AfterDawn | News | Guides | Software downloads | Tech Support | Forums | HIGH.FI
AfterDawn

Version history for IsoBuster

<<Back to software description

Changes for v4.5 - v4.6

  • Changes / New:
  • Support for NTFS cluster sizes of 128 KB and higher. Since Windows 10 v1709 and Windows Server 2019 the older maximum 64 KB boundary has been increased to 2 MB, so changes needed to be made
  • Support for multiple NTFS MFT records in a single sector
  • Faster extraction and cloning, depending on write and read speeds but obviously still limited by the read speed on failing media or devices
  • Work-around for a certain type of data corruption that appears to happen frequently using certain USB card readers (internal and external). Symptoms are the sudden loss of files and or partitions etc. Usually in combination with FAT. Remaining files and/or folders may get names such as "USBC◘╧è◘" or "USBC..". Possibly related to ADATA NH92 adaptors though that is not certain! After researching the issue online it seems a lot of people think this is a virus. I see mention of the "USBC virus" and "USBC malware", yet it's not. It's a hardware / firmware failure that happened while data was being written to the SD card. IsoBuster is now able to detect and compensate for such issues on the fly so that files and folders can still be found and extracted
  • IsoBuster now displays the average speed when extracting
  • Support for ISO9660 and its derivatives, Joliet, Rock Ridge etc. mistakenly copied/cloned to a USB stick with 512 bytes per block
  • Right-Mouse-Click when holding SHIFT adds the option to work on a range (From-To) when doing a -Surface Scan- or -Scan for missing files and folders [Professional license]- or -List erroneous sectors-
  • Right-Mouse-Click when holding SHIFT adds the option to create a managed image file or clone that is [Empty]. No actual reading is done yet and the user has full control over which type completion is to be performed or what type of engineering is to be done [Professional license]
  • Right-Mouse-Click when holding SHIFT adds the option to show the Sector View dialog with the object's last LBA instead of its first LBA
  • Improvements:
  • Various speed and memory improvements when parsing NTFS
  • Various speed and memory improvements when parsing Brother-FAT and FAT
  • Various speed and memory improvements when parsing ISO9660 and its derivatives, Joliet, Rock Ridge etc.
  • Various speed and memory improvements when parsing the Pioneer DVR file system
  • Improved FAT parsing when only the backup boot sector is available
  • Both FAT addresses are shown in the FAT File system properties dialog (if there are two FATs)
  • Improvements in the 'debug dump' image file functionality. Activated when contacted to try and debug an issue
  • The search-suggestions-drop-down now displays under the search control instead of to the right of it, very much like previous-search-commands
  • An object (for instance file) with no size (0 bytes) cannot have unreadable sectors (so it should not be listed as such, even if its address is in unreadable space)
  • Improved support for old style Macintosh Partition maps
  • Better file signature detection of quick time formats: mp4, mov, 3gp, 3g2, m4a, m4b, m4p, m4v during a scan for missing files and folders
  • Improved file signature detection and assembly of fragmented *.avi files
  • Improved *.swf, *.wmf, *.pxc, *.exe, *.dwg and *.ico file signature detection (less chance of false positives)
  • Added file signature detection for: *.alb, *.pwm, *.pwp, *.amr
  • Added more shortcuts, Ctrl+ and Crtl-, to read and show sectors in Sector View
  • Also allow the creation of a customizable file system from a single track session or a single partition USB/HDD/SSD
  • TreeView now does 'hot tracking' when hovering over objects
  • Better internal click and right click management when making further selections afterwards, e.g. search
  • Changed the layout of the right-mouse-click popups to hopefully make more sense (may need a small adjustment when you're used to the old layout)
  • Dynamically create right-mouse-click popups to allow much more flexibility in the future
  • Plenty of other improvements, quite a few changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality
  • Various other GUI improvements
  • Fixes:
  • No known, reported or encountered bugs .. so nothing needed to be fixed



Changes for v4.5 - v4.6 Beta

  • Changes / New:
  • Support for NTFS cluster sizes of 128 KB and higher. Since Windows 10 v1709 and Windows Server 2019 the older maximum 64 KB boundary has been increased to 2 MB, so changes needed to be made
  • Support for multiple NTFS MFT records in a single sector
  • Faster extraction and cloning, depending on write and read speeds but obviously still limited by the read speed on failing media or devices
  • Work-around for a certain type of data corruption that appears to happen frequently using certain USB card readers (internal and external). Symptoms are the sudden loss of files and or partitions etc. Usually in combination with FAT. Remaining files and/or folders may get names such as "USBC◘╧è◘" or "USBC..". Possibly related to ADATA NH92 adaptors though that is not certain! IsoBuster is now able to detect and compensate for such issues on the fly so that files and folders can still be found and extracted
  • IsoBuster now displays the average speed when extracting
  • Support for ISO9660 and its derivatives, Joliet, Rock Ridge etc. mistakenly copied/cloned to a USB stick with 512 bytes per block
  • Right-Mouse-Click when holding SHIFT adds the option to work on a range (From-To) when doing a -Surface Scan- or -Scan for missing files and folders- or -List erroneous sectors-
  • Right-Mouse-Click when holding SHIFT adds the option to create a managed image file or clone that is [Empty]. No actual reading is done yet and the user has full control over which type completion is to be performed or what type of engineering is to be done
  • Right-Mouse-Click when holding SHIFT adds the option to show the Sector View dialog with the object's last LBA instead of its first LBA
  • Improvements:
  • Various speed and memory improvements when parsing NTFS
  • Various speed and memory improvements when parsing Brother-FAT and FAT
  • Various speed and memory improvements when parsing ISO9660 and its derivatives, Joliet, Rock Ridge etc.
  • Various speed and memory improvements when parsing the Pioneer DVR file system
  • Improved FAT parsing when only the backup boot sector is available
  • Both FAT addresses are shown in the FAT File system properties dialog (if there are two FATs)
  • Improvements in the 'debug dump' image file functionality. Activated when contacted to try and debug an issue
  • The search-suggestions-drop-down now displays under the search control instead of to the right of it, very much like previous-search-commands
  • An object (for instance file) with no size (0 bytes) cannot have unreadable sectors (so it should not be listed as such, even if its address is in unreadable space)
  • Better file signature detection of quick time formats: mp4, mov, 3gp, 3g2, m4a, m4b, m4p, m4v during a scan for missing files and folders
  • Improved file signature detection and assembly of fragmented *.avi files
  • Improved *.swf, *.wmf, *.pxc, *.exe, *.dwg and *.ico file signature detection (less chance of false positives)
  • Added file signature detection for: *.alb, *.pwm, *.pwp
  • Added more shortcuts, Ctrl+ and Crtl-, to read and show sectors in Sector View
  • Also allow the creation of a customizable file system from a single track session or a single partition USB/HDD/SSD
  • TreeView now does 'hot tracking' when hovering over objects
  • Better internal click and right click management when making further selections afterwards, e.g. search
  • Changed the layout of the right-mouse-click popups to hopefully make more sense (may need a small adjustment when you're used to the old layout)
  • Dynamically create right-mouse-click popups to allow much more flexibility in the future
  • Plenty of other improvements, quite a few changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality
  • Various other GUI improvements



