数据恢复

2012asdki · 发表于 2012-11-27 00:00:33

试试看好不好用？感谢楼主分享！

freesoft00 · 发表于 2012-11-29 18:04:32

WinHex 16.8

2010shenweis · 发表于 2012-12-1 11:03:50

原帖由 freesoft00 于 2012-11-13 19:41 发表
winhex 16.7 SR-9
winhex 16.6 SR-9
winhex 16.5 SR-12
winhex 16.4 SR-8
winhex 16.3 SR-6
winhex 16.2 SR-13
winhex 16.1 SR-11
winhex 16.0 SR-13
winhex 15.8 SR-11
各个版本还都有新的修正版，希 ...

我一直下载最近的各个版本,但有些版本我从未下载到过,请问你的下载地址是什么?谢谢!

freesoft00 · 发表于 2012-12-1 18:20:30

我没有下载地址，只是在官方论坛看到各个版本的最新修正版就是这些。

卡巴司机 · 发表于 2012-12-2 17:25:48

回复 #96 binke 的帖子

原帖由 binke 于 2012-11-10 20:17 发表
winhex 16.0 SR-2 增强插件。

说说这个插件具体都有些什么功能

[ 本帖最后由 2012卡巴司机于 2012-12-2 17:31 编辑 ]

binke · 发表于 2012-12-3 09:05:26

96L引用部分有详细说明，还请详细看帖子。

LOVPE · 发表于 2012-12-3 10:06:51

原帖由 hy1368 于 2012-12-2 15:43 发表
在网上找到一完全版，不知是新增了哪些功能，请大家测试。

多的两个DLL应是配合DevIL.DLL处理JPG和位图的，应该还有几个，但只在法证版才有效果。看这个提示：
无法加载功能：ilSetPixels, ilTexImage, iluInit, iluScale, ilutInit, ilutConvertToHBitmap

freesoft00 · 发表于 2012-12-4 12:58:42

winhex 16.8 SR-1:

* Search hits in the decoded version of files were erroneously highlighted in File mode, with their artificial offsets. That was avoided.

* Fixed an error in the way that the 64-bit edition read exFAT file systems.

* Fixed an error that could occur when copying e-mails with extremely long subject lines and attachments to an evidence file container.

* Avoided warning about evidence objects in use in some situations where it is not necessary.

* Fixed incorrect checkmark states in the Type filter dialog after double-clicking that could occur in Windows versions newer than XP.

* Some minor improvements.

* X-Ways Imager download updated with v16.8. Now includes a 64-bit edition.

SR-2:

* A 64-bit edition of the ordinary (not dongle-based) version of WinHex is now available to users with a professional or specialist license. Memory requirements of WinHex are very low, so that the extended logical memory address space of the 64-bit edition does not count as an advantage, however, unlike the 32-bit edition, the 64-bit edition can be executed from a 64-bit Windows PE such as the one that you can boot from your 64-bit Windows 7 or Windows 8 installation CD. This is useful for example if you wish to edit/repair or wipe sectors in the partition that contains your installation of Windows Vista or later, which are write-protected by Windows otherwise. More information about Windows PE

Licensed users can retrieve the download link of the additional 64-bit files from the usual web page.

The setup program remains a 32-bit program. As a portable application, WinHex does not need to be and should not be installed using the setup program.

* Avoided an infinite loop that could occur in v16.8 when running a file header signature search for index.dat records in free space.

* Fixed an exception error that could occur when loading old variants of the old evidence file container format.

* Prevented a rare exception error that could occur when taking snapshots of Ext file systems.

* Some minor improvements.

SR-3:

* Fixed an exception error in the 32-bit edition of X-Ways Forensics 16.8 that could occur after taking a snapshot of FAT volumes.

* Creating many thousands of report table associations at a time or importing them from an evidence file container could be very slow in v16.8. That was fixed.

* Preview of .pf prefetch files improved. Intelligent naming for prefetch files in file header signature search.

* Some other minor improvements.

[ 本帖最后由 freesoft00 于 2012-12-8 00:08 编辑 ]

2010shenweis · 发表于 2012-12-12 14:06:58

我会用的一些功能进行了简单测试，专家版未出现异常情况。但法政版提示少三个文件，还提示：大意是评估版无效之类的，这时看帮助授权信息还是存在的。请高手继续。

2010shenweis · 发表于 2012-12-12 14:08:09

原帖由 freesoft00 于 2012-12-4 12:58 发表
winhex 16.8 SR-1:

* Search hits in the decoded version of files were erroneously highlighted in File mode, with their artificial offsets. That was avoided.

