FileSalvage is an extremely powerful Macintosh application for exploring and recovering deleted files from a drive or volume. FileSalvage is designed to restore files that have:
- been accidentally deleted.
- become unreadable due to media faults.
- been stored on a drive before it was re-initialized/formatted.
Use FileSalvage to recover your lost files, iTunes libraries, iPhoto collections, and to rescue data that has been lost.
Built for your OS X 10.9 Mavericks, 10.8 Mountain Lion, 10.7 Leopard, or 10.6 Apple Macintosh computer.
FileSalvage is device and file system independent, which means that the user can recover files from a normal Mac OS hard drive, USB key, PC disk, Linux disk, FAT32 disk, FLASH card, Digital Cameras, iPods (non-iOS based), and almost any other media or file system that can be recognized in Mac OS X.
FileSalvage can currently recover over 100 file types, embedded and standalone (see Appendix C). It will recover both computer files and RAW camera files, as it works on digital camera memory cards. In addition, FileSalvage is constantly being enhanced and updated with an increasing number of file types to salvage. For the most current list of salvageable file types, please visit our web site at: https://www.subrosasoft.com/
FileSalvage also supports the ability to process disk images. This means that defence attorney’s, law enforcement and corporate agencies can now access EnCase® (unencrypted images only), MacForensicsLab, Unix DD and CopyCatX image file systems without purchasing expensive computer forensics software.
And so, even with its advanced features and performance, FileSalvage is extremely straightforward to handle. The easy-to-use interface is designed with any level of OS X user in mind and is highly accessible to all, with the potential completion of the whole recovery process within just a few clicks.
Written specifically for Mac OS X, FileSalvage includes powerful features that give the user greater control and flexibility in analyzing and retrieving lost data:
Safety first – FileSalvage will never salvage to the disk or device being used as the data source; this makes the software “risk-free”. Neither does it attempt to repair a disk or alter its contents. Instead FileSalvage simply reads it and copies the relevant files to an alternative destination of the user’s choice.
Works anywhere – In Salvage and Expert modes FileSalvage is device and file system independent. This means that the user can recover files from a hard drive, digital camera, USB key, PC disk, FLASH card and most storage media that work with the Mac.
Searches free space – On HFS+ volumes, the user can limit FileSalvage to scan only the free space of a volume to recover files from. This produces huge speed efficiency and means that the task of recovering files can be accomplished much quicker.
Recovers files after a disk or device has been formatted – Own an initialized disk or other device with files that you want back? No problem! So long as the drive was not securely initialized, FileSalvage should be able to recover the files from the drive.
Recovers files from corrupt media – Data corruption does not stop FileSalvage from working. In fact it will happily process an entire corrupted file system for intact data and recover whole or partial files wherever it finds them.
FileSalvage works on faulty hardware – FileSalvage can also recover data from mechanically unsound devices. The software uses several tried and tested methods, which in addition SubRosaSoft has improved upon, to read the same piece of information and to automatically skip of areas of the file system that are fully unreadable. By employing these methods, FileSalvage is able to recover data from sources that may have appeared to other software to be too physically broken to use.
Preview – Allows the user to preview a range of available files before choosing to recover them. Using the underlying architecture of Mac OS X, FileSalvage can read and display audio, video, image, text and other files.
Recover images – FileSalvage can analyze and recover files from most third party tool disk images such as standard ISO, EnCase® (unencrypted images only), UNIX dd, Drive Genius™, and SubRosaSoft CopyCatX™.
Simple interface – FileSalvage has a clean and simple user interface that makes it accessible and very easy to use, whether you are a beginner or advanced user.
Contacting SubRosaSoft, Inc.
Comments & Questions
If you have comments, problems, or questions about this product, or if you are interested in a site license, please contact us via email: firstname.lastname@example.org. For information regarding technical help, please refer to “Finding Help…” at the end of Chapter 2.
