Disk Scan

Top  Previous  Next

In order to completely analyze data structure on an object, it must be scanned. Any object on the Drives panel can be scanned. In addition, you may create a region to scan only a part of an object. The Regions topic explains how to create and work with regions.

You may select scan area and some other scan parameters. Scan information may be saved to a file and later this file may be opened.

Attention: Scanning large areas may be a very lengthy process!

NEVER TRY TO SAVE SCAN INFORMATION ON THE OBJECT BEING SCANNED!!!

Or you may obtain unpredictable results and lose all your data.

To scan an object

1Select an object on the R-Linux's Drives panel
2Click the Scan button

Click to expand/collapse Other ways to start scan

Right-click the selected disk and select Scan on the context menu,

or

Select Scan on the Drive menu
3Specify the required parameters on the Scan dialog box and click the Scan button
Click to enlarge
Scan dialog box

Click to expand/collapse Scan options

Disk Size:

Shows the size of the object to be scanned

Start:

Sets the start point of the area to be scanned.

Size:

Sets the size of the area to be scanned.

Numbers in these fields can be in bytes or sectors.

If no letters are after the numbers, R-Linux assumes the numbers are in bytes.

The following case-ignoring notation is possible:

b

kb

mb

gb

tb

Sec

bytes

kilobytes

megabytes

gigabytes

terabytes

sectors

File Systems:

Specifies the file systems which objects are to be searched for.

Current version supports: Ext2/3/4FS.

Extra search for Known File Types

Enables search for Known File Types.

Save scan Info to File:

If this checkbox is selected, R-Linux will save scan information to a specified file. Later this file may be opened. Please note, that this option does not save actual disk data, only information on disk data structure gathered during disk scan.

Simple view

If this option is selected, R-Linux will show only scan progress.

Detailed view

If this option is selected, R-Linux will show graphic representation on objects found during scan.

Buttons

Scan

Starts scanning

Advanced

Activates advanced scan options

Known File Types...

Selects file types that R-Linux will recognize during the disk scan.

Cancel

Closes the dialog box

NEVER TRY TO SAVE SCAN INFORMATION ON THE OBJECT BEING SCANNED!!!

Or you may obtain unpredictable results and lose all your data.

Known File Types: While scanning, R-Linux can recognize to which particular file type the data belong. Using such information, R-Linux can obtain more information about data/file structure on the object being scanned. By default, R-Linux tries to recognize all supported file types, greatly increasing time required for the scan. You may reduce it by selecting only those file types that you need. Click the Known File Types... button and select the required file types on the File Types dialog box.

Click to enlarge
File Types dialog box

Click to expand/collapse List of known file types

* By default, files of this type are not selected. If necessary, select them manually

Document

Adobe PDF document

Microsoft Word2 document

Microsoft WordPad document

OLE Storage

PostScript document

Rich Text document

TEX document

Word for Macintosh document

WordPerfect document

 

 

 

Document: Spreadsheet

Lotus worksheet

Lotus3 worksheet *

Microsoft Excel2 worksheet

Microsoft Excel3/4 worksheet

Quattro Pro worksheet

 

 

 

Document: Database

Data Interchange Format file

Microsoft Access database

dBase III database

Microsoft SQL database

Microsoft SQL Log

 

 

 

Document: MS Office (OLE MS) (Word/Excel/PowerPoint)

Microsoft Word document

Microsoft Excel document

Microsoft PowerPoint document

Internet-related files

Compiled HTML file

HTML document

Internet shortcut

Outlook Express Messages

Windows Address Book

XML document

XML document (Unicode)

The Bat! Address book

The Bat! Message Base

The Bat! Message Index

 

 

Font

Adobe PostScript Font

Adobe Printer Font

BDF Unix font

BGI font

CPI DOS font

TrueType font

 

 

Graphics/Picture

AVHRR Satellite image

Adobe Photoshop image

Agfa/Matrix Scodl image

Alias Wavefront Raster image

AutoCAD Binary image

AutoCAD image

Autodesc Animator Pro color map

Autodesc Animator Pro image

Autodesc Animator image

Autologic image

BMF image

ColoRIX image

CompuServe GIF image

ComputerEyes Raw image

Continuous Edge Graphic image

Corel Texture image

CorelDraw CMX image

CorelDraw image

Cubicomp Picture Maker image

Dr. Halo palette

Enhanced MetaFile image

Epson Stylus image

Erdas LAN/GIS image

Fractal Image Format

GEM Raster image *

GEM VDI image

GOES Satellite image

Gridded Binary image

HP Command Language image

HP Raster image

Hitachi Raster image

IBM Picture Maker image

JPEG image

JPEG-LS image

HSI JPEG image

Jovian Logic image

LBM/IFF image

Lotus PIC image

Macintosh PICT image

Macintosh PICT image

Macintosh Paint image

Macintosh Paint image

Microsoft Paint image

PBM image

PGM image

PIX image

PM image

PNG image

PPM image

Pictor PC Paint image

Quick Link II fax image

RenderMan image

SGI image

STAD image

Sketch image

Sun Raster image

Tagged Image Format File

TrueVision image

Utah Raster Toolkit image

VITec image

Windows Animated cursor

Windows Bitmap image

Windows Fax Cover image

Windows MetaFile image

Windows cursor

Windows icon

WordPerfect Graphics image

X PixMap image

X Window Dump image

ZSoft PCX image

 

 

Multimedia: Audio Files

AIFF sound

AVR sound

Advanced Streaming Format file

AudioCD file

CMF music

Creative Voice file

DiamondWare sound

EA ASF/MUS audio file

Extended M3U playlist

MIDI Instrument definition

MIDI music

MIDI stream

MPEG Layer I audio file *

MPEG Layer II audio file *

MPEG Layer III audio file

MUS music

Next/Sun sound

Ogg Vorbis audio file

RIFF MIDI music

RK Audio sound

Sierra AUD sound

VQF sound

Westwood AUD sound

Windows Media Audio File

Windows WAVE sound

X-MIDI music

ZyXEL sound

 

Multimedia: Video Files

ANIM animation

Adobe Filmstrip animation

BINK video

DVM video

DeluxePaint animation

Director video

Intel DVI video

Interplay MVE video

LZA animation

MPEG video

NEOchrome animation

Nullsoft Video

QV-10 video

QuickTime video

RPL video

Shockwave video

Smacker video

VideoCD video

Windows AVI video

 

Multimedia Files

RIFF Multimedia File

Real Networks audio/video

 

 

Archive Files

7-Zip archive

ACE archive

AIN archive

ARJ archive

ARX archive

Aladdin Systems StuffIt archive

BAG archive

BIX archive

BOA archive

BZip2 archive

BlackHole archive

Blink archive

CPIO archive

CRUSH archive

ChArc archive

Compress archive

FOXSQZ archive

GZip archive

HA archive *

HAP archive

HPACK archive

Hyper archive

InstallShield Cabinet archive

InstallShield Data archive

InstallShield archive

JAM archive

JAR archive

JRC archive

LHA/LZARK archive

LIMIT archive

LZA archive

LZOParchive

LZSH archive

LZX archive

Microsoft Cabinet archive

Microsoft Compress 5 archive

Microsoft Compress 6 archive

PAKLEO archive

Pack archive *

QFC archive

Quantum archive *

Quark archive

RAR archive

RPM archive

ReSOF archive

SAR archive

SBC archive

SCO archive *

SQZ archive

SZip archive

StuffIt archive

TAR archive

UFA archive

UHArc archive

UltraCompressor 2 archive

UltraCrypt 2 archive

WIN-Freeze archive *

WRAptor archive

WinImp archive

YAC archive

YBS archive

ZIP archive

ZOO archive

ZZip archive

Executable/Library/DLL

DOS Style Executable

ELF Executable (UNIX)

ELF Library (UNIX)

ELF Module (UNIX)

Java Bytecode

Novell NetWare executable

RDOFF executable

 

Development files

COM Type library

Library

Microsoft ClassWizard file

Microsoft Linker database

Microsoft Precompiled header

Microsoft Program database

Microsoft Visual C++ project

Microsoft Visual Studio project

Microsoft Visual Studio workspace

OMF Object library

Windows Compiled resource (16bit) *

Windows Compiled resource (32bit)

 

Other file types

RegEdit file

RegEdit file (UNICODE)

WinHelp

WinHelp Contents

Windows Clipboard file *

Windows Color Profile

Windows National locale

Windows Password file

Windows Policy file

Windows Registry file

Windows Registry hive

Windows shortcut

>R-Linux starts scanning the object, and its panel will show information about new found objects:

Click to expand/collapse R-Linux Main panel

Click the panel regions to learn their functions.

Stop (Esc)Delete (F8)Create Region (F4)Create ImageOpen ImageScanOpen Drive Files (F5)Refresh (Control+R)

The Log pane will show scan progress. Scan may be stopped by clicking the Stop button on the toolbar. Later the scan process may be resumed with different scan parameters.

You may see which file object(s) is/are on a particular disk part. Click the corresponding rectangle on the Scan Information pane and view the information on the Scan Information dialog box.

Click to enlarge
Scan Information dialog box

Select the file object and click Open in Hex Editor to view/edit the file object in the Text/Hexadecimal Editor.

To see the information about a newly found object, simply click it on the Drives panel. Click this link to see the information about the object Recognized0 on the partition:.

When an object is scanned, a number of Recognized partitions will appear. R-Linux shows them in different colors depending on which elements of the partition have been found.

Both boot records and file entries are found for this partition

Only file entries are found for this partition

Only boot records are found for this partition

Although such recognized partitions are virtual objects, files can be searched for and recovered from recognized partitions as from real partitions using Basic File Recovery.

All scanned information may be deleted on the context menu for a scanned object.

Scan information may be saved in a file. Previously saved scan information may be loaded. This can be done on the Drive or context menu for a selected object.

Multiple scans

If the selected object has been completely scanned, you may rescan it either completely or with new scan parameters. If the selected object has been scanned partially, you may scan the rest of the object, ignore the existing scan information and scan the entire object, or specify scan parameters manually.

R-Linux accumulates the information from successive scans and keeps track of changes in this information obtained from different scans.

You may make several scans of successive or overlapping areas. Click the Advanced button, specify an offset and size for a new area to scan on the Advanced Scan dialog box and click the Add button. You may specify and add several scan areas. You may select which areas should be scanned. Selected scan areas can be merged. Right-click a necessary area and select either Merge Down, Merge Down All, and Merge Selected.

Click to enlarge
Advanced Scan dialog box

Managing scan information

Scan information may be saved to a file. Previously saved scan information may be loaded.

To save scan information

1Select an object on the R-Linux Drives panel
2Select Save Scan Information on the Drive or context menu and save the scan information in a file

The default file extension is *.dpl.

To load scan information

1Select an object on the R-Linux Drives panel
2Select Open Scan Information on the Drive or context menu and select the required file with the scan information

The default file extension is *.scn.

>The scan information will appear in the Drives panel

To delete scan information

1Select an object on the R-Linux Drives panel
2Select Delete Scan Information on the Drive or context menu
>The scan information will disappear from the Drives panel

NEVER TRY TO SAVE SCAN INFORMATION ON THE OBJECT BEING SCANNED!!!

Or you may obtain unpredictable results and lose all your data.