Changes for v4.2 - v4.5

  • Changes / New:
  • Ability to resume a scan for missing files and folders, if the content is still shown
  • Ability to save scan results (as *.ibr files)
  • Ability to load previous (*.ibr) scan results and resume the scan if so desired
  • Ability to import XML formatted lists of files and folders (if you happen to know where the files are physically located on the medium)
  • Support for more type Philips HDD recorders (DVR-3500)
  • Support for Brother typewriter *.256 floppy images that use a primitive FAT like file system
  • Ability to extract search results (files and folders) but preserve their relative path instead of creating a flat list of all found files and folders
  • Improvements:
  • Rewrote parts of the ISO9660 parsing to get rid of the annoying memory allocation warnings in case of extremely large buffer allocations
  • Hide the annoying 'out of spec' errors for severe ISO9660 'out of spec' situations by default
  • ISO9660 Scan options now features showing both 'soft' and 'severe' 'out of spec' errors
  • Support for NCR_DIAGS' butchered ISO9660 version
  • Support for ISO9660 implementations that are not 2048 bytes-per-sector based. They're extremely rare but I managed to find an image file
  • Various other ISO9660 (and its derivatives) related improvements
  • When finding HDD / SSM / USB etc is not set in options and IsoBuster is not running elevated, the moment finding such devices is enabled, IsoBuster will ask to run elevated. The prompt asking to restart now allows to restart without saving current selection. This is so that once a normal user has gone through this, the application will not automatically want to elevate next time as well, because once elevated, changes in options are made for the elevated user and not for the normal user
  • Recognize Amiga floppy images *.adf, *.adz, *.dms and *.fdi as 512-byte block disk images rather than CD images
  • Support Image file extensions *.512, *.256 and *.128, which forces IsoBuster to treat the image file using that block size
  • When opening a *.CDT, *.ISO or *.BIN image file, IsoBuster now first looks for a *.CUE file with the same name in the same folder, and if it exists IsoBuster opens the CUE instead
  • Address input fields now also support notation x.. (aside from already supported 0x.. and ..h) to input hex data
  • Implemented tag <%OBJECTS> in the file export functionality to be able to show how many files+folders a folder contains
  • Implemented tags <%ATTRIB(U)>, <%TYPE(U)>, <%UIC> in the file export functionality to be able to show properties/attributes that are language independent (Uniform)
  • Revert to Lucida Console, for the mono-spaced font in Sector View, in the odd case that Courier is not installed (As seen with WinPE)
  • Improved the breadcrumb GUI under certain borderline conditions, for instance under, but not limited to, Wine on Ubuntu etc.
  • Plenty of other improvements, changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality
  • Various other GUI improvements
  • Fixes:
  • Fixed bug that caused the (right mouse click invoked) Search dialog to always find all objects rather than the objects identifying with the requested search parameter (Not the search control in top right corner)
  • Fixed exception error that can happen when a CUE is paired with a file who's size is not an exact multiple of the block size mentioned in the CUE
  • Fixed it so that text file parsing also works on UCS-2 BE (UTF16 Big Endian (aka byte swapped / Motorola)) formatted data
  • Fixed bug so that tags <%>> and <%>=> are properly recognized
  • Fixed exception error that could occur when the scan for missing files and folders was immediately aborted, even before actual reading started
  • Fixed not finding all files and folders (depending from image to image) in an El Torito embedded FAT boot image
  • Fixed HFS and MFS file and folder date and time stamps (Issue introduced in IsoBuster 4.3)



Changes for v3.6 - v4.2

  • Changes / New:
  • Rewrote the options dialog to look fresh and most importantly te be decluttered and intuitive again. Added to that, selecting a language or changing a font now changes all options' text immediately, so that you can see the effect
  • Added BDXL, M-Disc, UHD, Triple Layer (TL) and (Quadruple Layer) QL BD(RE) disc support
  • Ability to start IsoBuster 'idle' without any drive auto-selected (not the default but can be set in Options)
  • Search (now by default) searches the entire region of the selected object, and not just the most relevant File System. For instance when a Session is selected, all tracks and file systems in those tracks will be searched and not just the most relevant file system in the most relevant track. The old way can still be turned on again in options
  • Work around for issue (most likely a buggy USB bridge driver) that causes less bytes to be transfered when reading raw (2352 bytes per block) on some systems
  • Ability to specify where the IBQ range ends, to influence filling gaps and where finishing at the end starts [Professional license]
  • Implemented more flavours of Rimage Image files (*.rmg)
  • Show text portions of certain Image files via an extra option in the main menu (e.g. for: *.cue, *.rmg, *.ewf, *.ccd)
  • Rewrote the file export / report functionality to make it much faster, 10 times faster or more than before
  • Rewrote CUE file parsing to better deal with multi-file images and improve the overall functionality
  • Support reading in the first pregap on a CD (addresses -150 to -1), for instance with Sector View
  • The Edit window / Sector Viewer can be set (and will remember) its own font for both normal text and text that requires a fixed width font
  • Improvements:
  • Make sure the correct encoding is always used for XML, RTF and TXT in the Edit Window (TXT is now the default over RTF, using UTF8)
  • Allow any extension, if more appropriate, when saving a file from the edit window
  • Improved search functionality engine for even faster and more accurate search results
  • Improved resolving of a path copied in the breadcrumb control / edit bar, to show the proper object(s)
  • Do not display "Processing File-System" when mounting an Audio CD
  • Show better caption on the extraction dialog when cloning a drive or partition
  • Better detection of Atari DOS discs/images
  • Improve display of Mac 'Type' and 'Creator', in case of illegal (non-printable) characters
  • Implemented a more generic approach to store and use the ISO9660 / Joliet 'associated file'. The associated file is used as resource fork on Mac created discs but can in theory also exist on its own, for other implementations. We now treat it as a stream and also extract it as such
  • Added tags {%ASCII} and {%ANSI} to the file (encoding) export functionality
  • Added tags {%SUID} and {%PSUID} as unique object identifiers to the file export functionality
  • Added tags <%TSNSHT> and <%TSNSHRESET> to measure time of certain processes to the file export functionality
  • Added tags {%DFXML}, {%ISO8601}, <%TIMEDATETZ> and <%SYSTIMEDATETZ> to support ISO 8601 date and time formatting (which is required in DFXML exports)
  • Always escape single and double quotes in XML exports, but the caller can disable this with commands {%ASQ} and/or {%ADQ}
  • Always escape '<' and '>' characters in XML exports, but the caller can disable this with commands {%A>} and/or {%A<}
  • Added tag {%ONLYUNREADABLE} to only log unreadable objects in file exports
  • Changed the export logic so that width is now explored first rather than the depth, but it can be changed with {%DEPTHFIRST} or {%FLAT}
  • Default, folders are now also exported in File Lists / Reports
  • Changed the embedded XML export list, to take advantage of new commands and tags
  • Changed the embedded DFXML export list, to take advantage of new commands and tags
  • Replace single quotes by double quotes in the predefined XML layout, so that files with single quotes (and apostrophe) do not cause problems parsing the XML
  • Show text in combobox control when no drives are found but finding them has been disabled in options, so that you better realizes what is going on
  • Improved display of the application when starting up and when certain devices are slow to respond (Show "Finding Devices" in combobox meanwhile)
  • Add Catalogue and ISRC to the CUE file (if present / per track)
  • Display ISRC per track and Catalogue per CD, in properties, even when no CD-Text is present
  • Add (and retrieve) more CD-Text to/from CUE files
  • If the ISO is smaller than what the CUE suggests, the last track will still get a minimum size (2 seconds = 150 blocks) so that the track is shown with errors
  • If the ISO / BIN image file is too small for what the CUE describes we immediately update the sector bitmap so that the effect can be seen in the blocks map (for instance via properties)
  • Make sure there's a red X displayed next to a session icon as well, when one of its tracks contains unreadable sectors
  • Improved NTFS parsing speed and efficiency by not going deep automatically on embedded folders, by retaining the required information differently, until exploring the folder is requested (via display, extract, search or ..)
  • Considerable speed improvements when opening *.ibdat and *.ibadr files, by keeping track of bad ranges
  • Made IBP/IBQ image file reading in case of erroneous sectors 5 to 15 times faster
  • Made searching for missing files and folders in an IBP/IBQ image with lots of errors up to 26 times faster
  • Display grey blocks in the blocks map, for ranges beyond the bitmap readable range (as in when an IBP/IBQ has not yet been fully read)
  • Improve blocks map hints when the address range is contiguous
  • Deselect the last square in the blocks map when moving outside the squares (but still inside the control)
  • Zoom-in via double click on the blocks map squares shown in properties [Professional license]
  • Sector View via double click on a single-sector square in the blocks map (e.g. via object properties) [Professional license]
  • Double clicking middle or right mouse buttons zooms out again
  • Added commands /cfpr /fs and /el on the command line
  • Speed improvement when reading audio from 2352 bytes per block image files
  • Expose relevant NTFS extent properties. For instance to show extents of compressed files as compressed (blue)
  • ListView icons also reflect the compressed or encrypted state of an object
  • Sparse parts of a file or folder are shown in a light blue color
  • Clear what we know about the destination drive's content after making a clone, since its content will have changed entirely, so a refresh is needed
  • Support hex notation ..h (for instance FFFFh or aah) aside from the already supported 0x.. notation in address and length input fields
  • Also show CD/DVD/BD properties on blank media
  • Plenty of other improvements, changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality
  • Various other GUI improvements
  • Fixes:
  • Fixed issue causing the online help to not always show the correct page
  • Fixed sorting issue that only really showed when exploring the root of ISO9660 or derivative file systems
  • Properly detect audio in the first track's pregap inside an image so that reading raw in the pregap doesn't trigger completing the sync bytes, or fails entirely
  • <%SYSTIMELAPSEDSEC> in File Lists / Reports was calculated wrongly (with a factor 100)
  • Fixed it so that the MD5 is automatically created again after making an image file if that is how it is set in options
  • Do not create an MD5 or CUE after making a clone, if that is what is set in options after making an image file
  • Fixed issue introduced in IB 4.1 for NTFS files that are highly fragmented. The full file size would not be taken in account for files consisting of more than 22,799 extents. Now tests with +1,507,519 extents worked perfectly
  • Fixed the edit window toolbar height changing slightly every time the window was shown again
  • Fixed rare issue that truncated the size of a file (with a few bytes), when extracting (audio) blocks using From-To functionality and wrapping the data in a WAVE RIFF header
  • Fixed image file generation and overal handling of audio discs when track 1 does not start on address 0



