{"id":52583,"date":"2019-11-12T00:00:00","date_gmt":"2019-11-11T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/hozhdenie-po-mukam-ili-dolgaya-istoriya-odnoj-popytki-vosstanovleniya-dannyh"},"modified":"2020-02-18T14:00:21","modified_gmt":"2020-02-18T11:00:21","slug":"hozhdenie-po-mukam-ili-dolgaya-istoriya-odnoj-popytki-vosstanovleniya-dannyh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/hozhdenie-po-mukam-ili-dolgaya-istoriya-odnoj-popytki-vosstanovleniya-dannyh","title":{"rendered":"Preizku\u0161nje ali dolga zgodba o enem poskusu obnavljanja podatkov","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V dvori je bil leto 2019. V na\u0161 laboratorij je pri\u0161el nekoliko nenavaden prenosni disk QUANTUM FIREBALL Plus KA s kapaciteto 9,1 GB. Po besedah lastnika se je okvara zgodila \u017ee leta 2004 zaradi okvare napajalnega bloka, ki je s seboj potegnil trdi disk in druge komponente PC-ja. Sledile so poti po razli\u010dnih servisih z poskusi popravila diska in obnovitve podatkov, ki so bili neuspe\u0161ni. Nekateri so obljubljali nizke cene, a te\u017eave niso re\u0161ili, drugi so zahtevali previsoke cene in stranka se je odlo\u010dila, da ne bo obnovila podatkov. Disk je pre\u0161el skozi \u0161tevilne servisne centre. Ve\u010dkrat se je izgubil, a zahvaljujo\u010d temu, da je lastnik vnaprej poskrbel za zapis informacij z razli\u010dnih nalepk na disku, mu je uspelo dose\u010di, da je njegov trdi disk bil vrnjen iz nekaterih servisnih centrov. Ta pot se ni kon\u010dala brez sledi, na originalni plo\u0161\u010di krmilnika so ostali \u0161tevilni sledi spajkanja, prav tako pa je bil vizualno opazen pomanjkanje SMD elementov (morda najslab\u0161a te\u017eava tega diska).<\/p>\n

\"Preizku\u0161nje
\nSlika 1 HDD Quantum Fireball Plus KA 9,1 GB<\/i>
\n<\/a><\/noindex>
\nNajprej je bilo potrebno poiskati donorskega brata dvoj\u010dka tega diska s delujo\u010do plo\u0161\u010do krmilnika. Ko je bil ta iskalni izziv zaklju\u010den, smo lahko izvedli obse\u017ene diagnosti\u010dne postopke. Preverili smo navitja motorja na kratkosti\u010dno povezavo in se prepri\u010dali, da je ta odsotna, nato pa namestimo plo\u0161\u010do z donorskega diska na disku - pacientu. Vklju\u010dimo napajanje in sli\u0161imo normalen zvok vrtenja gredi ter uspe\u0161no opravljen kalibracijski test z nalaganjem programske opreme. Po nekaj sekundah disk poro\u010da s registri, da je pripravljen sprejemati ukaze iz vmesnika. <\/p>\n

\"Preizku\u0161nje
\nSlika 2 Indikatorji DRD DSC pomenijo pripravljenost za sprejemanje ukazov.<\/i><\/p>\n

Zavarujemo vse kopije modulov programske opreme. Izvajamo preverjanje celovitosti modulov programske opreme. Pri nalaganju modulov ni te\u017eav, vendar analiza poro\u010dil ka\u017ee na dolo\u010dene nenavadnosti.<\/p>\n

\"Preizku\u0161nje
\nSlika 3. Tabela con.<\/i><\/p>\n

Opozarjamo na tabelo obmo\u010dnega razporeda in opa\u017eamo, da je \u0161tevilo cilindrov enako 13845.<\/p>\n

\"Preizku\u0161nje
\n\u0420\u0438\u0441. 4 P-list (\u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u2013 \u0441\u043f\u0438\u0441\u043e\u043a \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u0432\u043d\u0435\u0441\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430).<\/i><\/p>\n

\u041e\u0431\u0440\u0430\u0449\u0430\u0435\u043c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043c\u0430\u043b\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0438 \u0438\u0445 \u043b\u043e\u043a\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u041f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c \u043c\u043e\u0434\u0443\u043b\u044c \u043b\u043e\u0433 \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 (60h) \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u043f\u0443\u0441\u0442 \u0438 \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043d\u0438 \u043e\u0434\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438. \u041d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043c\u043e\u0436\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e \u0432 \u043a\u0430\u043a\u043e\u043c-\u0442\u043e \u0438\u0437 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043d\u044b\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u043a\u0438\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441\u043e \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u043e\u0439 \u0437\u043e\u043d\u043e\u0439 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f, \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0438\u043b\u0438 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0431\u044b\u043b \u0437\u0430\u043f\u0438\u0441\u0430\u043d \u0447\u0443\u0436\u043e\u0439 \u043c\u043e\u0434\u0443\u043b\u044c, \u043b\u0438\u0431\u043e \u043f\u043e\u0434\u0447\u0438\u0449\u0435\u043d \u0441\u043f\u0438\u0441\u043e\u043a \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0437\u0430\u0434\u0430\u0447\u0443 \u0432 Data Extractor \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u043f\u0446\u0438\u044f\u043c\u0438 \u00ab\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u0435\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u043a\u043e\u043f\u0438\u0438\u00bb \u0438 \u00ab\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0442\u043e\u0440\u0430\u00bb. <\/p>\n

\"Preizku\u0161nje
\n\u0420\u0438\u0441. 5 \u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0437\u0430\u0434\u0430\u0447\u0438.<\/i><\/p>\n

\u0421\u043e\u0437\u0434\u0430\u0432 \u0437\u0430\u0434\u0430\u0447\u0443, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0442\u0430\u0431\u043b\u0438\u0446\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u0435 (LBA 0)<\/p>\n

\"Preizku\u0161nje
\n\u0420\u0438\u0441. 6 \u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432.<\/i><\/p>\n

\u041f\u043e \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u044e 0x1BE \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c (16 \u0431\u0430\u0439\u0442). \u0422\u0438\u043f \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u2014 NTFS, \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0434\u043e \u043d\u0430\u0447\u0430\u043b\u0430 0x3F (63) \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0440\u0430\u0437\u043c\u0435\u0440 \u0440\u0430\u0437\u0434\u0435\u043b\u0430 0x011309A3 (18 024 867) \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u0432.
\n\u0412 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c LBA 63.<\/p>\n

\"Preizku\u0161nje
\n\u0420\u0438\u0441. 7 \u0417\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u044b\u0439 \u0441\u0435\u043a\u0442\u043e\u0440 NTFS<\/i><\/p>\n

\u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u043e\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u0435 NTFS \u0440\u0430\u0437\u0434\u0435\u043b\u0430 \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435: \u0440\u0430\u0437\u043c\u0435\u0440 \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u043f\u0440\u0438\u043d\u044f\u0442\u044b\u0439 \u0432 \u0442\u043e\u043c\u0435, 512 \u0431\u0430\u0439\u0442 (\u043f\u043e \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u044e 0x0B \u0437\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0441\u043b\u043e\u0432\u043e 0x0200 (512)), \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 \u0440\u0430\u0432\u043d\u043e 8 (\u043f\u043e \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u044e 0x0D \u0437\u0430\u043f\u0438\u0441\u0430\u043d \u0431\u0430\u0439\u0442 0x08), \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0440\u0430\u0432\u0435\u043d 512\u04458=4096 \u0431\u0430\u0439\u0442, \u043f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c MFT \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0430 \u043f\u043e \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u044e 6 291 519 \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 \u043d\u0430\u0447\u0430\u043b\u0430 \u0434\u0438\u0441\u043a\u0430 (\u043f\u043e \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u044e 0x30 \u0443\u0447\u0435\u0442\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0435 \u0441\u043b\u043e\u0432\u043e 0x00 00 00 00 00 0C 00 00 (786 432) \u043d\u043e\u043c\u0435\u0440 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 MFT. \u041d\u043e\u043c\u0435\u0440 \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e \u0444\u043e\u0440\u043c\u0443\u043b\u0435: \u041d\u043e\u043c\u0435\u0440 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 * \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 + \u0441\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0434\u043e \u043d\u0430\u0447\u0430\u043b\u0430 \u0440\u0430\u0437\u0434\u0435\u043b\u0430 786 432* 8+63= 6 291 519).
\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u043a \u0441\u0435\u043a\u0442\u043e\u0440\u0443 6 291 519.<\/p>\n

\"Preizku\u0161nje
\n\u0420\u0438\u0441. 8<\/i><\/p>\n

\u041d\u043e \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435\u0441\u044f \u0432 \u044d\u0442\u043e\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u0435, \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u0435 \u043f\u043e\u0445\u043e\u0436\u0438 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c MFT. \u042d\u0442\u043e \u0445\u043e\u0442\u044c \u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0443\u044e \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0443\u044e \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u044e \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0434\u0435\u0444\u0435\u043a\u0442-\u043b\u0438\u0441\u0442\u0430, \u043d\u043e \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0444\u0430\u043a\u0442. \u0414\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043c \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0438\u0441\u043a\u0430 \u043f\u043e 10 000 \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0432 \u043e\u0431\u043e\u0438\u0445 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e 6 291 519 \u0441\u0435\u043a\u0442\u043e\u0440\u0430. \u0418 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043c \u043f\u043e\u0438\u0441\u043a \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u043d\u043d\u043e\u043c.<\/p>\n

\"Preizku\u0161nje
\n\u0420\u0438\u0441. 9 \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c MFT<\/i><\/p>\n

V sektoru 6 291 551 odkrijemo prvi zapis MFT. Njegova lega se od izra\u010dunane razlikuje za 32 sektorja, nato pa neprekinjeno sledi skupina 16 zapisov (od 0 do 15). V tabelo premikov bomo vpisali lego sektorja 6 291 519 in ga premaknili naprej za 32 sektorjev.<\/p>\n

\"Preizku\u0161nje
\nSl. 10<\/i><\/p>\n

Lega zapisa \u0161t. 16 bi morala biti po premiku 12 551 431, vendar tam odkrijemo ni\u010dle, namesto zapisa MFT. Izvedli bomo podoben iskanje v okolici.<\/p>\n

\"Preizku\u0161nje
\nSl. 11 Zapis MFT 0x00000011 (17)<\/i><\/p>\n

Odkrijemo velik fragment MFT, ki se za\u010dne z zapisom pod \u0161t. 17, dol\u017eine 53 646 zapisov, s premikom za 17 sektorjev. Za lego 12 155 431 bomo v tabelo premikov zapisali premik +17 sektorjev.
\nKo dolo\u010dimo lego fragmentov MFT v prostoru, lahko sklepamo, da to ne spominja na naklju\u010dno napako in zapis fragmentov MFT po nepravilnih premikih. Razli\u010dico z nepravilnim prevajalnikom lahko \u0161tejemo za potrjeno.
\nZa nadaljnjo lokalizacijo to\u010dk premikov bomo dolo\u010dili najve\u010dje mogo\u010de premikanje. Za to ugotovimo, koliko je premaknjen kon\u010dni marker NTFS razdelka (kopija zagonskega sektorja). Na sliki 7, pri premiku 0x28, je \u010detverno besedilo \u2014 to je vrednost velikosti razdelka 0x00 00 00 00 01 13 09 A2 (18 024 866) sektorjev. Dodali bomo premik samega razdelka od za\u010detka diska k njegovi dol\u017eini, kar nam daje premik kon\u010dnega markerja NTFS 18 024 866 + 63 = 18 024 929. O\u010ditno tam ni bilo potrebne kopije zagonskega sektorja. Pri iskanju v okolici je bil odkrito s postopnim premikom +12 sektorjev v primerjavi z zadnjim fragmentom MFT.<\/p>\n

\"Preizku\u0161nje
\nSl. 12 Kopija zagonskega sektorja NTFS<\/i><\/p>\n

Druge kopije zagonskega sektorja pri premiku 18 041 006 ignoriramo, saj niso povezane z na\u0161im razdelkom. Na podlagi prej\u0161njih postopkov je ugotovljeno, da znotraj razdelka obstajajo vpisi iz 'izbo\u010denih' v prevodih 61 sektorjev, ki so raz\u0161irili podatke.
\nIzvedemo popolno branje nosilca, pri \u010demer ostane 34 neprebranih sektorjev. Na \u017ealost ni mogo\u010de z gotovostjo jam\u010diti, da so vsi ti napake, odstranjene iz P-liste, vendar je pri nadaljnji analizi priporo\u010dljivo upo\u0161tevati njihovo lego, saj je v nekaterih primerih mogo\u010de z gotovostjo dolo\u010diti to\u010dke premikanja s to\u010dnostjo do sektorja in ne do datoteke.<\/p>\n

\"Preizku\u0161nje
\nSl. 13 Statistika branja diska.<\/i><\/p>\n

Na\u0161a naslednja naloga bo dolo\u010ditev pribli\u017enih premikov (natan\u010dno do datoteke, v kateri so nastali). Za to bomo skenirali vse zapise MFT in zgradili verige lokacij datotek (fragmentov datotek).<\/p>\n