* Fixed an error in the way tha ...

请问16.8－SR3在哪里下载？谢谢！

LOVPE · 发表于 2012-12-12 16:08:15

SR-4:

* The search hit description filter did not work when used together with other filters. That was fixed.

* Ability to use system and user environment variables in standard paths (for cases, images etc.), where the variable name has to be enclosed in percentage signs, e.g. %TEMP%.

* Memory leak in processing of corrupt PList files fixed.

* Some minor fixes and improvements.
--------------------------------------------------------------------------------
SR-5:

* Fixed an error that could occur when interpreting VHD Virtual PC images.

* Rare "The virtual System Area file will be incomplete" error fixed for Ext4 volumes.

* Misidentification of free space as idle space fixed on certain versions of Ext4.

* Fixed an exception error that could occur when clicking physical search hits.

* Fixed a memory leak that could occur during skin tone detection.

* Some minor fixes for Exchange EDB processing and other functions.

* Some minor improvements.
--------------------------------------------------------------------------------
SR-6:

* Fixed an error that occurred in the 64-bit edition when saving volume snapshots with more than 77 million objects.

* Prevented a rare exception error that could occur in Details mode for files extracted from other files in NTFS volumes under certain circumstances.

* Several minor improvements.
--------------------------------------------------------------------------------
SR-7:

* Prevented errors during EDB database processing from potentially crashing X-Ways Forensics.

* Fixed a memory leak that could occur when reading fragmented files in HFS+ volumes.

* Avoided an endless recursion that could occur when trying to parse XML-formatted PLists whose capitalization does not follow the established norms.

* Fixed an exception error that could occur in the 64-bit edition when extracting metadata from e-mail messages.

* Some minor improvements.
--------------------------------------------------------------------------------
SR-8:

* Fixed an exception error that could occur when extracting e-mails from Outlook Express DBX e-mail archives with the new extraction method.

* In previous versions, a new snapshot was taken of the physical disk when lost partitions were found at any later point of time, unfortunately without warning, causing a loss of search hits found on the physical disk (not search hits in the partitions) and anything else that was newly defined in the volume snapshot (e.g. files carved in unpartitioned space). That does no longer happen.

* Files that are excerpts of other files in the volume snapshot were opened incorrectly in v16.7, with a wrong logical file size. This could prevent hashing such artificially defined files and may have caused repeated recursive detection of embedded JPEG files. Fixed now.

* Fixed an exception error that could occur under certain circumstances when running a byte level file header signature search.

* Some minor improvements.
--------------------------------------------------------------------------------
SR-9:

* PDF file carving results had deteriorated with v16.4. That was fixed.

* Avoided an unnecessary error message when creating report table associations in v16.7 SR-8.

* Fixed a possible crash that could occur when creating a technical details report of disks with an extreme number of partitions in v16.7 SR-8.

* Available as X-Ways Forensics, X-Ways Investigator and WinHex without a forensic license.

* Some minor improvements.

这个软件更新速度与 MPC-HC 差不多，令人应接不暇。

binke · 发表于 2012-12-13 10:37:43

网上没有公开的下载，在其官方BBS有更新说明

http://www.x-ways.net/winhex/forum/messages/1/1.html?1354863215

tensai · 发表于 2012-12-13 16:00:12

感谢提供，好久没用这个软件了，不知道是不是和老版本一样在WIN7下有问题~~

binke · 发表于 2012-12-16 13:05:51

有英文好的朋友，将官方的帮助文件翻译一下就好了。

另外想问一下，文件菜单下面的“打开文件”和“打开”“打开文件夹”有什么不同

卡巴司机 · 发表于 2012-12-16 13:59:32

原帖由 binke 于 2012-12-16 13:05 发表
另外想问一下，文件菜单下面的“打开文件”和“打开”“打开文件夹”有什么不同

关于文件菜单下的 “Open(打开)”、“Open Files（打开文件）”和“Open Directory（打开目录）”

“Open(打开)”：好理解，就是指打开某一个具体文件

“Open Files（打开文件）”：则是指打开某一文件夹下的所有文件或子目录，原来是叫“Open Folder”，但从16.4起改成了“Open Files”，也许是为了区别“Open Directory”，也许是作者脑子进水，没办法，生命在于折腾。

“Open Directory（打开目录）”：这一功能是从 winhex 16.4 才开始有的，我觉得作者没开发好；从16.4开始新增了“Open Files（打开文件）”功能，并把原来（16.4以前）的“Open Folder（打开文件夹）”的功能指派给了现在(16.4及以后)的“Open Files（打开文件）”，而“Open Directory（打开目录）”则没什么实际意义。