Changes for v3.5 - v3.6

  • Changes / New:
  • Support for the Linux EXT file system
  • Support for Rimage mastered CD/DVD discs with manifest file
  • Support for Nintendo GameCube file system
  • Support for GEMDOS / Atari - ST FAT12-16 variant
  • Support for High Sierra on CD-ROM (the predecessor to ISO9660)
  • Implemented internal device caching, especially used during File System recognition. Many file systems start from similar addresses. Caching avoids having to re-read blocks for every file-system that is checked
  • Detect if the Nintendo Wii file system is present and show an icon for it (*)
  • Detect if the Linux RomFS file system is present and show an icon for it (*)
  • Detect if the Unix/Linux JFS file system is present and show an icon for it (*)
  • Detect if the Unix/Linux ZFS file system is present and show an icon for it (*)
  • Detect if the Unix/Linux Minix file system is present and show an icon for it (*)
  • Detect if the Linux BtrFS file system is present and show an icon for it (*)
  • Detect if the Linux SquashFS file system is present and show an icon for it (*)
  • Detect if the Linux CramFS file system is present and show an icon for it (*)
  • Detect if the Linux BeFS (BFS) file system is present and show an icon for it (*)
  • Detect if the Microsoft ReFS file system is present and show an icon for it (*)
  • New and much faster way to find deleted files and folders in an NTFS file system
  • (*) Full exploration of this file system is not implemented but now an investigator can see if it is present
  • Improvements:
  • Extra tests to make sure a child folder doesn't have subfolders that are a parent folder, creating circular links, in buggy or recovered file systems
  • Added a 'Paranoid mode' when creating managing IBP/IBQ image files, to make sure all data is flushed to the destination without system caching, and structures are updated regularly
  • Allow to complete a managed image file from media of which the layout doesn't fully match, but the risk is manageable [Professional]
  • Allow to complete a managed image file from another non-managed image file [Professional]
  • Improved speed when updating the IBP managed image file
  • Added various extraction type switches via the command line: /ET: A, IBP, WAV, RAW, R2U, RUN, DLL
  • Added new file system switches via the command line: /EF: see the various newly implemented file systems
  • Added Pinnacle Studio mastered DVDs to the IFO/VOB recognition sequence ("PCLE UDFLib")
  • Added ability (via right mouse click) to see the properties-window-text as text in a memo field (for easy copy and paste)
  • Support for underscores in function names in the libewf.dll, so that Borland bcc32 built dlls can be used as well
  • Always display FileName:StreamName, with or without [ADS] appended, for NTFS Alternate Data Streams
  • Removed registration dialog nag when doing a surface scan on BD media
  • Improvements in the Extract From-To functionality, dialog and warnings
  • Make sure testing for encrypted partitions only happens once, not every time the visual node is created (e.g. when switching devices in GUI)
  • Do not read extra blocks to test for partition encryption if there are enough cached blocks
  • Updated the 'Agent' string when doing an online query, to check for a new version, to be more compatible with modern servers and systems
  • Reverse the order of AVDP parsing, LBA 512 first rather than 256 first, in case of a CeQuadrat made UDF disc, to deal with CeQuadrat UDF bugs
  • Get the proper volume name for CeQuadrat made UDF CD-R discs
  • After an image file has been made, save its filename to the recently opened image files, so that it can be opened immediately from the recent image files' list
  • Improved .GI image file interpretation, specifically improvements in finding the header size
  • Show files and folders with the System property in another color
  • Show special files, file entries that are not used in the classical way by Unix/Linux file systems, in another color
  • Show Windows overlay icons and add the shortcut overlay icon to EXT symbolic link files
  • Added checkbox to options to uncheck using CD-Text in filenames, when audio tracks are extracted
  • The file-exists dialog now also allows to auto-rename a file, instead of over-writing or ignoring the file (non-Windows file systems allow duplicate but caps-sensitive names in the same folder)
  • New dialog to auto-rename filenames that are illegal in Windows but OK in other non-Windows file systems
  • Auto-rename folders, during extraction, when they contain illegal Windows-filename characters or a Windows-reserved file/folder name.
  • Show Endianess in UFS, XFS, ISO and SquashFS and other File System properties
  • Improvements in drag&drop functionality and the use of the temporary folder. Better clean-up afterwards
  • Possibility to always get the RETRY SELECT ABORT error dialog (instead of RETRY OMMIT ABORT) on file extraction
  • Various improvements, changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality
  • Various GUI improvements
  • Fixes:
  • Fixed GUI issue that caused incorrect values to be displayed in certain error messages
  • Fixed possible hang when EWF image files are loaded
  • Fixed that sometimes the sanitizing part after finding missing files and folders on a FAT volume could take 'forever', due to bad FAT records
  • Fixed data-corruption issue, introduced in 3.5, while extracting files with more than 10 extents (fragments would be extracted in the wrong order)
  • Fixed it so that when an IBP/IBQ is made twice in a row from the same media (without a refresh) the bitmap is still fully written out to the IBP
  • Avoid exception error on bad IBP without (enough) bitmap data (rare test case)
  • Fixed extraction of named streams of an NTFS folder (not file)