2: Getting Started – The Basics of FileSalvage
FileSalvage is programmed to run on the following minimum specification:
- Apple Power Macintosh CPU (Intel based)
- Mac OS X (10.6 or higher)
- At least 1 GB of RAM (more is better)
- Secondary Hard Disk
- CD/DVD-ROM Drive for CD Installation
Each user is required to have a registration number, otherwise known as a serial number, in order to complete the full version installation of the software properly. Whether the software has been purchased online or through a third party retail channel, the user needs the registration number to hand when preparing for installation of the software.
When purchasing the software online at: https://www.subrosasoft.com/ the registration number is automatically emailed as part of the purchase confirmation. If a confirmation email is not received, please ensure that it has not mistakenly been placed in the email client’s junk folder before requesting technical support. Having received the email, please make a print out and store this in a safe and secure place for future reference.
If the software was purchased through a retail channel, the registration number should be inside the tin case on top of the CD. Please be sure to keep these details in a safe and secure place.
No Registration Number – Trial Mode
Without a registration number it is only possible to start using a version of FileSalvage with limited functionality. In Trial Mode the user will be able to scan for files but will be unable to recover them. For full recovery functionality, the user must register his or her version of FileSalvage. To do this, purchase the software online or via a retail channel, and then simply select “Register” from the FileSalvage drop menu and enter a valid registration number in the dialog screen.
Updates and Upgrades
A single registration number is valid for incremental updates to the purchased version of FileSalvage. When upgrading between versions the purchase of a new registration number will be required. For information on upgrades, please email email@example.com.
Lost Registration Numbers
Please ensure that you keep your registration number in a safe and secure place. Print off confirmation emails, or back them up. SubRosaSoft, Inc. cannot guarantee the ability to re-issue serial numbers for our users.
Obtaining the Latest Version
Downloading from the Web Site
It is a must for any user to ensure that they have the latest version of the FileSalvage software. The latest version is always freely available for download on our web site at: https://www.subrosasoft.com/
A download link, alongside version information, is accessible on the product page of the site. Simply click the respective link and a compressed archive file will automatically begin to download to the desktop, or another specified download location.
FileSalvage versions are distributed in a ZIP archive format and can be decompressed in the Mac OS Finder with a simple double-click of file icon. This will place the decompressed disk image document in the same location as the original ZIP archive, most likely the desktop or your downloads folder.
Having decompressed the disk image file, the user can then double-click on it to mount the disk image on the Desktop. Within the disk image the user will find the FileSalvage application, the help file, and the latest Read Me document. We strongly recommend the FileSalvage application be moved to the Applications folder and the original ZIP archive file be placed in the Trash for deletion.
Installing & Updating FileSalvage
Prior to starting installation or updates and upgrades to FileSalvage, the user should ensure that he or she has logged into OSX with PRIMARY ACCOUNT administrative capabilities. When preparing to install the necessary files, FileSalvage will prompt the user for the admin password of the primary administrative account. If a valid password is not entered, the installation will be unable to proceed and FileSalvage will quit when Cancel is clicked.
Installing From the CD-ROM
Once the CD has mounted on the user’s desktop and the CD volume has been opened into a window, the user should see a folder named “Applications”. To install FileSalvage to the host computer, open the said folder and drag & drop FileSalvage to any desired location on the new host computer, though we strongly recommend placing it in the host computer’s “Applications” folder. Having done this the user is ready for the initial setup.
Installing or Updating via Download
Once the software has been downloaded from the site and decompressed, the user should simply drag & drop FileSalvage from the mounted disk image into the Applications folder, or to the previously selected desired location. If prompted to replace the existing version of the file, click Replace. When updating to the latest version, the user may be prompted with an install dialog window after application start-up. If so, click the Install button and proceed as usual.
The first time the application is launched the user will be asked accept the End User License Agreement (EULA – see Appendix C) and then to enter a valid registration number.
