Versjonshistorie TestDisk & PhotoRec for Mac OS X (Intel)
<<Tilbake til programvarebeskrivelsen
Endringer for v7.0 Beta - v7.0
- General Improvements
- Various fix including security fix, thanks to
- Coverity scan (Static Analysis of source code)
- afl-fuzz (security-oriented fuzzer).
- Denis Andzakovic from Security Assessment for reporting an exploitable Stack Buffer Overflow
- TestDisk
- Improvements
- exFAT: better support
- ext4: handle 64 bit blocks or 64 KiB blocksize. Fix detection and file listing
- Bug fixes
- Avoid erroneous error when writing 512 bytes on hard disk using 4k sector
- FAT, NTFS: avoid NULL pointer dereference if localtime() returns NULL. Thanks to Graham Sutherland for reporting this bug.
- PhotoRec & QPhotoRec
- QPhotoRec is a Graphical User Interface (Qt based GUI) version of PhotoRec. More user friendly, it recognizes the same file formats.
- PhotoRec remains recommended for advanced users, it can stop a recovery and resume it later, it recovers more fragmented files when brute-force technology is enabled and expert mode is available.
- Improvements
- Reduced false positives for more than 80 file formats.
- .gif: fix filesize detection
- .flv: add Flash filesize detection
- .mpg: detect filesize for MPEG
- .ra: detect filesize for RealAudio3
- Improved algorithm to deal with data fragmentation resulting in a general speed increased
- Speedup brute-force mode. Brute-force mode can recover more fragmented files, but it's still slow and not 100% reliable. You can enable it in PhotoRec Options menu.
- New file formats recovered by PhotoRec:
- .3dm: Rhino / openNURBS
- .ari: ARRI Raw Video
- .camrec: Camtasia Studio
- .dad: Micae DVR
- .dcm: Digital Imaging and Communications in Medicine (DICOM)
- .fp12: File Maker Pro 12
- .kra: Krita
- .mlv: Magic Lantern Video
- .notebook: SMART notebook
- .ora: Mypaint
- .red: RED2 video format
- .rlv: Revelation password
- .vbm: Veeam Backup Metadata
- .woff: Web Open Font Format
Endringer for v6.13 - v6.14
- Improvements
- testdisk /list now displays the disk model, serial number, firmware version and hpa or dco presence if detected
- Recover WBFS (Wii Backup File System) partition
- Make FAT RebuildBS works when there is a single FAT table
- Interface: Display the partition table type if autodetected
- Interface: modified warning about mismatching geometry between FAT or NTFS boot sector and HD geometry information (Debian #651756)
- Interface: Remove "Allow partial last cylinder" option
- Bug fixes
- Fix crc in EFI backup GPT
- Rewrote how TestDisk aligns partition on cylinder or 1MB boundary. It avoids to create partition entry where the partition ends after the end of the disk.
- PhotoRec
- Improvements
- Improve Olympus .orf recovery
- Improve WP Mac/WP5/WP6 Corel Documents .wpd files recovery
- Fix thumbs.db recovery, avoid some false positive with .doc
- Interface: if less than 10 file families are enabled, display the results even if zero has been found yet
- New file formats:
- aep After Effects
- axx AxCrypt
- dp Designer, a Photobook Designer Software
- lzh archive
- mmap MindManager
- plt Gerber Graphix Advantage
- prproj Adobe Premiere project
- psb Adobe Photoshop Image
- pts PTGui, panoramic stitching software
- qcp The QCP File Format and Media Types for Speech Data (RFC3625)
- shn Shorten audio file
- snt Windows Sticky Notes
- ttd TinyTag Data
- wallet Armory bitcoin wallet
- wim Windows imaging (WIM) image
- Bug fixes
- Fix an endless loop during .caf file recovery
- Fix tiff recovery including some raw file formats, 64-bit version wasn't affected
Endringer for v6.13 Beta - v6.13
- General Improvements
- Fix UAC manifests for Windows, so users don't need to use right-click "Run As Administrator"
- TestDisk & PhotoRec are now compatible with both libewf and libewf2, the new version of a library to support the Expert Witness Compression Format (EWF).