Changes for v3.4 - v3.5

  • Changes / New:
  • 64-bit sector addressing so that we can properly show, extract and support any partition, file, folder or file system above the 2TB boundary
  • Most objects (files, folders etc), despite the 64-bit address instead of the 32-bit address, now use less memory because of intense work and serious optimizations
  • Saving and updating of managed image files, especially for huge drives, is considerably made faster, and yet kept backwards compatible
  • Ability to load a generic image file (*.iso, *.dks, *.flp) with specified properties on the command line: /IPROP:header|blocksize (e.g. /IPROP:100|2048)
  • Ability to extract CD segments as *.WAV file (Gives you the power to wrap any raw CD data in WAVE RIFF headers)
  • Improvements:
  • A plethora of improvements to properly 'guess' the size of an El Torito boot image on CD or DVD, in case that information is not present in the data structures
  • Show how the size was determined in the Boot Image file Properties window
  • Improvements to try an find FAT file systems inside Boot Images on CD and DVD
  • Implemented ability to (via right mouse click) find a matching file for a Boot Image and use that file's size properties
  • Changed 'Last LBA' display to take the last block of the last extent that actually has a size (in case the last one(s) ha(s)(ve) no size)
  • A great number of improvements and workarounds to deal with CD-i discs that have audio and data combined in one track. Because it is an illegal state many drives return unexpected data for such discs
  • Save the status more often while making or completing managed image files. More saves as more problems are encountered
  • Display the address where the process 'Completing IBP/IBQ Image' was aborted in the 'test and complete managed image files' dialog.
  • Ability to create one big IBQ file instead of ~1GB (or otherwise defined) sized IBQ files (will only work on NTFS volumes)
  • The From-To dialog can now also extract *.WAV (via checkbox) from CD
  • Extracting an audio track to WAV or BIN/ISO will now happen including the pre-gap of the next audio track, default set in options
  • Work around Windows issue with downloaded CHM files by removing the "Zone Identifier" stream from the CHM file that was added by Windows after download.
  • Memory and speed improvements in the management of the erroneous-sectors-bitmap
  • Various other smaller GUI improvements
  • Fixes:
  • Show the correct Last LBA for an Audio track
  • GUI fix that properly shows what track is being completed during the completion of a managed IBP/IBQ image file
  • Not all orphaned UDF folders would be found during a "find missing files and folders" in certain situations (bug introduced in IsoBuster 3.2)



Changes for v3.4 - v3.5 Beta

  • We're very proud to announce yet another great release of IsoBuster. IsoBuster 3.5 is currently in Beta phase, but it's a stable and nicely working version. We encourage you to try it and let us know if you notice something out of the ordinary. The most important new feature, that took the most time to implement, and has the highest impact, is 64 bit addressing, so that we now can address 512-byte sectors over the 2TB boundary. In other words, Hard Drives over 2TB (3TB, 4TB, 6TB and so on) are now properly supported, but there is more:
  • Here's a list of all the goodies:
  • Changes / New:
  • 64-bit sector addressing so that we can properly show, extract and support any partition, file, folder or file system above the 2TB boundary
  • Most objects (files, folders etc), despite the 64-bit address instead of the 32-bit address, now use less memory because of intense work and serious optimizations
  • Saving and updating of managed image files, especially for huge drives, is considerably made faster, and yet kept backwards compatible
  • Ability to load a generic image file (*.iso, *.dks, *.flp) with specified properties on the command line: /IPROP:header|blocksize (e.g. /IPROP:100|2048)
  • Ability to extract CD segments as *.WAV file (Gives you the power to wrap any raw CD data in WAVE RIFF headers)
  • Improvements:
  • A plethora of improvements to properly 'guess' the size of an El Torito boot image on CD or DVD, in case that information is not present in the data structures
  • Show how the size was determined in the Boot Image file Properties window
  • Improvements to try an find FAT file systems inside Boot Images on CD and DVD
  • Implemented ability to (via right mouse click) find a matching file for a Boot Image and use that file's size properties
  • Changed 'Last LBA' display to take the last block of the last extent that actually has a size (in case the last one(s) ha(s)(ve) no size)
  • A great number of improvements and workarounds to deal with CD-i discs that have audio and data combined in one track. Because it is an illegal state many drives return unexpected data for such discs
  • Save the status more often while making or completing managed image files. More saves as more problems are encountered
  • Display the address where the process 'Completing IBP/IBQ Image' was aborted in the 'test and complete managed image files' dialog.
  • Ability to create one big IBQ file instead of ~1GB (or otherwise defined) sized IBQ files (will only work on NTFS volumes)
  • The From-To dialog can now also extract *.WAV (via checkbox) from CD
  • Extracting an audio track to WAV or BIN/ISO will now happen including the pre-gap of the next audio track, default set in options
  • Work around Windows issue with downloaded CHM files by removing the "Zone Identifier" stream from the CHM file that was added by Windows after download.
  • Memory and speed improvements in the management of the erroneous-sectors-bitmap
  • Various other smaller GUI improvements
  • Fixes:
  • Show the correct Last LBA for an Audio track
  • GUI fix that properly shows what track is being completed during the completion of a managed IBP/IBQ image file



Changes for v3.4 Beta - v3.4

  • Changes:
  • IsoBuster now also provides access to logical drives (C: D: etc.) instead of only Physical drives (see options). This gives access to Windows volumes. So on a higher level, which means that drivers can translate the data first before IsoBuster gets it. This is particularly useful in case of encrypted volumes, for instance TrueCrypt mounted volumes
  • Dialog for experts with a [Professional] license to work with, test and complete managed image files ?Once an IBP file is loaded, right mouse click the drive-selection control in the left corner and choose "Change or Test managed Image File Properties (Expert)"
  • - Count the amount of errors inside a specified range
  • - Change the status of an area
  • - Complete the image file inside a range
  • Command line parameters /CI: /RANGE: /FROMTO: and /EP:NPC to complete a managed image file, inside a range or not
  • Ability to create an empty IBP/IBQ file set (no actual reads executed) via /ET:E to allow investigators to complete regions via /CI: and /RANGE: or /FROMTO:
  • Allow managed image files to be completed at the end with dummy data if the input drive is "*" (/D:*)
  • Implemented ability to reverse read (during extraction), using a given range
  • Ability to reverse read via command line parameter: /RR:[Interval]
  • Detect if the Linux EXT(2-4) file system is present and show an icon for it (exploration of EXT itself is not implemented but now an investigator knows it's present)
  • Detect if the Unix UFS(1-2) file system is present and show an icon for it (exploration of UFS itself is not implemented but now an investigator knows it's present)
  • Detect if the Linux Reiser(1-4) file system is present and show an icon for it (exploration of Reiser itself is not implemented but now an investigator knows it's present)
  • Detect if the Unix XFS(1-4) file system is present and show an icon for it (exploration of XFS itself is not implemented but now an investigator knows it's present)
  • Ability to load an additional LibEWF.dll next to the already present, embedded, libewf-20130416 version. A libewf.dll and its dependables need to be put in the /plugins/ folder
  • IsoBuster will now always first try to load the dynamic version (assumed to be more recent) before falling back on the embedded libewf-20130416 version. The embedded version may be removed over time to reduce the size again, we'll see
  • New option that defines how strict surface scanning is and whether there should be an abort after an error
  • Improvements:
  • Improved device naming if Inquiry fails
  • Improved determination of HD vs USB stick/Flash etc.
  • Improved user feedback while cleaning up (sanitising) NTFS so that the user has an idea about where the process is
  • Create sparse files when extracting sparse files and no filters are in use for that file
  • Ability to drag files to IsoBuster's TreeView, to open as image file, when IsoBuster is running in an elevated state
  • Popup warning when extracting from the ISO9660 file system, when other better file systems are present
  • Support for the *.image disk file format
  • Show attributes for Tracks, Sessions and Partitions in ListView (instead of N/A)
  • Fixed it so that HDs larger than 2 TB are seen as 2 TB instead of less, so that at least that space can be fully adressed and explored
  • Rewrote the automatic skipping and retry-count reducing mechanism, during extraction of a managed image file, to perform much better
  • Allow in the filename, in case an image is extracted via the command line
  • Dependency on cc3250.dll for old Win2K OS in combination with multi-language support has been removed
  • You can now always choose the installation folder. Before this was dependant on previous installations
  • Show the object Type, cfr. Windows, in the ListView (for instance "JPG file") and allow to sort this new column (column may be hidden by default, right mouse click the ListView columns to enable)
  • Added more sort options that will be performed right after the low level file system / folder exploring is done
  • Various other smaller GUI improvements
  • Fixes:
  • Fixed an exception error that happened if auto-folder-scanning was interrupted by closing the application
  • Fixed an issue that could cause the last part of Video not to be saved to a file, when this video was being filtered via: "Extract but filter only MPG frames"