Having done this the user will be asked once more if they wish to accept the installation of files to the host computer. Simply click Yes to accept and finalize the process, at which point the admin user password will be requested. Once correctly entered, a progress bar will run marking the progress of the installation of files. When the necessary files have been added to the system, the user will then be taken to the ‘Main Window’.
Finding Help & Technical Support
Should the user need assistance whilst working with FileSalvage there are a number of sources through which to get help:
Help within FileSalvage
To get help with any questions you may have about the operation of FileSalvage, select’Show Help’ from the drop-down Help menu.
Our technical support is free via email and can be accessed at the following address: firstname.lastname@example.org. The support hours are 10am to 6pm Pacific Standard Time Monday to Friday (GMT -8).
In addition to any support question(s), the user must include ALL of the following pieces of information:
- Valid registration number.
- System configuration(s) – hard drive make, model etc.
- System OS version.
3: Using FileSalvage – Understanding the Core Functions
The Main Window – An Overview
Immediately after start-up, the user will be presented with the FileSalvage splash screen. Once this has disappeared, he or she will then be taken to the ‘Main Window’. The Main Window is the starting point for performing any task.
There are a few items on the menu bar that are specific for FileSalvage:
Selecing Register will either diplay a window for entering the Registration number (if the software is running in Trial mode) or a window with a partial registration number displayed(if the software is already registered).
If a device has been attached to the host computer after FileSalvage has been started and the Main Window reached, it may or may not appear automatically when selecting the desired drive to recover lost data from. If this is the case, simply select “Rescan” from the File drop-down menu and FileSalvage will be forced to search for all available Devices and Volumes, including Devices that cannot be mounted. Alternatively one can use the keyboard shortcut: Command + R.
Bus rescanning can be performed at any moment while using FileSalvage. This option is always available in the File drop menu
Attaching Disk Image
When working with a disk image, it is possible to request FileSalvage to mount the image from within the application. This provides the user with a wider array of compatibility with disk image types rather than relying on the underlying ability of Mac OS X.
To attach an image, simply select “Attach Disk Image” from the File drop menu and an “Open” dialog box will come to up. Having found the image, select it and click Open. FileSalvage will then read and mount the Volume in the computer’s Finder/Desktop.
Alternatively the user can attach an image with the keyboard shortcut: Command + T, which brings up the “Open” dialog box.
Selecting Show Help will launch the default browser on the user’s machine and open FileSalvage’s html based help file
Visit SubRosaSoft website
Selecting this menu will launch take the user directly to SubRosaSoft.com website, where you can download the latest version of the software, and find out more about our other utilities.
The Main Window’s Layout
The layout of the window is effectively divided into 4 sections:
- The Source pane.
- The Scan Options panel.
- The Found pane.
- The Preview pane.
This part of the window contains the devices and volumes attached to the machine.
From this panel, a user can select a device or a volume to scan and recover files.
Scan Options + Buttons panel
This is the portion of the window that contains the scan options. When performing a drive scan, the user has 3 settings to consider:
- Free Space Only,
- Speed of scan,
- Supported File Formats.
Free Space Only – In order to speed up the process of scanning a device for recoverable files, the investigator can specify to search through only ‘unallocated’ blocks of data containing erased files. Selecting Entire Device (All Files) will search for all files, deleted or not.
Search for Embedded Files, or Slow Scan – Sometimes there are files that are contained within files, such as in terms of web caches or mbox format email folders. Checking this option causes FileSalvage to find such files, though a side effect of this is that the scanning procedure is slowed down.
Supported File Formats – Clicking this button produces a dialog from which the user can define which formats will and won’t be salvaged, as well as to be able to add his or her own file types.Please refer to Advance Options for more information.
This part of the window is where the initial scan results will appear once the user has completed the initial scan. The results are displayed in the pane, grouped by file types, making it easier to salvage specific kind of files
To select a file or multiple files to recover, simply scroll up or down the list, and hightlight the file or Command + Mouse Click Item to select multiple files. To include all files found, simply select all of them by entering Command + ‘a’
Once you have select the file(s) for recovery, you can proceed to recovering the files by click on Salvage selected files.
