April
30, 2020

The new versions of PC-3000 Express/UDMA-E/Portable Ver. 6.7.12, Data Extractor Ver. 5.10.7, Data Extractor RAID Edition Ver. 5.10.7, PC-3000 SSD Ver. 2.8.2 are available!

Last week, you saw a lot of new PC-3000 functions at the ACE Lab Online Technology Conference on Data Recovery & Digital Forensics 2020. Today all these features are waiting for you in your update boxes! The following English, Chinese, Japanese and Korean software updates are released:


  • PC-3000 Express/UDMA-e/Portable-II/Portable-III version 6.7.12
  • Data Extractor/Data Extractor RAID Edition version 5.10.7
  • PC-3000 SSD version 2.8.2

All authorized technical support users will get the latest software versions.

Please contact us to learn more on how to become an authorized technical support user and receive all of the recent PC-3000 Software Updates:

RENEW YOUR TECHNICAL
SUPPORT CONTRACT



A SHORT LIST OF THE MAIN ENHANCEMENTS:

PC-3000 Express/UDMA/Portable

WD Marvell

  • Added a write block mode for SMR HDD;
  • Added support for editing the head map in RAM for the Apollo family;
  • Added Charger family support;
  • For SMR HDD (Spyglass, Palmer, Charger):
    • Added map building based on second-level translator data, disabling Read Defrag;
    • Added technological reading by PBA (reading is possible if a second-level translator is lost).

Seagate F3

  • Improved “Write block” load to HDD RAM mode;
  • Added support for the following families:
    • 7A Makara, 8B Lamarr, 91 MakaraPlus, 95 Hepburn Oasis, 9B V11, A1 M11, A6 Nemo, AF Rosewood AF / Janus;
  • A mechanism for expanding the BOOTFW segment in ROM for UnlockTech has been made for the AF Rosewood AF / Janus family;
  • New patches/actions have been added in the "Work with Flash ROM image file" menu;
  • New patches/actions have been added in the "HDD Autoinitialization".

Samsung HDD

  • Added possibility to clear module directly in ROM dump to the "Clearing FIPS module";
  • Added the "Change the head map in ROM" test for drives F1_3D, F2_EG, F3, M7S2, N2B, F3_4D, M7E, F4_3D, F4, M8E, MT2, N3, MP4, M9T.

Toshiba

  • Added the support of new families: HDWQ1 and MD03ACA.

PC-3000 Kernel

  • The PC-3000 Portable III: A completely redesigned Easy mode interface. Added support for NVMe and USB drives. Added report on the results of diagnostics and statistics on a copy creation.


PC-3000 Express/UDMA/Portable

  • Standalone mode: added support for drives with a logical sector size other than 512 bytes;
  • Standalone mode: a mode to view the contents of sectors added.


DATA EXTRACTOR

  • Imaging speed increased by increasing priority of threads engaged in "secondary" parsing processes (background analysis, writing and reading maps) and energy-saving settings changes (% of the process using, etc). Due to these improvements imaging speed was increased to the minimum reading speed of two devices (source and patient). For example, the PC-3000 SAS II device is able to perform imaging with about 220 MB/sec;
  • Additional maps
    • real-time coloring possibility for additional map (during the reading process for example) was added;
    • real-time coloring possibility for the additional map on drives with changed sector size and "connected" map during the reading initial drives was added;
    • "Snapshots based on legend" additional maps for File systems option was added.

RAW recovery

  • AppleCoreStorage structures parsing methods improved;

FileVault

  • EncryptedRoot.plist.wipekey files are no longer required for a lot of tasks;
  • Added support of Unicode passwords;

VeraCrypt

  • Added support of VeraCrypt (though without Camellia and Kuznechik algorithms for now);

F2FS

  • Added the initial support for a file system.

ReFS

  • Added the initial support for a file system.

RAID Edition

  • Added support for up-to-date versions of metadata on Windows Storage Space.


PC-3000 SSD

Phison

  • Added support for the PS5007 controller (NVMe).