Changes for v3.3 - v3.4 Beta

  • Changes:
  • IsoBuster now also provides access to logical drives (C: D: etc.) instead of only Physical drives (see options). This gives access to Windows volumes. So on a higher level, which means that drivers can translate the data first before IsoBuster gets it. This is particulary useful in case of encrypted volumes, for instance TrueCrypt mounted volumes
  • Dialog for experts with a [Professional] license to work with, test and complete managed image files ?Once an IBP file is loaded, right mouse click the drive-selection control in the left corner and choose "Change or Test managed Image File Properties (Expert)"
  • Count the amount of errors inside a specified range
  • Change the status of an area
  • Complete the image file inside a range
  • Command line parameters /CI: /RANGE: /FROMTO: and /EP:NPC to complete a managed image file, inside a range or not
  • Ability to create an empty IBP/IBQ file set (no actual reads executed) via /ET:E to allow investigators to complete regions via /CI: and /RANGE: or /FROMTO:
  • Allow managed image files to be completed at the end with dummy data if the input drive is "*" (/D:*)
  • Implemented ability to reverse read (during extraction), using a given range
  • Ability to reverse read via command line parameter: /RR:[Interval]
  • Detect if the Linux EXT(2-4) file system is present and show an icon for it (exploration of EXT itself is not implemented but now an investigator knows it's present
  • Detect if the Unix UFS(1-2) file system is present and show an icon for it (exploration of UFS itself is not implemented but now an investigator knows it's present
  • Detect if the Linux Reiser(1-4) file system is present and show an icon for it (exploration of Reiser itself is not implemented but now an investigator knows it's present
  • Detect if the Unix XFS(1-4) file system is present and show an icon for it (exploration of XFS itself is not implemented but now an investigator knows it's present
  • Ability to load an additional LibEWF.dll next to the already present, embedded, libewf-20130416 version. A libewf.dll and its dependables need to be put in the /plugins/ folder
  • IsoBuster will now always first try to load the dynamic version (assumed to be more recent) before falling back on the embedded libewf-20130416 version. The embedded version may be removed over time to reduce the size again, we'll see
  • New option that defines how strict surface scanning is and whether there should be an abort after an error
  • Improvements:
  • Improved device naming if Inquiry fails
  • Improved determination of HD vs USB stick/Flash etc.
  • Improved user feedback while cleaning up (sanitising) NTFS so that the user has an idea about where the process is
  • Create sparse files when extracting sparse files and no filters are in use for that file
  • Ability to drag files to IsoBuster's TreeView, to open as image file, when IsoBuster is running in an elevated state
  • Popup warning when extracting from the ISO9660 file system, when other better file systems are present
  • Support for the *.image disk file format
  • Show attributes for Tracks, Sessions and Partitions in ListView (instead of N/A)
  • Fixed it so that HDs larger than 2 TB are seen as 2 TB instead of less, so that at least that space can be fully adressed and explored
  • Rewrote the automatic skipping and retry-count reducing mechanism, during extraction of a managed image file, to perform much better
  • Allow in the filename, in case an image is extracted via the command line
  • Dependency on cc3250.dll for old Win2K OS in combination with multi-language support has been removed
  • You can now always choose the installation folder. Before this was dependant on previous installations
  • Show the object Type, cfr. Windows, in the ListView (for instance "JPG file") and allow to sort this new column (column may be hidden by default, right mouse click the ListView columns to enable)
  • Added more sort options that will be performed rigt after the low level file system / folder exploring is done
  • Various other smaller GUI improvements
  • Fixes:
  • Fixed an exception error that happened if auto-folder-scanning was interrupted by closing the application
  • Fixed an issue that could cause the last part of Video not to be saved to a file, when this video was being filtered via: "Extract but filter only MPG frames"



Changes for v3.3 Beta - v3.3

  • Changes:
  • Added "Extract but filter Mpg" for all files, not just mpeg1 filtering of *.dat files on VCD. If you extract a *.VOB file from a DVD this way you end up with a perfect mpeg2 *.mpg file. See DVDVob2Mpg for more information
  • Detect Encrypted partitions on which no file-systems can be found (for instance encrypted with TrueCrypt)
  • Implemented certain shell commands. Right mouse click on an optical drive will show "investigate with IsoBuster". IsoBuster is added to the list of programs that is available via "Open with"
  • Improvements:
  • The toolbar installation is unchecked by default, so that people who don't read and just install, don't get the toolbar. Seems like a good compromise.
  • FAT Improvement. Test the backup BPB as well, even if the primary BPB is readable and seems ok, and next decide on the best one to use.
  • FAT Improvement. No read-ahead anymore of the FAT. On large volumes this can be time consuming and the FAT records may even not be in use
  • Deal smarter with huge FATs, suppress warning message and don't load in memory all at once
  • Better error display instead of the horrific and way too generic Borland C++ Builder 'EEFFACE' message for C++ exceptions
  • Avoid Nikon *.nef files being found as Kodak *.kdc files
  • Suppress Windows 2000 dialog when there is no floppy in the drive and the drive is being scanned
  • Implemented the ability to detect a floppy drive for what it really is even if there is no floppy in the drive. Before it was not possible to detect a floppy drive properly if it had no disk inside.
  • Scan the full drive letter range A - Z in search of floppy drives, instead of just A and B, now that they can be detected more reliable
  • Small speed improvements here and there, trying to serve results faster when and where possible.
  • Improvements in finding the proper recordings' names on edited DVD-VR discs
  • Improvements to deal with bad (non-windows compatible) file names
  • Improvement in building FAT long file names from corrupted directory tables with wrong checksums
  • Improvement to detect UDF on a CD-R with incorrect track layout
  • Remove certain dialogs with questions during startup for very new users (no prior install), to not confuse them. Use the best Exploration settings instead
  • Updated LibEWF support to libewf-20130416
  • Show compressed folders blue in the Treeview (left pane), not just the ListView (right pane)
  • Show encrypted files and folders green in both left and right pane
  • Show encrypted partitions green in both left and right pane
  • Show "Sparse" for LastLBA in case the object (or last extent) is Sparse
  • Show an empty block and do not read block 0 in case the object is sparse during a SectorView
  • When an NTFS extent is extracted on its own ([Professional] license) and when that extent is a compressed part of a compressed file, then it's decompressed on the fly as well
  • Various other smaller GUI improvements
  • Fixes:
  • On Windows 2000 an error dialog was shown (sometimes) when another language was selected because of a change in the language resource dlls in previous version. All fixed now.
  • Fixed NTFS issue, probably only seen on large volumes (Terabytes). Fragmented MFT files were not always properly seen as such, so that parts or even the root of the file system could not be found.
  • Fixed FAT issue on large FAT volumes that are formatted by other software than Windows itself. In other words an improvement to deal with unexpectedly huge FATs
  • Fixed obscure and rare EEFFACE error while selecting objects
  • Fixed Uninstallation error "Runtime Error (...): Could not call proc."