按帮助文件中的解释：“Open Directory: Opens a window that represents a directory on your own computer and allows you to see all its files and subdirectories.”，大概意思是浏览目录里的所有文件和子目录，但事实上并不能看到文件，更不能打开里面的文件和子目录。

winhex 虽是一款强大的十六进制编辑工具，但里面的个别功能仍存在缺陷，有待改善。

掩码：可以打开文件夹下的所有文件，也可以通过设置掩码打开某种指定的文件，例如设置掩码为“*.doc”打开所有的Word文档
打开方式：打开文件的方式，包括只读方式及可修改方式。(从16.1开始已无此功能)
包含指定的文本：点击后弹出查找文本对话框（对话框设置见后面的“文本搜索”），可以在对话框中输入文件中需要包含的文本。不过，Winhex对中文的搜索支持不好。
包含指定的十六进制值：点击后弹出十六进制搜索对话框（对话框设置见后面的“十六进制搜索”），可以在对话框中输入需要包含在文件中的十六进制值。
包括子文件夹：勾选该项后，不只打开当前文件夹下的文件，还会打开当前文件夹下的子文件夹。

[ 本帖最后由 2012卡巴司机于 2012-12-16 20:20 编辑 ]

binke · 发表于 2012-12-16 18:33:37

谢谢你的解答，我也是发现，打开文件和打开目录功能上有重复，而且打开目录这个菜单好像不怎么管用，所以有此一问，看来还是功能上有部分不完善。

135956 · 发表于 2012-12-24 18:55:44

网盘的语言包每天都更新？更新日期每天都在变啊。。。

hy1368 · 发表于 2012-12-24 20:10:09

本帖最后由 hy1368 于 2013-12-19 16:03 编辑

InsPro Disk 反安装(卸载)方法:
1. 将所有的InsPro Disk用InsPro Disk Loader卸载掉.
2. 打开设备管理器 (我的电脑->属性->硬件->设备管理器).
3. 在控制器中找到 SECU-X BUS，右键单击选择卸载.
4. 到系统盘:\Program Files\InsPro目录，全删除.
5. 到系统盘:\windows(winnt)\system32\drivers目录，删除SDBUS.SYS和SDDISK.SYS.

附：WinHex未翻译中的部分:

135956 · 发表于 2012-12-25 10:00:01

不是带来不便，是带来了很多的方便啊。更新那么勤快，辛苦了。非常多谢。

2010shenweis · 发表于 2012-12-25 10:08:51

查看－－同步和比较到底应是“同步和比较（&）”还是“同步和比较（C）”，很老的版本是后者，较新的版本基本都是前者，我是用的后者。

2010shenweis · 发表于 2012-12-25 17:13:14

hy1368真是个好同志！我想再讨论一下，偏移量和偏移地址哪个更科学，早期版本是后者，较新版本全是偏移量了。

[ 本帖最后由 2010shenweis 于 2012-12-27 08:36 编辑 ]

binke · 发表于 2012-12-25 17:16:24

偏移量已经成为通用术语，如果说今移地址我还真没有听说过，在汉化破解里面也是偏移量用的多一些。

2010shenweis · 发表于 2012-12-25 17:25:27

14.3版写的是偏移地址，哪个好就把哪个定下来。

LOVPE · 发表于 2012-12-26 09:14:33

其实都不准，译为“同步(&&)和比较(&C)”更符合原意，英语为“Synchronize && &Compare“

135956 · 发表于 2012-12-26 22:01:48

今移地址是什么概念？应该是偏移地址？

xiaoqiu · 发表于 2012-12-27 15:28:43

谢谢，去看看....

xugaohui · 发表于 2013-1-2 10:06:24

还是原来的网盘下载方便。

feifanll · 发表于 2013-1-7 15:43:52

哈哈，加油。

binke · 发表于 2013-1-11 17:27:38

像我说的那样，应该找个英文好的坛友将帮助文件中文化一下。这样就会方便许多。

feifanll · 发表于 2013-1-11 22:45:42

在哪，我怎么看不到。

		自动登录	找回密码
密码			注册

[分享] 数据恢复

回复 #105 2012卡巴司机的帖子

回复 #108 freesoft00 的帖子

回复 #111 2010shenweis 的帖子

回复 #116 2012卡巴司机的帖子

回复 #120 2010shenweis 的帖子

浏览过的版块