This part of the window allows the user to preview a range of different file types simply by selecting the respective file in the Fonnd pane.
To select a file to preview, simply scroll and locate the item of interest from the list, and click on the file. Seconds later, a preview of the file will be displayed.
The Recovery Process
The recovery process is a simple 2-step procedure:
- Gather a list of available files
- Recover the files to an alternate location
Step one of the process is easy enough to understand. With FileSalvage simply gathering a list of available data. However, it is important to understand on the secondary step that when a user is recovering data from a device or volume, he or she should NOT save the recovered data back to the same location.
Why? The answer is simple enough, but does not necessarily occur to a lot of people. When recovering data and saving to the same location, the device will not stop to think whether it is overwriting “free space” or not. That is to say that it will happily overwrite data to blocks of the hard drive that it knows are not allocated with files. Therefore, when the user is recovering files he or she could easily overwrite the very blocks of data that contain data marked for recovery.
What’s the solution to this? Well the solution is either to use another partition on the same device or to have a secondary device such as an external USB hard drive to write the recovered files to. When recovering files the user must also be sure to have an equal amount of free space to recover to, running out of space will cause an error message and halt the recovery process, thus forcing the user to have to start the process all over again.
Selecting volume or device to scan and recover files
To select a device or a volume to scan and recover files, simply scroll up or down the Source pane, and hightlight the device or volume
Once you have select the device or volume to scan for files, you can proceed to the next step of selecting the scan options.
Selecting scan options
The user has 3 settings to consider:
- Free Space Only or Entire Device.
- Speed of scan.
- Supported File Formats.
Free Space Only or Scan Entire Device – The user can specify to search through only ‘unallocated’ blocks of data (or free space) containing erased files, or the Entire Device (All Files) for all files, deleted or not.
Fast Scan versus Slow Scan – Fast scan will scan the volume or device using a block by block format, which runs approximately 10 times faster than the Byte by byte Slow Scan. However, sometimes there are files that are contained within files, such as in terms of web caches or mbox format email folders. Checking this option causes FileSalvage to find such files.
Supported File Formats – Clicking this button produces a dialog from which the user can define which formats will and won’t be salvaged, as well as to be able to add his or her own file types. Please refer to Advance Options for more information.
Scanning for Files to Recover
Having selected the requisite file types for scanning, the user is now ready to proceed with the file-gathering step of the salvage process. To get the scan started, the user should simply click the Start A New Scan button right below the Found pane. This will bring a progress box to the fore at the top of the window and provide the user with live update statistics regarding the progress of the scanning procedure and the number of files found.
To help speed up the scan procedure, the user should make sure that the ‘Free Space Only” option is checked. This will force FileSalvage to only scan portions of the drive that have not been allocated within the file catalog.
When completed the user will be presented with a dialog box confirming the completion of the scanning process with the final statistics. He or she should close this by clicking on OK, at which point the user can then begin to review the results of the scan in the ‘Found’ pane of the window. To the left of each file type in the result set is a disclosure triangle, when clicked this will drop down displaying a list of files available for preview and/or salvage. Each listing for a file includes: File Name; Size; Offset; and Source.
Previewing Scan Results
Having generated a set of results. The user can preview a range of different file types simply by selecting the respective file in the results pane and then viewing the data in the preview window that appears as a result.
Having scanned, reviewed, and previewed the available data, the user can finally select and salvage the desired files, one by one. To do so, he or she must select each individual line item in the results pane.
Rather than scan and recover files on an individual basis, it is possible for the user to select multiple files, either using the Command + A to “Select All” items or using Command + Mouse Click Item to select items randomly and selectively.
Once selected, the user has just to click the Salvage Selected Files button at the bottom of the results pane. This will return a “Save” dialog box from which the user should select an external location to which to save the data and then click Save.
Once the files are salvaged, a dislog will pop up to announce the process is completed. Click OK to continue.
