l mt h thng tp tin tt v c th s cho kt qu tm kim cao nht.Mu vng biu th h thng tp tin c cht lng khong hn 10%, iu ny th hin rngkt qu c th tm chp nhn c (c bit l trong trng hp khng c mu xanh l cyxut hin).Mu biu th h thng tp tin c cht lng di 10%, hiu qu ca vic tm kim tp tintrn nhng h thng tp tin ny l rt thp.Bn hy bnh tnh, chn h thng tp tin no m c kch thc partition, kch thc clusterv c loi h thng tp tin gn ging vi h thng tp tin m bn ang nh phc hi. 15. (Nhng thng tin ny bn c th xem ca s bn phi ca bc 5.)Nhn Next chuyn sang bc cui cng.Bc 6: y l bc c th lm cho bn sung sng tt cng v tm li c d liu mt, v n cng c th lm cho bn tht vng trn tr v kt qu ch l con s 0 to tng.Trong bc ny, GDB s lit k tt c cc d liu m n tm c theo dng cy th mc. c th nhanh chng tm ra d liu cn thit, bn c th vo menu Tools chn Searchfiles... hoc nhn t hp phm Ctrl v F.Sau khi tm c, bn hy chn tp tin hay th mc cn phc hi, nhn nt Copy trnthanh cng c, chn mt th mc no trn cng tt chp sang.Cng vic n y hon tt, bn thy c d khng no?y l mt phn mm khi phc cn hay hn c Esyrecover v khi khi phc mnh c thly nguyn c c tn ca file tng b mt. Trc y cc bn tng nghe n NUchng trnh khi phc d liu trn dos cha? y l chng trnh s dng hi kh, mtnhiu thi gian v hiu qu ch t n 60%.Esyrecover ra i gip ta c th s dng ngay trn win nhng khi khi phc c, d liukhng cn mang ci tn nh tha ban u na.V by gi vi GetDataBack bn c th khi phc c d liu vi ci tn bn tng tc 90% ch trong mt thi gian rt ngn, d s dng, d dng ci t, nhng nh phidng bn c bn quyn nh!2.3. S dng phn mm DERescue Data Recovery Master 16. a. Tnh nng ca DERescue Data Recovery Master C th ni DERescue Data Recovery Master l mt trong nhng phn mm m trong qu trnh s dng ti cm nhn thy l tuyt vi nht. N h tr tt c cc nh dng phn vng, nhiu loi file, trong nhiu trng hp c th p ng cc nhu cu ngi dng kh tnh nht. DERescue l mt phn mm phc hi d liu mnh m, c th khi phc d liu b h hng/b mt/do nh dng a hay phn vng hoc Ghost. DERescue h tr IDE/SCSI/SATA/ USB. DERescue phc hi d liu tc rt nhanh. H tr h thng FAT12/FAT16/FAT32/NTFS/EXT2, email, PowerPoint, hnh nh, AutoCad JPG, PDF, CDR, PSD, AI, WAV, AVI, 3GP, mpg, MP4, RM, RMVB, BMP, GIF, Ngay c trong trng hp khi nh dng ca phn v...

Recommended

View more >