Software:EaseUS Data Recovery Wizard
 | |
 Screenshot from EaseUS Data Recovery Wizard Free 12.0 running on Windows | |
| Developer(s) | EaseUS (China) |
|---|---|
| Initial release | 1 October 2005 |
| Stable release | Windows 13.5 / 29 July 2020
Mac 11.2 / 8 May 2018 |
| Operating system | Windows and macOS |
| Available in | 20 (10 for macOS version)[1] languages |
| Type | Data recovery software |
| License | Free and Paid versions |
| Website | easeus.com/data-recovery-software |
EaseUS Data Recovery Wizard is proprietary data recovery software that aims to recover deleted files from a partition on a digital storage device such as a hard disk or solid state drive, recover deleted or formatted partitions and corrupted data.[2][3][4][5] Users interact with the software using a wizard-style graphical user interface.[6] The software is available for free but additional features such as recovering from a Windows preinstallation environment requires a paid license.[3] The software is used for data recovery.[5][7][8][9]
Features
There are free and paid versions of the software on both Windows and macOS.[10][11]
| Feature[notes 1] | Implemented[notes 2] | Notes[notes 3] |
|---|---|---|
| Quick Scan | Free version limited | EaseUS does a "Quick Scan" producing a file count and data count of "Deleted Files" and an "Advanced Scan" giving the file/data counts for "Lost Files" and "Existing Files". The discovered data can be filtered to search for particular files, and users may preview files before recovering.[12] The free version searches for and identifies recoverable data but does not recover any files until a license is purchased.[12] |
| Recover from boot media | Paid only | Bootable media can be created, with a USB drive or external drive, to recover data without having to boot the operating system.[3] |
| Forensic sound recovery | Yes | Data is recovered in a forensically sound manner.[5] |
| File recovery | Yes | |
| Partition recovery | Yes | |
| Formatted filesystem recovery | Yes | |
| Wizard-style GUI | Yes | |
| MacOS | Yes | |
| Windows | Yes | |
| Linux | ? |
Technical details
On most filesystems, file deletion typically does not erase the data itself but simply flags the file as having been deleted, and marks the physical space the file took up on the hard drive as empty, allowing other files to overwrite the deleted file.[3] Consequently, file recovery software like EaseUS can, under some circumstances, recover deleted files from unallocated drive space. For example, Al-Sabaawi et. al. (2019) showed that EaseUS can carve files from the LOST.DIR on an Android operating system.[7] This is, in part, because the files' data resides on the drive as fragments.
EaseUS scans drives for deleted files in two different ways: (1) file directory and (2) storage content. The file directory method retrieves information about the deleted file from the filesystem.[3] Typically, NTFS keeps a record of files, even those that have been deleted and this information is used to recover a (deleted) file. The storage content method performs file carving to look for patterns in unallocated sectors in the hope that a continuous run of sectors will match a pattern. The latter method can recover files but it does not recover the file system metadata associated with the file, such as the file name, modification date or directory structure.[13][14][15] More importantly, the second method is less effective if the files on the drive were fragmented prior to deletion or are simply plaintext.[15]
EaseUS recovery of formatted partitions uses a different method from above. Instead of using file carving, the software likely reads from the backup volume boot record to obtain the lost partition information.[15] A successful restore of the formatted partition also restores the associated metadata and file directory structure. Partition recovery is not certain. For example, an experiment by Nordvik et. al. (2020)[15] did not successfully recover an ext4 partition that was reformatted with the NTFS filesystem but were able to recover an NTFS partition reformatted with the ext4 filesystem.
See also
References
- ↑ "How to Use EaseUS Data Recovery Wizard on Mac" (in en). TME.NET. https://www.tme.net/reviews/easeus-data-recovery-wizard-for-mac/#How_to_use_EaseUS_Data_Recovery_Wizard.
- ↑ Angamutu, Kausalyani A/P; Rahman, Nor Azlina Abd; Suki, Nik Nurul Ain Nik (2020). "A Customized Data Recovery Tool" (in en). Journal of Physics: Conference Series 1712 (1): 012019. doi:10.1088/1742-6596/1712/1/012019. ISSN 1742-6596. Bibcode: 2020JPhCS1712a2019A. https://dx.doi.org/10.1088/1742-6596/1712/1/012019.