DETAILED LIST OF ENHANCEMENTS

PC-3000 Express/UDMA/Portable

WD Marvell

  • Added a mode to parse the HDD initialization log during a firmware launch;
  • The read mode by PBA / CHS improved for SMR HDD;
  • Added a write block mode for SMR HDD;
  • Improved password clearing mode, password report and HDD ID editor for SED drives;
  • The "previous key" is added in the search mode for encryption keys for SED drives;
  • In the "Writing modules" mode, an automatic sorting by ID is added and the list of found files is updated (Previously, to write by ID a check was made for the file and module size to match in Dir. Now the check is turning on in the utility settings);
  • Added support for SPI ROM chips from Microchip (Silicon storage technology) in Boot ROM mode:
    • SST25VF512, SST25VF512A, SST25VF010, SST25VF010A, SST25LF020, SST25LF020A, SST25VF020, SST25LF040A, SST25VF040, SST25VF020B, SST25PF020B, SST25VF040B, SST25PF040B, SST25VF080B, SST25P080B, SST25WF512, SST25WF010, SST25WF040, SST25WF020, SST25PF040C, SST25WF020A, SST25WF040B, SST25WF080B.
    • Previously a part of this list was determined, read, but an error occurred while writing because the format of the write command for these ROMs is different to the rest;
  • Added support for editing the head map in RAM for the Apollo family;
  • Fixed PBA technology reading mode for SMR HDD, taking a translation into account;
  • Added Charger family support;
  • For SMR HDD (Spyglass, Palmer, Charger):
    • Added map building based on second-level translator data, disabling Read Defrag;
    • the restriction on the volume (65535 sectors) read by the module ID has been removed;
    • Added technological reading by PBA (reading is possible if a second-level translator is lost);
  • For the PC-3000 Portable-III complex, a logical scan has been added for the USB / COM utility (for the USB Host port).
  • Added new actions to "Active utility actions" and "Error handling" in DE:
    • "Sub scenario WDM" - allows you to include a debugged sequence of actions in the created script;
    • "Is power up action Ok" - checks the HDD initialization status;
    • "Write Static-module" - allows you to write a static module in the HDD RAM;
  • For the modes "Reading Modules", "Writing Modules", "Modules directory", "View and Edit HDD Resources", the initial sorting of the list of modules by ID has been added (can be disabled in the utility settings);
  • For modes that require modification of the ROM dump, its automatic backup has been added (can be disabled in the utility settings).