Changes for v3.2 - v3.3 Beta

  • Changes:
  • Added "Extract but filter Mpg" for all files, not just mpeg1 filtering of *.dat files on VCD. If you extract a *.VOB file from a DVD this way you end up with a perfect mpeg2 *.mpg file. See DVDVob2Mpg for more information
  • Detect Encrypted partitions on which no file-systems can be found (for instance encrypted with TrueCrypt)
  • Implemented certain shell commands. Right mouse click on an optical drive will show "investigate with IsoBuster". IsoBuster is added to the list of programs that is available via "Open with"
  • Improvements:
  • The toolbar installation is unchecked by default, so that people who don't read and just install, don't get the toolbar. Seems like a good compromise.
  • FAT Improvement. Test the backup BPB as well, even if the primary BPB is readable and seems ok, and next decide on the best one to use.
  • FAT Improvement. No read-ahead anymore of the FAT. On large volumes this can be time consuming and the FAT records may even not be in use
  • Deal smarter with huge FATs, suppress warning message and don't load in memory all at once
  • Better error display instead of the horrific and way too generic Borland C++ Builder 'EEFFACE' message for C++ exceptions
  • Avoid Nikon *.nef files being found as Kodak *.kdc files
  • Suppress Windows 2000 dialog when there is no floppy in the drive and the drive is being scanned
  • Implemented the ability to detect a floppy drive for what it really is even if there is no floppy in the drive. Before it was not possible to detect a floppy drive properly if it had no disk inside.
  • Scan the full drive letter range A - Z in search of floppy drives, instead of just A and B, now that they can be detected more reliable
  • Small speed improvements here and there, trying to serve results faster when and where possible.
  • Improvements in finding the proper recordings' names on edited DVD-VR discs
  • Improvements to deal with bad (non-windows compatible) file names
  • Improvement in building FAT long file names from corrupted directory tables with wrong checksums
  • Improvement to detect UDF on a CD-R with incorrect track layout
  • Remove certain dialogs with questions during startup for very new users (no prior install), to not confuse them. Use the best Exploration settings instead
  • Updated LibEWF support to libewf-20130416
  • Show compressed folders blue in the Treeview (left pane), not just the ListView (right pane)
  • Show encrypted files and folders green in both left and right pane
  • Show encrypted partitions green in both left and right pane
  • Show "Sparse" for LastLBA in case the object (or last extent) is Sparse
  • Show an empty block and do not read block 0 in case the object is sparse during a SectorView
  • When an NTFS extent is extracted on its own ([Professional] license) and when that extent is a compressed part of a compressed file, then it's decompressed on the fly as well
  • Various other smaller GUI improvements
  • Fixes:
  • On Windows 2000 an error dialog was shown (sometimes) when another language was selected because of a change in the language resource dlls in previous version. All fixed now.
  • Fixed NTFS issue, probably only seen on large volumes (Terabytes). Fragmented MFT files were not always properly seen as such, so that parts or even the root of the file system could not be found.
  • Fixed FAT issue on large FAT volumes that are formatted by other software than Windows itself. In other words an improvement to deal with unexpectedly huge FATs
  • Fixed Uninstallation error "Runtime Error (...): Could not call proc."



Changes for v3.1 - v3.2

  • Changes:
  • Support for ExFAT.
  • Find deleted NTFS files and folders during a scan for missing files and folders.
  • Implemented a "Find deleted files and folders" option, when an NTFS file-system is selected. This is a much faster scan if you're only interested in finding deleted files and folders in an NTFS file-system.
  • Support for FATX
  • Support for XISO / XDVDFS
  • Extended Master Boot Record (EMBR) support.
  • BSD partitions support.
  • Improvements:
  • Further improved the UAC experience by tweaking and fixing issues. The experience is still the same as described in previous release.
  • Remove duplicate partitions (for instance when there's a GPT but the MBR fields still point to valid partitions as well).
  • Ways to dump all sectors that are being read to log files (for debug purposes) (support for *.ibdat and *.ibadr).
  • Added .bkf file type recognition to the file-signature scan.
  • Further improved the ListView Columns' drag behaviour by working around (Builder) VCL limits/bugs.
  • An NTFS file also gets the Sparse property now when it's not fragmented (and not only when its extents are sparse)
  • Display the File's start LBA for a sparse file, except when the first extent is sparse, then "Sparse" is displayed
  • Added Full Path(s) and Start and Finish processing time to the MD5 file (as comments).
  • Ability (set via options) to store and restore the position of the main form (instead of always centered).
  • Added *.dd to the supported image files.
  • Recognize EXT SuperBlock when trying to determine the blocksize of an image (for instance a Linux made .dd file with an EXT1,2,3 or 4 file-system).
  • Improved handling of NTFS MFT embedded files during the scan for missing files based on their signature
  • Various improvemens to reduce false positives during scanning for missing files and folders.
  • Various other smaller GUI improvements
  • Fixes:
  • Not all *.png files were found during a scan for missing files and folders (bug introduced in version 3.1).
  • Mac HFS file systems with large fragmented files (more than 8 extents) could trigger a program crash.
  • In rare cases not all files and/or folders of an NTFS folder were found, if that folder was described in both the MFT record and via INDX records.
  • Sometimes too small files were created, when they were fully sparse (one extent, sparse (= all zeroes) (NTFS).
  • Fixed it so that the progress bar also changes color (red) in case of errors, during a scan for missing files and folders
  • Show the last LBA in case of compressed files
  • Fixed one more exception error that could occur while scanning for lost files and folders, due to buggy MS Office documents detection code.



Changes for v3.1 Beta - v3.1

  • With media growing larger and larger, and data sets getting bigger and bigger, certain processes were starting to get slow or were consuming too much memory. A great deal of effort was put in to making IsoBuster faster and less memory dependant in this version. Especially when dealing with, and scanning for missing files and folders, on large media. This new version also includes a good range of improvements and bug fixes, better progress indication on Windows 7 and higher, better dealing with the UAC etc.
  • Here's a list of things we have been working on:
  • Changes:
  • On Windows VISTA and higher, if you do not run in admin mode by default (UAC not disabled) you get the UAC (User Account Control) popup each time when you start IsoBuster. This is because admin rights are required to talk to Hard Drives and USB/Flash drives etc. However, in this version, if you disable listing Hard Drives and Flash drives in Options or during install, then you don't get the UAC anymore. The same is true when you run the shell command "extract" or when you start IsoBuster with command line parameters /nodrives or /nohd.
  • Support for GPT (GUID) Partition formatting
  • Also list empty card readers etc. when detected. Insert a card, hit refresh, and IsoBuster will show the content, like it does on optical media
  • Windows 7 (and higher) progress indication via the taskbar
  • Added the ability to choose how the VIDEO_TS\VTS_0x_0x.VOB file size is determined in the VIDEO file-system (Via Options)
  • Implemented extra columns in Listview (Blocks, Offset, Last LBA, Attributes)
  • List unallocated space as a hidden partition, provided it has a reasonable size
  • File signature recognition for *.cr2 (Canon photo format)
  • Improvements:
  • Improvements for Floppy/Diskette detection
  • Improvements for finding NTFS file systems (for instance when there's no partition data to start from)
  • Try to guess the correct code page of CD-Text on an Audio CD based on its Language field
  • Allow columns order to be changed
  • Popup to enable/disable columns
  • Store new column order, width, hidden etc.
  • Which column is sorted, and in what direction, is now shown properly
  • Once a column header is clicked to sort, that sorting order is also applied to every other folder you browse to
  • Various speed and memory allocation improvements throughout the code, noticeable during all sorts of functions.
  • Always use code page 10000 when parsing HFS, this improves special characters display such as the small TM in the top corner
  • Improvements in the detection between optical and other type media image files with shared extensions (e.g. .img)
  • Removed older Win9x / NT4 / Aspi related settings from Options / Communication
  • Introduced ability to start IsoBuster with only optical / only other than optical / both or none at all.
  • Added command line switches: /nocd and /nohd
  • Improved scanning for lost files and folders by reducing false positives for certain FAT and UDF structures
  • Exposed more settings via Options / GUI / Messages, for which a popup occured but no way to change it again existed
  • Various other smaller GUI improvements
  • Fixes:
  • Fixed a possible exception error when scanning for lost files and folders on +VR discs
  • Fixed several excpetion errors that could occur while scanning for lost files and folders, due to buggy MS Office documents detection code.
  • Fixed issue that would prevent ibp images files of other-than-optical media to be accessed properly at all times, because space outside the partitions would stay hidden.
  • Fixed issue that caused an extended partition to be shown as well even though it contained other partitions
  • Fixed issue that sometimes prevented IsoBuster to see all partitions
  • Fixed it so that partitions are sorted, since the partition table may not be sorted
  • Fixed issue causing multi-session optical discs not to produce correct image files all the time.
  • Fixed rare exception errors when opening certain image files where IsoBuster needed to detect optical vs. HD/Flash etc.
  • Fixed rare stack overflow error when deleting a file.
  • Fixed rare exception error when the 'Default' button is clicked in Options