- ↑ 3.0 3.1 3.2 3.3 3.4 Putra, Ade; Siahaan, Muhammad Donni Lesmana; Arpan, Arpan (2022-08-30). "COMPARATIVE ANALYSIS OF DATA RECOVERY USING EASEUS DATA RECOVERY WIZARD AND RECUVA APPLICATIONS" (in en). Infokum 10 (3): 161–165. ISSN 2722-4635. https://infor.seaninstitute.org/index.php/infokum/article/view/686.
- ↑ Đaltur, V., & Hajdarevic, K. (2014). Digital forensic investigation, collection and preservation of digital evidence. International Burch University, 16.
- ↑ 5.0 5.1 5.2 Underhill, Paul; Oyinloye, Toyosi; Speakman, Lee; Eze, Thaddeus (2022-06-08). "Forensic Trails Obfuscation and Preservation via Hard Drive Firmware" (in en). European Conference on Cyber Warfare and Security 21 (1): 419–428. doi:10.34190/eccws.21.1.188. ISSN 2048-8610. https://papers.academic-conferences.org/index.php/eccws/article/view/188.
- ↑ "EaseUS Data Recovery Wizard Free". https://download.cnet.com/EaseUS-Data-Recovery-Wizard-Free/3000-2248_4-75184619.html.
- ↑ 7.0 7.1 Al-Sabaawi, A., & Foo, E. (2019). A comparison study of android mobile forensics for retrieving files system. International Journal of Computer Science and Security (IJCSS), 13(4), 148-166.
- ↑ Ninahualpa, Geovanni; Guarda, Teresa; Díaz, Javier; Piccirilli, Darío (2022). Guarda, Teresa; Portela, Filipe; Augusto, Maria Fernanda. eds. "Data Recovery Protocol Proposal for SSD Disks" (in en). Advanced Research in Technologies, Information, Innovation and Sustainability. Communications in Computer and Information Science (Cham: Springer Nature Switzerland) 1676: 368–379. doi:10.1007/978-3-031-20316-9_28. ISBN 978-3-031-20316-9. https://link.springer.com/chapter/10.1007/978-3-031-20316-9_28.
- ↑ Lovanshi, Mayank; Bansal, Pratosh (2020), Smys, S.; Iliyasu, Abdullah M.; Bestak, Robert et al., eds., "Benchmarking of Digital Forensic Tools" (in en), New Trends in Computational Vision and Bio-inspired Computing: Selected works presented at the ICCVBIC 2018, Coimbatore, India (Cham: Springer International Publishing): pp. 939–947, doi:10.1007/978-3-030-41862-5_95, ISBN 978-3-030-41862-5, https://doi.org/10.1007/978-3-030-41862-5_95, retrieved 2023-01-09
- ↑ "EASEUS Data Recovery Wizard Free Edition" (in en). PCWorld. https://www.pcworld.com/article/232682/easeus_data_recovery_wizard_free_edition.html.
- ↑ "Recover Deleted Files for Free With EaseUS Data Recovery Wizard" (in en). Lifewire. https://www.lifewire.com/easeus-data-recovery-wizard-review-2622879.
- ↑ 12.0 12.1 Majeed, Asma; Zia, Haleemah; Imran, Rabeea; Saleem, Shahzad (2015). "Forensic analysis of three social media apps in windows 10". 2015 12th International Conference on High-capacity Optical Networks and Enabling/Emerging Technologies (HONET): 1–5. doi:10.1109/HONET.2015.7395419. ISBN 978-1-4673-9268-6. https://ieeexplore.ieee.org/document/7395419.
- ↑ "EaseUS Data Recovery Wizard Pro Review | TechWiser" (in en-US). 5 September 2018. https://techwiser.com/easeus-data-recovery-wizard-pro-review/.
- ↑ "EaseUS Data Recovery Review - Technical Explore". https://technicalexplore.com/easeus-data-recovery-review/.
- ↑ 15.0 15.1 15.2 15.3 Nordvik, Rune; Porter, Kyle; Toolan, Fergus; Axelsson, Stefan; Franke, Katrin (2020-07-01). "Generic Metadata Time Carving" (in en). Forensic Science International: Digital Investigation 33: 301005. doi:10.1016/j.fsidi.2020.301005. ISSN 2666-2817. https://www.sciencedirect.com/science/article/pii/S2666281720302547.
 |