Seagate F3

  • Improved “Write block” load to HDD RAM mode;
  • In the "HDD autoinitialization" wizard, buttons added to control the state of write blocking on-the-fly;
  • Added a head shutdown mechanism through editing ROM and P-List images according to the algorithm described in the ini file;
  • Improved control of the validity of the ROM at the stages of reading and writing;
  • In "Kahuna / Grenada SSHD patch2" added an additional signature to work with previously unknown firmware;
  • Added the SetFeatures-SpinUp action to the start dialog, which initializes the drive in the PUIS PowerUpInSpindownstate state, previously only a warning was displayed;
  • New system commands added for user commands: to turn on the power - Token_PWR_ON and to unlock the "techno mode" - Token_HANDSHAKE;
  • Added support for the following families:
    • 7A Makara, 8B Lamarr, 91 MakaraPlus, 95 Hepburn Oasis, 9B V11, A1 M11, A6 Nemo, AF Rosewood AF / Janus;
  • UnlockTech code rewritten to ensure the minimum size in ROM;
  • A mechanism for expanding the BOOTFW segment in ROM for UnlockTech has been made for the AF Rosewood AF / Janus family;
  • For the families GrenadaBP2, Bacall, PharaohOasis, HepburnOasis, the loader loading permission code has been improved:
    • from BFW (integrated into UnlockTech);
    • from DFW (available from ROM Wizard or Auto Initialization Wizard, the "Switch off extended LOD checking(RAM)" function.
  • For reading modules, the selection of a working copy has been added (auto, 1, 2). If "auto" is selected, the disk reads and selects the copy by itself;
  • When recording modules and Sys Files, you can separately select which copy to save;
  • When recording modules and Sys Files, the last selected folder is now remembered;
  • When writing ROM, the last selected terminal speed is now saved;
  • The ability to save the selected region of RAM via ATA has been added to the procedure of HDD resources backup;
  • Added head test for reading / writing SA modules: DST_WRTESTx, where x = 0..7 head numbers (i.e. modules 22..29);
  • The option to work via terminal has been added to maps of logical and physical heads to edit the block of SAP parameters (Servo Adaptives Parameters) in RAM MaxHead;
  • Added active utility actions for Data Extractor:
    • "Download the write lock to RAM HDD (ATA)";
    • "No HOST BSY -> RDY" receiving the state of readiness for some damage to SA leading to BUSY;
    • "Switch off extended LOD checking(RAM)”;
    • "Clear device fault state (RAM)";
    • "Download translator to RAM HDD";
    • "Download MCMT to RAM HDD".
  • Plugins and add-ons to them:
    • Plugin "MCMT extent edit" extent editor in MediaCache;
    • "MCMT \ Edit" added the ability to cut TRIM extents;
    • In the parser "MCMT \ Parser" you can now filter TRIM records and save them into a separate map file.
  • A new feature for direct work with DiskFW has been added in "Work with Flash ROM image file" menu: through reading/writing Sys File (Terminal/ATA Direct/ATA Indirect Utility status settings);
  • New patches/actions have been added in the "Work with Flash ROM image file" menu:
    • The "Block native DFW boot" patch from SA (to bypass SA SysDef reading) and patch removal;
    • The "Show Device Fault reason at start" patch (impact on DiskFW);
    • The patch clearing DAP / CELog (Critical Event Log) in ROM;
    • The "Kahuna/GrenadaSSHD CFW/DFW patch 2" patch to get Terminal access in case of NAND damage;
    • The "Desaru LED67 FAddr: 0038xxxx" patch and patch removal;
    • The "No HOST FIS-ReadyStatusFlags, BSY -> RDY (HDD RAM)" action.
  • New patches/actions have been added in the "HDD Autoinitialization":
    • The "Block native DFW boot" patch from SA (to bypass SA SysDef reading);
    • The "Show Device Fault reason at start" patch (impact on DiskFW);
    • The "Desaru LED67 FAddr: 0038xxxx" patch;
    • The "No HOST FIS-ReadyStatusFlags, BSY -> RDY (HDD RAM)" post-action;
    • The "Load translator to HDD" post-action;
    • The "Load MCMT" post-action.
  • Control and warning message about adaptives corruption has been included into all ROM reading/writing options;
  • Defect hiding procedure and translator regeneration via ATA have been improved for Rosewood and similar families;
  • In case of Alternative initialization through the terminal (ROM/DiskFW) sys files are saved in the profile folder;
  • BootFW and BootCode switches have been added to the "User commands" menu.
  • New tokens have been added for user commands:
    • REPEAT_CHAR, using: char, ^char, 0xHEX (ex: REPEAT_CHAR A, REPEAT_CHAR ^R, REPEAT_CHAR 0x1B);
    • INIT_BC, force switching in BootCode;
  • A post-action has been added to the Auto-initialization wizard: "Write block load to HDD RAM";
  • The auto-initialization settings block of the internal parameters of the utility is rebuilt according to the scheme: "by ATA" / "by terminal" / "extended";
  • Added the ability to automatically load the start-up code of the write-block code based on the Disk FW HDD module at the start dialog.

Seagate ST10

  • 7200.10 NHawk has been added to the Family list (same block with Galaxy).

HITACHI-IBM-ARM

  • Autofilter has been added for different object types in Work with SA objects menu;
  • Warning messages have been added for ROM writing option:
    • Warning before ROM writing "If it fails, it needs a programmer for ROM rewrite";
    • Warning before ROM writing "For ROM write it needs to be code overlays loaded in HDD RAM";
    • Warning before ROM writing "ROM write may take some minutes to perform".