Changes for v2.8.5 - v3.0

  • I am glad to be able to announce the final 3.0 version release of an exciting new IsoBuster. Excited because this new version, besides optical media (CD, DVD and BD) now also supports Flash drives, Media cards of all sorts and makes, Jaz, Zip, Floppy drives, Hard Drives etc. To top it of, there is now also brand new NTFS support !
  • To try and pour it in a list, here are the newly supported disks / drives:
  • Thumb / Flash drives
  • SD disks / drives
  • Compact disks / drives
  • MMC disks / drives
  • SSD disks / drives
  • Jaz disks / drives
  • Zip disks / drives
  • Floppy disks / drives
  • HD disks / drives
  • And more ...
  • And here's the newly supported File System:
  • NTFS
  • On optical media (CD, DVD, BD) we are accustomed to the concept of Sessions and Tracks. On all these newly supported disks, logical volumes (file-systems) are put into Partitions, not Sessions. IsoBuster supports, just like you were used to with Sessions using IsoBuster:
  • All Windows / DOS / Macintosh / HFS Partitions are immediately shown
  • All the file-system(s) in those partitions are immediatly shown
  • You can use all the features you normally would use on tracks and sessions, but now on partitions.
  • You can do data recovery pretty much the exact same way as on optical
  • Forensics investigators will love the easy overview of all partitions and all file systems
  • See sector per sector content with Sector View
  • Extract portions of the media
  • Support for UDF, FAT, NTFS, HFS(+) on any partition
  • Etc.



Changes for v2.9 Beta - v2.9.2 Beta

  • the newly supported disks / drives:
  • Thumb / Flash drives
  • SD disks / drives
  • Compact disks / drives
  • MMC disks / drives
  • SSD disks / drives
  • Jaz disks / drives
  • Zip disks / drives
  • Floppy disks / drives
  • HD disks / drives
  • And more ...
  • And here's the newly supported File System:
  • NTFS



Changes for v2.8.5 - v2.9 Beta

  • I am glad to be able to announce the beta version release of an exciting new IsoBuster. Excited because this new version, besides optical media (CD, DVD and BD) now also supports Flash drives, Media cards of all sorts and makes, Jaz, Zip, Floppy drives, Hard Drives etc. To top it of, there is now also brand new NTFS support !
  • To try and poor it in a list, here are the newly supported disks / drives:
  • Thumb / Flash drives
  • SD disks / drives
  • Compact disks / drives
  • MMC disks / drives
  • SSD disks / drives
  • Jaz disks / drives
  • Zip disks / drives
  • Floppy disks / drives
  • HD disks / drives
  • And more ...
  • And here's the newly supported File System:
  • NTFS
  • On optical media (CD, DVD, BD) we are accustomed to the concept of Sessions and Tracks. On all these newly supported disks, logical volumes (file-systems) are put into Partitions, not Sessions. IsoBuster supports, just like you were used to with Sessions using IsoBuster:
  • All Windows / DOS / Macintosh / HFS Partitions are immediately shown
  • All the file-system(s) in those partitions are immediatly shown
  • You can use all the features you normally would use on tracks and sessions, but now on partitions.
  • You can do data recovery pretty much the exact same way as on optical
  • Forensics investigators will love the easy overview of all partitions and all file systems
  • See sector per sector content with Sector View
  • Extract portions of the media
  • Support for UDF, FAT, NTFS, HFS(+) on any partition
  • Etc.



Changes for v2.8.4 Beta - v2.8.5

  • Changes:
  • A great deal of new extensions were added to the signature detection which happens during a search for missing files and folders. Besides a large number of various files, picture formats and multimedia files there's now also accurate detection of documents such as: *.wpd, *.sdw, *.odt, *.sxw, *.sxc, *.sxi, *.sxm, *.std, *.ott, *.ots, *.ods, *.odb, *.odg, *.odf, *.odp, *.wb2, *.nsf, *.max and most Office document formats, such as *.doc, *.docx, *.xls, *.xlsx, *.ppt, *.pptx, *mdb, *.pst, *.pub, *.vsd, *.rtf, *.db, *.one, *.wri, *.msi
  • Command line support has been enhanced with a large number of new parameters and combinations. Besides initiating "/scan" and extracting the files found based on their signature "sig:" there is now also the possibility to extract "all:" tracks / sessions / file systems, dynamically change the names of the extract-to files or folders, export file-lists ("/tree") based on a number of parameters/ tokens etc. Best check the details in the help file for more information
  • Improvements:
  • UDF scan for missing files improvements, so that in case of many references to VAT tables not the same sectors are read again and again, and so that duplicate UDF FS are not listed anymore
  • Updated EWF support to the latest and greatest status of the LibEWF project
  • Ability to "OK to all" on Windows IO errors during extraction to avoid X amount of such dialogs when multiple files are processed
  • Always display a message after a forced online check, even if it is the most recent version, and even if the user set not to display beta or final version warnings
  • The cue file full path was displayed in the Save Dialog control instead of only the filename.
  • Ability to build lists, showing the extents of fragmented files. [Business] feature.
  • Various other GUI improvements
  • Fixes:
  • Small issue that caused some DVD IBP/IBQ images to be recognised as CD, so that they could not be completed anymore
  • Small issue that caused some IBP/IBQ images with gaps to be reported without gaps
  • Fixed a very rare crash caused by a buggy UDF file system, while scanning for missing files and folders.
  • The md5 file was not put in the proper folder when set to create automatically after image file creation.
  • Fixed issue that caused the last found file, based on its signature, to be one block short in length.
  • Fixed exception error when trying to sort file extents.
  • Fixed extremely rare offset error in image files accessed via CUE or IBP, when the first track doesn't start at address 0



Changes for v2.8 - v2.8.4 Beta

  • Changes:
  • A great deal of new extensions were added to the signature detection which happens during a search for missing files and folders. Besides a large number of various files, picture formats and multimedia files there's now also accurate detection of documents such as: *.wpd, *.sdw, *.odt, *.sxw, *.sxc, *.sxi, *.sxm, *.std, *.ott, *.ots, *.ods, *.odb, *.odg, *.odf, *.odp, *.wb2, *.nsf, *.max and most Office document formats, such as *.doc, *.docx, *.xls, *.xlsx, *.ppt, *.pptx, *mdb, *.pst, *.pub, *.vsd, *.rtf, *.db, *.one, *.wri, *.msi
  • Command line support has been enhanced with a large number of new parameters and combinations. Besides initiating "/scan" and extracting the files found based on their signature "sig:" there is now also the possibility to extract "all:" tracks / sessions / file systems, dynamically change the names of the extract-to files or folders, export file-lists ("/tree") based on a number of parameters/ tokens etc. Best check the details in the help file for more information
  • Improvements:
  • UDF scan for missing files improvements, so that in case of many references to VAT tables not the same sectors are read again and again, and so that duplicate UDF FS are not listed anymore
  • Updated EWF support to the latest and greatest status of the LibEWF project
  • Ability to "OK to all" on Windows IO errors during extraction to avoid X amount of such dialogs when multiple files are processed
  • Always display a message after a forced online check, even if it is the most recent version, and even if the user set not to display beta or final version warnings
  • The cue file full path was displayed in the Save Dialog control instead of only the filename.
  • Various other GUI improvements
  • Fixes:
  • Small issue that caused some DVD IBP/IBQ images to be recognised as CD, so that they could not be completed anymore
  • Small issue that caused some IBP/IBQ images with gaps to be reported without gaps
  • Fixed a very rare crash caused by a buggy UDF file system, while scanning for missing files and folders.
  • The md5 file was not put in the proper folder when set to create automatically after image file creation.
  • Fixed issue that caused the last found file, based on its signature, to be one block short in length.