\"Preizku\u0161nje
\nSlika 14 Verige lokacij datotek ali njihovih fragmentov.<\/i><\/p>\n

Nato, ko se premikamo od datoteke do datoteke, i\u0161\u010demo, od kdaj namesto pri\u010dakovanega konca datoteke pridejo drugi podatki, medtem ko se potrebni konec odkrije z nekim pozitivnim premikom. In med natan\u010dnim dolo\u010danjem premikov izpolnjujemo tabelo. Rezultat izpolnitev bo ve\u010d kot 99% datotek brez po\u0161kodb.<\/p>\n

\"Preizku\u0161nje
\nSlika 15 Seznam uporabni\u0161kih datotek (dobili smo soglasje stranke za objavo tega zaslona)<\/i><\/p>\n

Za dolo\u010danje to\u010dnih premikov v posameznih datotekah lahko izvedemo dodatna dela in ob poznavanju strukture datoteke najdemo vdelane podatke, ki niso povezani z njo. Vendar pa to v tej nalogi ni bilo ekonomsko smiselno.<\/p>\n

P.S. Rad bi se obrnil tudi na kolege, ki so prej imeli ta disk v rokah. Prosimo, bodite pozorni pri delu z mikrogrami naprav in rezervirajte slu\u017ebene podatke, preden karkoli spremenite, ter ne dovolite namernega poslab\u0161anja te\u017eave, \u010de se niste dogovorili s stranko o izvedbi dela.<\/p>\n

Prej\u0161nja objava: Var\u010devanje z mo\u010djo ali obnovitev podatkov iz \u0161kripajo\u010de HDD Seagate ST3000NC002-1DY166<\/a><\/noindex>
\n
Izvor: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0430 \u0434\u0432\u043e\u0440\u0435 \u0441\u0442\u043e\u044f\u043b 2019 \u0433\u043e\u0434. \u0412 \u043d\u0430\u0448\u0443 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044e \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b \u043d\u0435 \u0441\u043e\u0432\u0441\u0435\u043c \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043b\u044f \u043d\u0430\u0448\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c QUANTUM FIREBALL Plus KA \u0435\u043c\u043a\u043e\u0441\u0442\u044c\u044e 9.1\u0413\u0431. \u0421\u043e \u0441\u043b\u043e\u0432 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f \u043e\u0442\u043a\u0430\u0437 \u0441\u043b\u0443\u0447\u0438\u043b\u0441\u044f \u0432 \u0434\u0430\u043b\u0435\u043a\u043e\u043c 2004 \u0433\u043e\u0434\u0443 \u043f\u043e \u0432\u0438\u043d\u0435 \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0431\u043b\u043e\u043a\u0430 \u043f\u0438\u0442\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u0445\u0432\u0430\u0442\u0438\u043b \u0437\u0430 \u0441\u043e\u0431\u043e\u0439 \u0436\u0435\u0441\u0442\u043a\u0438\u0439 \u0434\u0438\u0441\u043a \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u041f\u041a. \u0414\u0430\u043b\u0435\u0435 \u0431\u044b\u043b\u0438 \u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52583","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pot na mu\u010deni\u0161tvo ali dolga zgodba o enem poskusu obnove podatkov | ProHoster","description":"Leto je bilo 2019. V na\u0161 laboratorij je prispel precej nenavaden shranjevalnik QUANTUM FIREBALL Plus KA s kapaciteto 9.1 GB.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/hozhdenie-po-mukam-ili-dolgaya-istoriya-odnoj-popytki-vosstanovleniya-dannyh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e \u043c\u0443\u043a\u0430\u043c \u0438\u043b\u0438 \u0434\u043e\u043b\u0433\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0434\u043d\u043e\u0439 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 | ProHoster","og:description":"\u041d\u0430 \u0434\u0432\u043e\u0440\u0435 \u0441\u0442\u043e\u044f\u043b 2019 \u0433\u043e\u0434. \u0412 \u043d\u0430\u0448\u0443 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044e \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b \u043d\u0435 \u0441\u043e\u0432\u0441\u0435\u043c \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043b\u044f \u043d\u0430\u0448\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c QUANTUM FIREBALL Plus KA \u0435\u043c\u043a\u043e\u0441\u0442\u044c\u044e 9.1\u0413\u0431.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/hozhdenie-po-mukam-ili-dolgaya-istoriya-odnoj-popytki-vosstanovleniya-dannyh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-11T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52583","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:07:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:40:27","updated":"2026-01-24 04:07:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/52583","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=52583"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/52583\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=52583"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=52583"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=52583"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}