Samsung HDD

  • The "Send "LE"" ("LE" package) has been added in the "Utility Actions";
  • Added header check when editing the SNTBL module;
  • Added possibility to reserve modules not only by composing reading but with chosen heads;
  • For Samsung "USB Utility" (USB host Portable3 version) added the test "Logical Scan";
  • Added the "Reconnect COM port" menu;
  • Added possibility to clear module directly in ROM dump to the "Clearing FIPS module";
  • Added autopower switching after reading ROM from the drive to the "Initializing HDD with editing the head map in RAM" test. In some cases the drive may freeze after reading ROM;
  • Added S.M.A.R.T. enabling in module B2 PROFILE to the "S.M.A.R.T. Clearing" (by utility method). For M8E drives that pass the burn-test;
  • Added possibility to choose values from the list of standard capacities to the "Passport data editor" test and the menu "Set max LBA" from the "Disabling zones and Heads" test;
  • Added menu for selecting zones according to the CHS list and the A-LIST table to the "Disabling zones and heads";
  • In order to unify it with other utilities, the “Formatting” test has been moved to a separate quick access menu;
  • For F1_3D, F2_EG, N2B, N3 families loaders are replaced. New loaders have the ability to write a ROM dump to the drive completely, including a head map;
  • Added the "Change the head map in ROM" test for drives F1_3D, F2_EG, F3, M7S2, N2B, F3_4D, M7E, F4_3D, F4, M8E, MT2, N3, MP4, M9T;
  • Samsung USB utility adapted to work with USB-Host port PC-3000 Portable 3.

Toshiba

  • Added the support of new families: HDWQ1 and MD03ACA;
  • Added a logical scan for the PC-3000 Portable-III complex and for the USB Utility (for the USB Host port).

PC-3000 Kernel

  • The PC-3000 Portable III: A completely redesigned Easy mode interface. Added support for NVMe and USB drives. Added report on the results of diagnostics and statistics on a copy creation;
  • Added switch 32-bit / 48-bit RAW values when displaying SMART parameters.
  • Universal Utility PC-3000 AT: Added the "Sub scenario standart" error script action.


PC-3000 Portable III

  • Standalone mode: added the ability to simultaneously calculate two hash-functions;
  • Standalone mode: added the function to calculate the hash-functions of MD5, SHA1, and SHA2 to the copy and read test modes;
  • Standalone mode: added support for drives with a logical sector size other than 512 bytes;
  • Standalone mode: a mode to view the contents of sectors added;
  • Standalone Mode: In "Sector view" mode added ability to jump into first and last LBA in one click;
  • Standalone Mode: Added mode for S.M.A.R.T. checking for SATA/PATA HDD/SSD;
  • Standalone Mode: In "Sector view" mode added dynamic changing of LBA step;
  • USB port: Added the ability to work with SD and micro SD cards connected via card readers.
  • Added new digitally signed drivers for PC-3000 Portable III to install to OEM systems with active UEFI Secure Boot.
  • Improvements in support of HDD/SSD with a logical sector size different from 512 bytes in DE and a universal utility;
  • Improved error handling on reading faulty NVME drives (with some types of malfunctions);
  • Improved algorithm for standalone/PC mode switching. At the bottom of screen added information messages.


DATA EXTRACTOR

  • Imaging speed increased by increasing priority of threads engaged in "secondary" parsing processes (background analysis, writing and reading maps) and energy-saving settings changes (% of the process using, etc). Due to these improvements imaging speed was increased to the minimum reading speed of two devices (source and patient). For example, the PC-3000 SAS II device is able to perform imaging with about 220 MB/sec;
  • It’s now possible to save files based on search parameters only;
  • It’s now possible to run a background process queue. Processes in the queue are executed in a row. Also, it’s possible to run several background processes at the same time.
  • Added snapshots of a drive. Any changes are applied to the snapshot only and are not applied to the original drive. Snapshot can be mounted with writing permission without the risk of overwriting the original data.
  • PC-3000 Portable III supports “inner” copying when data is not stored on the workstation. During this process, the attribute map is filled, and the speed peaks at 490MBi/s. To get the top speed you need to select a max block size.
  • Additional maps:
    • real-time coloring possibility for additional map (during the reading process for example) was added;
    • real-time coloring possibility for the additional map on drives with changed sector size and "connected" map during the reading initial drives was added;
    • "Snapshots based on legend" additional maps for File systems option was added.
  • During the saving process from the searching window now only saves files that meet the search criteria;
  • Added ability to look into "incremental" map statistics;
  • Added ability to open the Data Extractor NVMe and USB drives tasks created in the PC 3000 Portable III by the PC 3000 Express and PC 3000 UDMA;
  • Improved workflow with E01 and AFF formats;
  • Improved workflow with date format in filter mode.

