Solved

Cloning Harddrives and File Recovery

Posted on 2004-10-28
613 Views
Last Modified: 2011-02-02
I want to be able to clone a harddrive to a separate drive so I can try and recover some deleted files. Also, ideally, I'd like to be able to make a sort of ISO from the drive so I  can save the good drives to a server and deal with them later. What is the best program or hardware for cloning drives of any type of Operating system? Also, can anyone recommend a tool for undeleting files on NTFS?
0
Question by:dignified
    5 Comments
     
    LVL 1

    Expert Comment

    by:poeticlykist
    ghost is the standard for cloning drives, which is what i assume u want. just clone an image of ur drive to another drive.
    0
     

    Expert Comment

    by:SuperCableMan
    For cloning I'd suggest Norton Ghost.  You're not going to find one program with more support in it.

    Data Recovery? If you're looking for an automated program, the best one I've found for NTFS is on www.runtime.org .  Its not free, but i think the demo is functional so that should help.
    0
     
    LVL 2

    Accepted Solution

    by:
    I recommend DriveCopy from PowerQuest or if you use a Western Digital drive, then I recommend downloading their free Data Lifeguard Tools.  You can get the latter at http://support.wdc.com/download/index.asp.  We do a lot of work recovering damaged hard drives with both of these tools.
    0
     
    LVL 3

    Expert Comment

    by:AwesomeMachine
    For cloning you can hook up both the source and destination hard disks to the computer, download Knoppix linux boot cd from http://www.knoppix.org and burn the downloaded image to a CD.  Then set your bios to boot from the CD drive first, insert the Knoppix CD, and boot.  In knoppix there will be mount icons for any hard drive partitions it finds and will look like "hda1, hda2, hdb1, hdb2, etc.  Look at these and see which hard drive is your source drive.  If the source files are on hda, then the source drive is hda, and if they are on hdb, the source drive is hdb.  The other drive is the destination drive. Then go to the menu on the lower left and go to the knoppix menu and select "root console".  Then type "dd<space> if=/dev/source drive<space>of=/dev/destination drive<space> bs=1M<space> conv=notrunc"  so here is just an example of hda as the source drive:
    dd if=/dev/hda of=/dev/hdb bs=1M conv=notrunc.  After the job has finished, the linux prompt will reappear in the root console, and the destination drive will have an exact duplicate of the source drive if the destination drive is the larger of the 2 drives.  If the destination drive is smaller, the image will be truncated.  

    Winhex sector editor will find all files in free space (deleted) on an NTFS drive.

    On the very same Knoppix CD you found the dd command on, there is a "mkisofs" command for making CD images.  To find out how to work mkisofs, type "man mkisofs" in the root console.  It is rather involved for me to state it all here.  It's about 40 pages.
    0
     
    LVL 57

    Expert Comment

    by:PeteLong
    Using Ghost to Image a Windows PC

    NB This applies to Windows95/98/ME/2000 & XP
    IMPORTANT: Make sure you are licensed to produce imaged copies of your version of windows.
    If you are imaging windows XP be aware that you will need to ACTIVATE each client UNLESS
    you build the source machine from a "Volume Licenced" copy of XP
    see http://support.microsoft.com/?kbid=299840 for details.

    1. Set the Master PC\Laptop up from its manufacturers rescue disks or the copy of windows that you wish to use. unistall any applications you wont use (like Messenger using http://www.dougknox.com/xp/utils/MessengerDisable.zip )
    2. Ensure that you apply all the latest service packs for your version of windows. Go to http://v4.windowsupdate.microsoft.com/en/default.asp to see if you need to install anything.
    3. Install and configure all the applications you would like on the image, and remember applications need service-packing too for MS Office updates go to http://office.microsoft.com/officeupdate/default.aspx?CTT=6&Origin=EC790020111033 and run the office update wizard. Don’t forget things like Adobe Acrobat reader and WinZip (This is a licensed product so ensure you have the rights to do this)
    4. If you have not serviced packed you internet explorer (in step 2) do this now. aslo consider installing the latest version of JAVA http://www.java.com/en/download/windows_automatic.jsp
    5. If you use a proxy server and/or wish to have ALL the imaged PC’s preconfigured to use this do the following, Open a MMC Console (Start - Run - MMC - [ENTER]) Add the group policy snap in. Configure the home page as http://yourhomepage then configure the proxy as Your Proxy IP address (Look in User Configuration\Windows Settings\Internet Explorer Maint)
    6. To display a Login message on every machine Go to the following registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon   and in the following keys paste in this text...

    LegalNoticeCaption <Title of the Message> LegalNoticeText <Text of the Message>

    7. If you use Host Files on your network copy them to the following locations

    Win9x/ME c:\windows
    WinNT/2k c:\winnt\system32\drivers\etc
    winXP c:\windows\system32\drivers\etc

    8. If you use Novell Install and configure the Novell Client (WARNING – If using Zenworks for desktops and automatic workstation input consider NOT putting the Novell Client on your Image)
    9. If you wish you can copy the windows setup files to the hard drive – though this will obviously make the image a LOT larger. if you do copy the I386 directory from the CD to c:\I386, and change this Registry key to c:\I386
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\SourcePath
    10. Defragment the hard drive then empty the recycle bin. (Unless you want to clone your rubbish: 0)
    11. Now if you meet any of the following criteria go to step 18.

    You are imaging Windows 95/98/ME
    You are imaging Windows 2000 or Windows XP that will NOT be on a network (i.e., it’s a standalone or your home PC)

    12. If you reading this bit your imaging a windows 2000 or XP machine and you rolling you image out onto a network, proceed to step 13.
    13. Download the latest version of sysprep for your operating system

    Windows 2000 version 1.1
    http://www.microsoft.com/windows2000/downloads/tools/sysprep/download.asp
    Windows XP version 2.0 (it’s in the deployment cab)
    http://www.microsoft.com/downloads/details.aspx?FamilyID=7a83123d-507b-4095-9d9d-0a195f7b5f69&DisplayLang=en

    14. You now need to create a directory called c:\sysprep and do the following

    Windows 2000
    Extract the file you downloaded to the c:\sysprep directory.
    Look on the windows 2000 CD for the following d:\support\tools and there should be a file there called “deploy.cab”, Extract this to your C: \ sysprep directory.
    Copy all the files from C: \sysprep\tools\ to the C: \ sysprep folder click YES when you are asked to overwrite the originals.

    Windows XP
    Extract the file you downloaded earlier to the C: \sysprep directory.

    15. In your sysprep directory you will now have a program called setupmgr double click it to run it, answer all the questions and it will create another file that will hold the answers to all the questions windows usually asks you when you install it. REMEMBER to tell it you ate IMAGING or it won’t work.
    16. Close all your open windows and click Start > Run > c:\sysprep\sysprep.exe -pnp The machine will then give you a warning message and close down, DON’T power it back up unless you want to test it (note if you do and your windows 2000 you’ll have to carry out all from step 13 again)
    17. Before cloning your Hard Drive, ensure you have another hard drive (That Big enough to hold the image fitted to the machine being ghosted. (You cannot ghost to the same Hard Drive!) – NEWER versions of ghost can) this procedure was tested with v6.5 and v7.0
    18. Arm yourself with a boot disk from www.bootdisk.com (Ensure it had RAMDRIVE on it and it works!) And a copy of Ghost.exe from Symantec
    19. Boot with your boot disk
    20. Type ghost then return. (This will create one big image if you want to split the image up, to fit on CDROM’s type “ghost.exe -split=600 –auto”)
    21. At the welcome screen press enter to clear the message.
    22. Using the Cursor Keys select Local, Disk, To Image then return.
    23. At the select local source press enter
    24. At the file name to copy to screen, Use the Tab Keys to navigate to the image location your second Hard Drive.
    25. Press Tab to navigate to the filename box and give the image a name (i.e. image01)
    26. Keep pressing the Tab Key till Save is highlighted then press return.
    27. At the Compress Image screen Tab to "High" Then press return.
    28. At the proceed screen Tab to "Yes" then press return.
    29. When it is completed it should say, "Dump completed successfully"
    30. If you’re deploying from CDROM you can now burn the image “portions” to CDROM. Ensure the first disk is bootable and has a copy of ghost on it to restore the image to a new computer.

    *****Links*****
    http://www.anandtech.com/guides/viewfaq.html?i=115

    How To Create A Bootable Ghost Rescue CD Tutorial
    http://www.ping.be/satcp/ghostresq01p.htm
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Learn The Basics of Ethical Hacking & Pen Testing

    Computer and network security is one of the fastest growing and most essential industries in technology, meaning companies will pay big bucks for ethical hackers. This is the perfect course to leap into this lucrative career, learning how to use ethical hacking to reveal ...

    A bootable USB key can be very handy now-a-days. My favorite USB key consists of our Windows 7 image, network card drivers (to connect up to a Ghost server), the latest BIOS updates for all of our PCs and CopyWipe (to erase a retired PC) Creating…
    Create your own, high-performance VM backup appliance by installing NAKIVO Backup & Replication directly onto a Synology NAS!
    This video teaches viewers how to encrypt an external drive that requires a password to read and edit the drive. All tasks are done in Disk Utility. Plug in the external drive you wish to encrypt: Make sure all previous data on the drive has been …
    This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

    934 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now