As soon as the Completed dialog disappears, a folder withe the recovered files will open.
4: Advanced Options
Supported File Formats
The ‘Supported File Formats’ button brings up a window that allows the user to pre-define the file formats that he or she would like to recover.
Once the window has loaded the user is able to see the entire list of support file types that FileSalvage will hunt for in the scanning process prior to actual recovery. He or she may then hand pick the desired formats in turn using the standard select key and click combinations. At the same time the user is also able to add or define his or her own custom file types.
Select File Types to Include
By default, FileSalvage will scan for all the file formats. Rather than scan for every files listed under our supported file format, it is possible for the user to limit the search on specfic file format(s). One can click on a single file format or Command + Mouse Click Item to select multiple formats. Click on Save to store the settings for the scan.
Adding Custom File Formats
To recover files that may not already exist in the current list of ‘Supported File Formats’ the user can add them via the dialog drop down, doing so by dragging & dropping 10 or more files of the same format into the ‘Custom Format’ pane to the left side of the drop dialog. Once these 10 or more files of the same format have been dropped into the pane, the Process button will become highlighted and should then be clicked by the user.
Upon completion of analysis the new format will be added to the supported formats pane under Custom File Types.
A – Question and Answers
Where is the documentation for FileSalvage?
You are reading it now. If you need help while you are using the software, you can access the help file from the Help menu.
I need support help, what should I do?
Our technical support is free and can be accessed by e-mail (Our e-mail support hours are 10 am to 6 pm Monday through Friday, California time). You must include in the e-mail your serial number, system configurations, and the system software version.
I don’t have a password for my system. Can I still install the software?
No. Without the password (or if the password is “blank”), FileSalvage will not be able to initialize key components to start the scan for lost files.
How come FileSalvage cannot recover file names and folder structures?
The file names will not be included as they are not actually stored in the file but rather in the system’s catalog/b-trees. Minutes after the file is deleted, the information will be removed and the space recycled and overwritten. FileSalvage will recover your files to the folder of your choice but the specific folders they were in and placement will not be the same. This once again is because that information is contained in the system’s catalog/b-trees.
My drive doesn’t show up under FileSalvage, what can I do to get FileSalvage to recognize the drive?
It could be possible that your drive is malfunctioning to the point where your computer is not able to talk to it at all, in which case even the device name will not appear. You might try the following things: Double-check the drive cables and power source; unplug and attach the drive, and power down and restart your drive and computer.
If the drive fails to show up, you could, as a last resort, try mounting the drive into an external enclosure and then see if the computer will detect it.
How come some files cannot be recover properly?
Usually the bigger the files, the tougher for FileSalvage to recover. Normally, at a bigger size, a file may be fragmented (The OS placed the file in sections over the disc platter). This is especially true when the drive is getting filled up. It will have lots of small open spaces. The OS will have to split up the file in order to fit the open spaces.
Can FileSalvage work on the same disk as the boot drive?
Yes, you can run FileSalvage on any locally connected drive. However, the destination folder to recover the files to cannot be on the same volume you trying to recover the files from.
FileSalvage cannot see my iPod, iTunes can. What is wrong?
In order for FileSalvage to detect the iPod, the iPod will need to have Disk Use enabled. For information on how to enable disk use on your iPod please refer to this page “Using your iPod as a storage drive.” FileSalvage does not support iOS based iPods, iPhones, and iPads.
FileSalvage located my songs but cannot play.
If some of your songs are purchased (encrypted songs), you will need to authenticate the destination using iTunes. Once this has been completed, the destination computer will be able to play the songs normally.
My camera card won’t show up, is the card defective?
Sometimes the flash card from your camera will not appear on the desktop or in FileSalvage or CameraSalvage. If this is the case, you may need to connect the media card via a media card reader. Although a lot of cameras (like the Canon SD series and the Nikon COOLPIX) can be connected to your Mac via USB cable to download your pictures, there are sometimes issue that may prevent a damaged camera memory card from being recognized by your Mac. Using a USB memory card reader often solves this problem and allows the card to be read by your Mac so that you may recover your pictures from the damaged card using FileSalvage or CameraSalvage. Media card readers can be purchased from most computer electronics stores for under $20 and most offer a large number of supported card formats that they will read.
B – Menu Shortcuts Reference
The following shortcuts are specific to the FileSalvage Application.
|Apple Key + Comma||Open ‘Registration’ Window|
|Apple Key + R||Rescan available hardware buses|
|Apple Key + T||Attach Disk Image|
|Apple Key + ?||Show Help|
Apple Key is also called the Command key.
C – Recovery File Types List
The following is a list of file formats that can be recovered using SubRosaSoft’s FileSalvage version 7:
- 3DS 3D file (Bryce 3D Strata 3D Cheetah3D etc)
- 3GPP video file
- 3GPP2 video file
- Adobe After Effects
- Adobe Illustrator
- Adobe InCopy
- Adobe InDesign
- Adobe LiveMotion
- Adobe Photoshop
- AIFF sound
- Apple AddressBook & Backup Files
- Apple Compressor
- Apple GarageBand AIF Sound Files
- Apple GarageBand Project Files
- Apple iDVD
- Apple iMovie projects
- Apple Keynote Presentation
- Apple Logic Express and Logic Pro Audio Files
- Apple Logic Express and Logic Pro Project Files
- Apple Pages
- AppleWorks Document
- ArcView Design Drawing
- ASF movie
- Automator Workflow
- AVI (Audio Video Interleaved) movie
- binhex archive
- BMP image
- Bryce 3D
- bz2 compressed tar
- C Source code
- Canon CR2
- Canon CRW
- Canvas X
- Digital Video & iMovie Movies
- DreamWeaver Actionscript
- EPS (Encapsulated PostScript)
- FileMaker 5 Database
- FileMaker 7 & 8 Database
- Final Cut Pro
- Final Draft
- Flash fla
- Flash swf
- GIF (Graphics Interchange Format)
- GIMP (Graphics)
- Google Earth KMZ files
- gzip archive
- iCal Events
- JMP statistics software
- Keychain File
- M4A (iTunes music)
- M4P (iTunes encrypted music)
- m4v video
- MacroMedia Director
- MacroMedia Freehand
- Mail (Mail.app received email)
- Mail (Mail.app sent email)
- Mail (mbox standard mailbox file)
- Maya 3D
- Microsoft Excel Documents
- Microsoft PowerPoint Documents
- Microsoft Word Documents
- MIDI sound
- mp4 video
- mpeg media
- MRW Minolta 7D
- Multi-Ad Creator Pro
- Ogg Vorbis
- OpenDocument Spreadsheet (OpenOffice.org & others)
- OpenDocument Text (OpenOffice.org & others)
- PNG (Portable Network Graphics)
- Quark Xpress
- QuickTime Image
- QuickTime Media
- RAR archive
- Reason (.rps)
- RTF (Rich Text Format) text
- Safari Bookmarks
- Stuffit SIT
- Stuffit SITX
- Targa image
- TIFF (Tagged Image File Format)
- Tiny Book
- WAV sound
- WMA audio
- WMV video
D – Copyright, EULA and Trademarks
SubRosaSoft.com Inc copyrights this software, the product design, and design concepts with all rights reserved. Your rights with regard to the software and manual are subject to the restrictions and limitations imposed by the copyright laws of the United States of America.
Under the copyright laws, neither the programs nor the manual may be copied, reproduced, translated, transmitted or reduced to any printed or electronic medium or to any machine-readable form, in whole or in part, without the written consent of SubRosaSoft.com Inc.
© Copyright 2003-2014 SubRosaSoft.com Inc. All Rights Reserved.
End User License Agreement for FileSalvage – Click Here
“SubRosaSoft FileSalvage” is a trademark of SubRosaSoft.com Inc.
All other brand and product names are trademarks or registered trademarks of their respective holders.