RAW recovery

  • Fixed the Fake APFS structures searching result issue;
  • Some types of files control have been improved to avoid possible fake searching result;
  • *.heic files are parsing now (before determined like *.mp4);
  • AppleCoreStorage structures parsing methods improved;
  • DHF and WFS structures searching has been added, also virtual partitions adding methods have been improved.
  • Virtual Drive Map Decrypted:
    • Added support of 256-bit keys;
    • Added support of AES-CBC-WithoutDiffusor algorithms.

FileVault

  • Metadata parsing has been improved. Loading speed has been improved.
  • EncryptedRoot.plist.wipekey files are no longer required for a lot of tasks;
  • Unicode passwords are supported now.

BitLocker

  • Added support of Partitions with few recovery keys;
  • Added support of Unicode passwords.

VeraCrypt

  • Added support of VeraCrypt (though without Camellia and Kuznechik algorithms for now).

F2FS File system

  • Primary support of FS added.

NTFS file system

  • Added support for the Volume Shadow Copy. It’s now possible to work with uncompleted Volume Shadow Copy just as with a native volume without any additional analysis. On the creation of Volume Shadow Copy, it’s now possible to select an unchanged copy.
  • Improved analysis of deduplication metadata. It’s now possible to work with uncompleted Volume Shadow Copy just as with a native volume without any additional analysis.
  • Added parser for NTFS LogFile. LogFile contains NTFS metadata changes (MFT, Index). The option is in the context menu of the file system node (menu "Parse LFS", LFS stands for Log File Service). As a result, the virtual disk with so-called layers is created. It's possible to select a layer on the disk. The layer presents a snapshot of metadata at a certain time period. A number of layers correlates with the "age" of the layer. Based on practice, LogFile can contain metadata for a time period from several hours to several months.
  • Implemented basic support for the new type of EFS metadata.
  • Improved start offset detection for partitions with a huge amount of non-resident catalogs;
  • Added support for MFT uploading for tasks with several disks.
  • Implemented saving procedure for deduplicated files with resident attribute C0.

UFS file system

  • Improves partition analysis with file extensions with more than 8 Unicode symbols.

ReFS

  • Added the initial support for a file system;

ExFAT file system

  • Improved partition analysis. Added parser for objects addressed by the FAT table without descriptors in catalogs (LostFatObjects node).

FAT file system

  • Improved analysis for cases with more than 10000 catalogs;
  • Added support for the FAT table with more than 200000 sectors.

HFS+ file system

  • Improved performance of partition analysis.

APFS file system

  • Metadata scan methods have been added: Scan Catalog and FS Tree, Scan map, Scan partition

DHFS

  • Fixed the bug of DHFS uploading;

RAID Edition

  • Added support for up-to-date versions of metadata on Windows Storage Space;


PC-3000 SSD

Silicon Motion

  • Improved the appearance of the "Read Settings" window for NVMe drives;
  • New loaders added for SM2246EN and SM2246XT controllers;
  • During translator building output of the total number of defective pages has been added into the log;
  • Tests for translator saving and uploading have been added;
  • Verification of wrong memory ID has been added into the log during drive initialization and in "Memory chips test"
  • SM2246EN (SATA) controller:
    • New family Transcend 370s has been added;
  • SM2260G (NVMe) controller:
    • New family ADATA XPG SX7000 has been added;
  • SM2263XT (NVMe) controller:
    • The following families have been added: AMD Radeon R5, Transcend MTE110S, Lexar NM600, Neo Forza Zion NFP03, HP EX900.

Phison

  • Added support for the PS5007 controller (NVMe);
  • New utilities added: Patriot Hellfire M2 and Kingston KC1000;
  • For PS3108, PS3111 and AS2258 controllers new loaders have been added;
  • Algorithm for correct Loader version autodetection in case if SSD stays in SAFE MODE has been improved;
  • Verification of wrong memory ID has been added into the log during drive initialization and in "Memory chips test";
  • For PS3110 and PS3111 controllers added new loaders;
  • For PS3110 controllers improved algorithm of the translator building for drives with a capacity of more than 500 GB;
  • In "dump saving" test added the ability to read pages by pseudo-SLC mode.

If you haven't found the answer for your question please send us your message:

Name *:
Company *:
Country *:
E-mail *:
Phone:
Message:
Antispam: