TestDisk

From Wikipedia, the free encyclopedia - View original article

TestDisk
TestDisk-logo.svg
Testdisk.png
Developer(s)Christophe Grenier
Stable release6.13 / November 15, 2011; 10 months ago (2011-11-15)
Development statusActive
Written inC
PlatformCross-platform
TypeData recovery
LicenseGPL (free software)
Websitewww.cgsecurity.org/wiki/TestDisk
 
Jump to: navigation, search
TestDisk
TestDisk-logo.svg
Testdisk.png
Developer(s)Christophe Grenier
Stable release6.13 / November 15, 2011; 10 months ago (2011-11-15)
Development statusActive
Written inC
PlatformCross-platform
TypeData recovery
LicenseGPL (free software)
Websitewww.cgsecurity.org/wiki/TestDisk

TestDisk is a free data recovery utility. It was primarily designed to help recover lost data storage partitions and/or make non-booting disks bootable again when these symptoms are caused by faulty software, certain types of viruses or human error (such as accidentally erasing a partition table). TestDisk can be used to collect detailed information about a corrupted drive which can then be sent to a tech for further analysis.

Contents

Supported operating systems

TestDisk supports these operating systems:

Supported partition table type

TestDisk recognizes the following disk partitioning:

It also handles non-partitioned media.

Partition recovery

TestDisk queries the BIOS or the operating system in order to find the data storage devices (hard disks, memory cards, …) and their characteristics (LBA size and CHS geometry). TestDisk can[1]

TestDisk does a quick check of the disk's structure and compares it with the partition table for entry errors. Next, it searches for lost partitions[2][3] of these file systems:

However, it's up to the user to look over the list of possible partitions found by TestDisk and to select the one(s) which were being used just before the drive failed to boot or the partition(s) were lost. In some cases, especially after initiating a detailed search for lost partitions, TestDisk may show partition data which is simply from the remnants of a partition that had been deleted and overwritten long ago.

A step by step guide[4] explains how to use this software. TestDisk can be used in Computer forensics procedure[5], it supports the EWF file format used by EnCase.

Filesystem repair

TestDisk can deal with some specific logical filesystem corruption[6]:

File recovery

When a file is deleted, the list of disk clusters occupied by the file is erased, marking those sectors available for use by other files created or modified thereafter. If the file wasn't fragmented and the clusters haven't been reused, TestDisk can recover the deleted file:

Popularity

TestDisk and PhotoRec (by the same author) have been downloaded more than 150,000 times in July 2008 from the primary website. In fact these utilities are even more popular as they can be found on various Linux Live CDs:

They are also packaged for numerous Linux distribution

See also

References

External links