- TestDisk
- Fix image creation, image.dd file wasn't created (Regression introduced in 6.12)
- Detect Vmware VMFS partition
- Locate lost GFS2 partition but not yet the size
- Log HDD serial number and firmware revision
- List NTFS Alternate Data Streams (ADS)
- PhotoRec
- Session recovery restarts at the previous location
- Better MPEG recovery, there should be less concatenated videos.
- Better JPG recovery, there should be less cases where thumbnails were recovered instead of the picture itself.
- Handle large avi files using "AVIX" or mov files using 64-bit chunk size.
- Rename recovered pdf using the title (not perfect)
- Major cleanup of PhotoRec core code
- New file formats:
- .caf Core Audio Format
- .dardar3 archive
- .ddf Didson Data File (v3 and v4)
- .gcs GCstart (personal collections manager)
- .gam Games Factory
- .hdf Hierarchical Data Format 4
- .hdr ENVI
- .max 3ds
- .oci OpenCanvas Image .oci
- .par2 archive
- .psmodel Delcam PowerSHAPE
- .save Assassin's Creed II backup
- .sh3d Sweet Home 3D
- .TiVo video record
- .vmg Nokia Text Message
- .wpb OpenCanvas files
Endringer for v6.12 Beta - v6.12
- Convert the directory name when it can't be created (Fix for Windows/Cygwin version)
- Better HPA/DCO detection: handle the case where native_max is null.
- Image Creation is now faster tahn previous version when there are bad sectors
- List and copy files from exFAT filesystem
- Improved NTFS undelete interface
- PhotoRec checks for EFBIG (file too large) error when writing files. It's usefull to avoid erronous message about "no free space available" when recovering to a FAT filesystem.
- Recover files from exFAT unallocated space
- Use doc/xls/ppt title to name recovered Office document, use first filename in zip archive...
- Possibility to add your own extension/custom signature to PhotoRec
- Generated a report.xml file using Digital Forensics XML
- New file formats are supported:
- .1cd Russian Finance 1C:Enterprise 8
- .ani Windows Animated Cursor
- .bac Bacula backup
- .bim Broadcast Interface Module
- .cdl/cdt/cdd Concept Draw
- .cow Qemu image
- .dbn DriftBox
- .dex Dalvik
- .dgn Bentley Systems' MicroStation
- .dmp Oracle dump file
- .e01,e02... Encase files
- .emb Wilcom ES
- .emka EMKA IOX - Pharmacology & toxicology
- .exe 16 bits windows executable (MZ NE)
- .freeway Freeway 5 pro
- .gm6/gmd Game Maker
- .gp5 Guitar Pro 5 files
- .icc Color profiles
- .idf MIDI Instruments Definition File
- .it Impulse Tracker
- .jad Java Application Descriptor
- .jnb SigmaPlot
- .ly LilyPond
- .lzo Archive
- .mdl Mathlab model
- .mem Mnemosyne
- .mid MIDI sound file (RIFF format)
- .myo Mind Your Own Business
- .nds Nintendo DS Game ROM Image
- .nsf Lotus Notes
- .ogm Ogg data/Theora video
- .p65 Page Maker
- .pbm/pgm/ppm Netpbm
- .pgp Pretty Good Privacy
- .psf Print Shop
- .pzf GraphPrism 4
- .pzh Presto
- .qbb Quickbook
- .qgs Quantum GIS
- .qkt Apple QuickTake 100
- .qpw Quattro Pro spreadsheet
- .r3d RED camera videos
- .rfp RoboForm
- .sldprt SolidWorks
- .smil Synchronized Multimedia Integration Language
- .sparseimage Filevault
- .sql phpMyAdmin, MySQL and postgreSQL dumps
- .svg Scalable Vector Graphics
- .tib Acronis
- .tod MPEG files
- .torrent BitTorrent files
- .url Windows Internet Shortcut .url
- .vb Visual Basic
- .vdi Virtual desktop infrastructure 1.1
- .vfb FontLab
- .xmp Adobe's Extensible Metadata Platform
- .xrns Extended Renoise song
- .xoj Xournal
- .xpi Mozilla Cross-Platform Install
- .wdp JPEG XR
- .wtv Windows Media Center TV
Endringer for v6.11.3 - v6.12 Beta
- General Improvements
- fidentify, a little utility sharing PhotoRec signature database, is now build by default. It identifies the type of data contained in a file and reports the extension as seen by PhotoRec. It is similar to the Unix file command.
- TestDisk
- Convert the directory name when it can't be created (Fix for Windows/Cygwin version)
- Better HPA/DCO detection: handle the case where native_max is null.
- Image Creation is now faster when there are bad sectors
- PhotoRec
- PhotoRec checks for EFBIG (file too large) error when writing files. It's usefull to avoid erronous message about "no free space available" when recovering to a FAT filesystem.
- New file formats are supported:
- .1cd Russian Finance 1C:Enterprise 8
- .ani Windows Animated Cursor
- .exe 16 bits windows executable (MZ NE)
- .gp5 Guitar Pro 5 files
- .idf MIDI Instruments Definition File
- .mid MIDI sound file (RIFF format)
- .qpw Quattro Pro spreadsheet
- .r3d RED camera videos
- .sldprt SolidWorks
- .sql phpMyAdmin, MySQL and postgreSQL dumps
- .svg Scalable Vector Graphics
- .tod MPEG files
- .url Windows Internet Shortcut .url
- .vb Visual Basic
Endringer for v6.10 - v6.11.3
- General Improvements:
- TestDisk & PhotoRec 6.11 should use less CPU.
- TestDisk:
- This new TestDisk version can undelete files for NTFS filesystem and recover deleted exFAT and ext4.
- PhotoRec:
- Performance improvement when scanning for numerous file type
- Fix several bugs including an endless loop, several memory leaks and several out-of-bound memory access
- New file formats are supported:
- .abcdp Apple binary property list
- .ahn Ahnenblatt
- .amd AlphaCAM
- .amt AlphaCAM
- .apa APA Style Helper
- .ape Monkey's Audio compressed format
- .atd Agelong Tree Database/Abs0luteDatabase
- .att AlphaCAM
- .bld blender
- .class Java Class
- .cm Comic Life
- .compress MS compress file (SZDD)
- .csv Comma separated values
- .cue Cue sheet
- .dim SunPCI Disk Image
- .dxf Drawing Interchange File
- .edb Exchange Database
- .fbk Microsoft Dynamics NAV (MS Navision)
- .fdb Microsoft Dynamics NAV (MS Navision)
- .flp Fruity Loop
- .fob Microsoft Dynamics NAV (MS Navision)
- .hds Parallels disk image
- .ico Windows Icon
- .jp2 sample
- .kmy KMyMoney
- .logic Apple Logic Studio
- .lyx LyX
- .m3u Moving Picture Experts Group Audio Layer 3 Uniform Resource Locator
- .mfa The Games Factory Multimedia Fusion Files
- .mny MS Money
- .mxf Material Exchange Format
- .nk2 Outlook Nickfile
- .pcap tcpdump capture file
- .psp Paint Shop Pro Image File
- .pyc Python Compiled Script
- .qbb Quickbooks
- .qbw Quickbooks
- .rpp Reaper Project
- .ses Cool Edit/Adobe Audition session
- .sp3 Sisporto SP3/SPM
- .spf ShadowProtect
- .sqm Windows Live Messenger Log File
- .stu StuffIt Archive
- .tax Turbo Tax
- .tlx Surveillance System
- .ttf TrueType Font
- .tz Timezone info
- .wnk Wink
- .wv WavPack, Hybrid Lossless Wavefile Compressor
- .xv XV thumbnail image
Endringer for v6.10 - v6.11
- TestDisk & PhotoRec 6.11 should use less CPU.
- TestDisk:
- This new TestDisk version can undelete files for NTFS filesystem and recover deleted exFAT and ext4.
- PhotoRec:
- Performance improvement when scanning for numerous file type
- Fix several bugs including an endless loop, several memory leaks and several out-of-bound memory access
- New file formats are supported:
- .abcdp Apple binary property list
- .ahn Ahnenblatt
- .amd AlphaCAM
- .amt AlphaCAM
- .apa APA Style Helper
- .ape Monkey's Audio compressed format
- .atd Agelong Tree Database/Abs0luteDatabase
- .att AlphaCAM
- .bld blender
- .class Java Class
- .cm Comic Life
- .compress MS compress file (SZDD)
- .csv Comma separated values
- .cue Cue sheet
- .dim SunPCI Disk Image
- .dxf Drawing Interchange File
- .edb Exchange Database
- .fbk Microsoft Dynamics NAV (MS Navision)
- .fdb Microsoft Dynamics NAV (MS Navision)
- .flp Fruity Loop
- .fob Microsoft Dynamics NAV (MS Navision)
- .hds Parallels disk image
- .ico Windows Icon
- .jp2 sample
- .kmy KMyMoney
- .logic Apple Logic Studio
- .lyx LyX
- .m3u Moving Picture Experts Group Audio Layer 3 Uniform Resource Locator
- .mfa The Games Factory Multimedia Fusion Files
- .mny MS Money
- .mxf Material Exchange Format
- .nk2 Outlook Nickfile
- .pcap tcpdump capture file
- .psp Paint Shop Pro Image File
- .pyc Python Compiled Script
- .qbb Quickbooks
- .qbw Quickbooks
- .rpp Reaper Project
- .ses Cool Edit/Adobe Audition session
- .sp3 Sisporto SP3/SPM
- .spf ShadowProtect
- .sqm Windows Live Messenger Log File
- .stu StuffIt Archive
- .tax Turbo Tax
- .tlx Surveillance System
- .ttf TrueType Font
- .tz Timezone info
- .wnk Wink
- .wv WavPack, Hybrid Lossless Wavefile Compressor
- .xv XV thumbnail image
Endringer for v6.9 - v6.10
- General Improvements
- Report disk manufacturer and model under Windows and Linux (Only Linux was supported in 6.9)
- Under Linux, /dev/mapper/* and /dev/md? are now listed with the harddisks.
- Now both OS and compiler versions are recorded in the log file.
- Testdisk is now shipped with plugins for both BartPE and WinBuilder
- TestDisk
- undelete files and directories for FAT filesystem,
- undelete files for ext2 filesystem,
- copy files from ext2/ext3 partitions. These feature was already available for FAT and NTFS.
- PhotoRec
- New file formats are supported:
- adr Opera Hotlist
- als Ableton Live Sets
- amb Licom AlphaCAM
- amd/amt/atd/att AlphaCAM
- amr Adaptive Multi-Rate
- arj Archive
- arw Sony raw image,
- asm Pro/ENGINEER Assembly
- chm MS Windows HtmlHelp Data
- dc TSCe Survey Controller DC v10.0
- deb Debian Archive
- drw Pro/ENGINEER Drawing
- ds2 Digital Speech Standard v2
- fcs Flow Cytometry Standard 3.0
- f Fortran
- fits NASA Flexible Image Transport System
- frm Pro/ENGINEER Drawing Form
- gho Ghost
- gpg Partial support for GPG/OpenPGP file recovery
- ics vcalendar
- ifo DVD Video manager or title set
- iso cd/dvd iso image (ISO0660)
- kmy KMyMoney
- m2ts Blu-ray MPEG-2
- mcd VectorWorks
- mfg Pro/ENGINEER Manufacturing
- msf Mozilla "mork database"
- pfx files holding PKCS#12 keys
- prt Pro/ENGINEER Model
- psp Paint Shop Pro Image File
- SQLite databases
- stl Stereolithography CAD
- stp Standard for the Exchange of Product model data
- tph Pro/ENGINEER ToolPath
- veg Sony Vegas
- wdb Microsoft Works Database
- wks Lotus 1-2-3
- Load and save FileOpts settings: remember which file types to recover
- For JPEG files, extract the time/date from Exif header and set the file time
Endringer for v6.9 - v6.10 WIP
- General Improvements
- Report disk manufacturer and model under Windows and Linux (Only Linux was supported in 6.9)
- Under Linux, /dev/mapper/* and /dev/md? are now listed with the harddisks.
- Now both OS and compiler versions are recorded in the log file.
- TestDisk
- undelete files and directories for FAT filesystem,
- undelete files and directories for ext2 filesystem,
- copy files from ext2/ext3 partitions. These feature was already available for FAT and NTFS.
- PhotoRec
- New file formats are supported:
- adr Opera Hotlist
- als Ableton Live Sets
- amb Licom AlphaCAM
- amd/amt/atd/att AlphaCAM
- amr Adaptive Multi-Rate
- arj Archive
- arw Sony raw image,
- asm Pro/ENGINEER Assembly
- chm MS Windows HtmlHelp Data
- dc TSCe Survey Controller DC v10.0
- deb Debian Archive
- drw Pro/ENGINEER Drawing
- ds2 Digital Speech Standard v2
- fcs Flow Cytometry Standard 3.0
- f Fortran
- fits NASA Flexible Image Transport System
- frm Pro/ENGINEER Drawing Form
- gho Ghost
- gpg Partial support for GPG/OpenPGP file recovery
- ics vcalendar
- ifo DVD Video manager or title set
- iso cd/dvd iso image (ISO0660)
- kmy KMyMoney
- m2ts Blu-ray MPEG-2
- mcd VectorWorks
- mfg Pro/ENGINEER Manufacturing
- msf Mozilla "mork database"
- pfx files holding PKCS#12 keys
- prt Pro/ENGINEER Model
- psp Paint Shop Pro Image File
- SQLite databases
- stl Stereolithography CAD
- stp Standard for the Exchange of Product model data
- tph Pro/ENGINEER ToolPath
- veg Sony Vegas
- wdb Microsoft Works Database
- wks Lotus 1-2-3
- Load and save FileOpts settings: remember which file types to recover
- For JPEG files, extract the time/date from Exif header and set the file time
Endringer for v6.8 - v6.9
- TestDisk & PhotoRec 6.9 comes with numerous improvements
- EFI GUID Partition Table is now supported. EFI GPT is used mainly on Itanium, MacBook and Mac Pro
- Both utilities can use sudo if the user is not root, this functionnality will be enable for MacOSX at least so users won't have to go in command line. Under Linux, disk model is now displayed to help identify the media
- Internal card readers are now better supported under Windows
- TestDisk
- New filesystem support have been added: encrypted LUKS, Mac HFSX, Linux raid md 1.0/1.1/1.2 (0.9 was already supported)
- UFS, UFS2 filesystem are better identified now
- TestDisk 6.9 handles Mac partition table partially overwritten by an Intel partition
- It display unicode filenames correctly and can handle unicode filesname when copying files from an NTFS partition when supported by the underlying libraries. TestDisk warns if the media is in read-only instead of read-write access
- It's now possible to copy files from a delete FAT partition found by TestDisk (already possible for NTFS) without having to rewrite the partition table. In the advanced functionality, raw partition imaging capability have been added
- PhotoRec
- PhotoRec 6.9 can search for lost files in ext2/ext3 unallocated space only (Was available for FAT and NTFS)
- It has a better session support that allow a recovery to be strop and restart later. Windows forensics has been improved with the addition of Windows Enhanced MetaFile .emf (Printing), MS Windows Link .lnk, Internet Explorer index.dat (navigation history.
- New file formats are supported: Acronis True Image .tib, AutoCAD .dwg and PowerTab .ptb, Cineon image file/SMTPE DPX .dpx, Comic Life .comicdoc, HP Photosmart Photo Printing Album .albm, KeepAssX .kdb, Maya .mb and .mp, Microsoft OneNOte .one file, Micros
- It fixes Mac Adress Book and Outlook 64-bits .pst recovery and NTFS free space recovery
Endringer for v6.7 - v6.8
- General Improvements:
- Partition type is autodetected.
- TestDisk and PhotoRec can now be used under GNU screen, the screen manager with VT100/ANSI terminal emulation. Typically, a screen can be shared by an end-user under Linux, Mac or another Unix and a remote data recovery specialist connected via SSH. It's also possible to disconnect while keeping a long recovery (ie PhotoRec) session running.
- Disk geometry under Mac has been corrected (Version 6.7 affected)
- TestDisk:
- HFS partition detection has been improved to avoid false positive
- Log potential NTFS partition location from MFT & MFTMirr location while rebuilding NTFS boot sector
- PhotoRec:
- Some important bugfixes (false positive problem, implementation bugs) have been made in PhotoRec 6.8.
- JPG bruteforce recovery has been improved a little bit, you can use it to recover more fragmented jpeg but it's very time consuming and not 100% reliable, so it's still disabled by default.
- .7z, .cab, .rar and .tar recovery have been improved.
- .dta and .spss file formats (statistical analysis file format) have been added.