WhsDbDataDump - 1.0.0 Build 3 BETA

Notes:

This fixes a problem in the cluster selection algorithm that can cause incorrect data to be output under certain circumstances.

This build also writes out Alternate Data Streams (http://msdn.microsoft.com/en-us/library/aa364056%28VS.85%29.aspx) in ntfsdump mode. If you’ve ever wondered how windows knows if you’ve downloaded a file with Internet Explorer, so that it could prompt you for your permission every time you run it, this is how. Yes, this was before UAC.

Changes:

Corrected WHS cluster selection algorithm. This would have sometimes caused incorrect cluster data to be written out. Affects both rawdump and ntfsdump modes. NTFS Alternate Data Stream (ADS) support. Alternate streams will now be written in ntfsdump mode if there are any.

Download 1.0.0.3 BETA

WhsDbDataDump - 1.0.0 Build 2 BETA

Notes:

WhsDbDataDump is now capable of extracting backed up files from a Windows Home Server backup database. It has its own Windows Home Server backup database parser and NTFS implementation built in and does not rely on any third party libraries/dependencies. It tries to use the database in a fault tolerant way, so that if something goes wrong it will try to continue and not break.

This is the first build to have this feature, so consider it experimental.

The NTFS dumper supports sparse files but does not support NTFS Compressed files, NTFS Encrypted files and multiple data streams in this version.

Example Usage:

• WhsDbDataDump.exe /ntfsdump=”c:\WhsBackup”
  • This will read the Windows Home Server backup database files from the current folder and extract all files to c:\WhsBackup.
• WhsDbDataDump.exe /dbfolder=”c:\RecoveredWhsDb” /ntfsdump=”c:\RecoveredPictures”
  /find=”*.JP?G”
  • This will open the Windows Home Server backup database located at c:\RecoveredWhsDb and extract all files matching the pattern *.JP?G to c:\RecoveredPictures. The match is case insensitive.

There is also a /findregex parameter that can be used instead of /find for more fine grained control over what gets extracted. This uses a regular expression (http://www.regular-expressions.info/reference.html) to filter the files extracted. The regular expression is matched against the full path of the folder and file in the backup volume, if the match passes the file is extracted.

Changes:

Added ntfsdump operating mode. Capable of dumping files directly from backed up volumes. Supports sparse files. No support for compressed files, encrypted files or alternate data streams yet. File filtering option (find/findregex) for ntfsdump.

Download 1.0.0.2 BETA

WhsDbDataDump - 1.0.0 Build 1 BETA

Notes:

WhsDbDataDump is a new utility that is similar to WhsDbDump, but it will extract actual backed up data out of the Windows Home Server Backup database. For this first build it only supports one operating mode which is capable of dumping an entire backed up volume to a raw file. In future versions I will add more operating modes capable of extracting actual files from NTFS backup volumes.

One interesting feature of WhsDbDataDump is that it will try to work with broken databases. In particular, this build supports extracting data from databases with missing dat files. It will simply fill in the missing clusters with a special signature $MISSINGCLUSTER.

Changes:

Basic implementation that supports raw data output. Optimized raw cluster output.

Download 1.0.0.1 BETA