Changes for v2.8 Beta - v2.8

  • Changes:
  • Plugin support for IsoBuster: Opening image files
  • Plugin support for IsoBuster: Creating image files
  • Installing and/or loading plugins via the GUI and command line parameters
  • Support for multi-file CUE sheets & PREGAP directive
  • Wave file support when loading multi-file CUE sheets
  • Support for *.RMG Image files
  • Improvements:
  • Escape sequence in HFS support to deal with HFS bug so that certain HFS file-systems can still be found
  • Add file-extensions only when no file extension is present yet for files in the HFS(+) file system
  • Updated the HFS extensions database
  • Workarounds for buggy ISO9660 file systems created by professional DVD mastering software (affecting commercial DVDs)
  • Improved IFO/VOB file system finding in case of badly mastered Video DVDs
  • Show layer break address
  • Various other GUI improvements
  • Fixes:
  • Fix so that CD-Text is shown again when present in a CDT file (associated to a CUE file)
  • Fix so that the associated CDT file is also MD5'ed when the entire image file is MD5'ed
  • HFS(+) Fix to find additional file extents (>8) that are referenced from the Overflow file.
  • Fixed possibly incorrectly reported size of VIDEO_TS.VOB in the IFO/VOB file system



Changes for v2.7 - v2.8 Beta

  • Changes:
  • Plugin support for IsoBuster: Opening image files
  • Plugin support for IsoBuster: Creating image files
  • Installing and/or loading plugins via the GUI and command line parameters
  • Support for multi-file CUE sheets & PREGAP directive
  • Wave file support when loading multi-file CUE sheets
  • Support for *.RMG Image files
  • Improvements:
  • Escape sequence in HFS support to deal with HFS bug so that certain HFS file-systems can still be found
  • Add file-extensions only when no file extension is present yet for files in the HFS(+) file system
  • Updated the HFS extensions database
  • Workarounds for buggy ISO9660 file systems created by professional DVD mastering software (affecting commercial DVDs)
  • Improved IFO/VOB file system finding in case of badly mastered Video DVDs
  • Show layer break address
  • Various other GUI improvements
  • Fixes:
  • Fix so that CD-Text is shown again when present in a CDT file (associated to a CUE file)
  • Fix so that the associated CDT file is also MD5'ed when the entire image file is MD5'ed
  • HFS(+) Fix to find additional file extents (>8) that are referenced from the Overflow file.
  • Fixed possibly incorrectly reported size of VIDEO_TS.VOB in the IFO/VOB file system



Changes for v2.6 - v2.7

  • Changes:
  • Support for interleaved files in the ISO9660 / Joliet file-system (rare but it can happen)
  • Support for Right to Left reading languages and their optimized language dlls
  • Proper print functionality from the View/Edit text window (formatting, copies, collate etc.)
  • Improvements:
  • Hard coded ignore of drive "HUAWEI Mass Storage" which is a USB modem with CDFS and which returns drive type CDROM, but it behaves badly and causes crashes
  • Implemented *.cwk file-type recognition for found files based on their signature
  • Ctrl-p (Print) and Ctrl-s (Save) implemented in the View/Edit text window
  • Implemented ability to read raw on DVD in [Business] mode when the disc is Blank (some rare drives allow this on readable media without TOC, but they return user data, which is then remapped to raw by IsoBuster)
  • Program start-up speed improved by skipping network drives to avoid long delays
  • Create MD5 of image filename dialog improved
  • Various other GUI improvements
  • Fixes:
  • In rare cases, on Windows OS with particular settings, the program would start with an "Invalid code page" error. This has been fixed
  • Fixed issue that made the online check occur despite the user saying No
  • Fixed it so that the nag screen doesn't show at the first try
  • Fix in CueSheet handling to better deal with image files containing different block sizes per track



Changes for v2.6 Beta - v2.6

  • IsoBuster 2.6 was released today. The main new feature is the complete integration of Unicode in the GUI, which means that you can run the program on any system in any language, but more importantly that you can inspect any language disc or image file on any system. For instance inspect and extract Arabic filenames on an English system. The combinations are endless. Besides this major new feature there are again several new goodies to be checked out, so download and install asap.



Changes for v2.5.5 Beta - v2.5.5

  • Changes:
  • Expert Witness Format image-file support (*.E01, *.S01, *.L01)
  • Improvements:
  • Improved support for Japanese text in DVD-VR Label and Title
  • Implemented *.orf file-type recognition for found files based on their signature
  • Implemented *.ncd file-type recognition for found files based on their signature
  • "Do not bother me with this message" option in message when going online
  • Command line parameters: "/nodrives" and "/nosplash"
  • Improved error message when it's impossible to open or create a file
  • Improved font support in the editor window when displaying text other than sector view
  • Do not prompt to make a CUE file if the actual image file was deleted after errors
  • The Windows shell command "extract" will now start with "/nodrives"
  • Various other GUI improvements
  • Fixes:
  • The program now prompts to overwrite a resource-fork-only file on an NTFS system (rare situation)
  • Fixed double prompt for action when NTFS stream(s) and the main file would contain read errors
  • When tracks are dragged and extracted, but are split into muliple files, all subfiles are now moved as well from the Drag temp folder to the final folder
  • Fixed very rare instance where aborting extraction of a track would cause the next track to be skipped entirely



Changes for v2.5 - v2.5.5 Beta

  • Changes:
  • Expert Witness Format image-file support (*.E01, *.S01, *.L01)
  • Improvements:
  • Improved support for Japanese text in DVD-VR Label and Title
  • Implemented *.orf file-type recognition for found files based on their signature
  • Implemented *.ncd file-type recognition for found files based on their signature
  • "Do not bother me with this message" option in message when going online
  • Command line parameters: "/nodrives" and "/nosplash"
  • Improved error message when it's impossible to open or create a file
  • Improved font support in the editor window when displaying text other than sector view
  • Do not prompt to make a CUE file if the actual image file was deleted after errors
  • The Windows shell command "extract" will now start with "/nodrives"
  • Various other GUI improvements
  • Fixes:
  • The program now prompts to overwrite a resource-fork-only file on an NTFS system (rare situation)
  • Fixed double prompt for action when NTFS stream(s) and the main file would contain read errors
  • When tracks are dragged and extracted, but are split into muliple files, all subfiles are now moved as well from the Drag temp folder to the final folder
  • Fixed very rare instance where aborting extraction of a track would cause the next track to be skipped entirely



Changes for v2.4.0.1 - v2.5 Beta

  • Changes:
  • Support for UDF Named streams in the core engine
  • Ability to extract UDF Named Streams to NTFS Alternate Data streams (default ON)
  • Ability to show UDF Named streams as separate files, for analysis, a [Business] feature
  • Support for UDF System streams (shown in a separate UDF file system)
  • Ability to extract Mac Resource forks (from UDF / HFS or ISO9960) to NTFS Alternate Data streams (default ON)
  • Ability to extract Mac Properties (from UDF / HFS or ISO9960) to NTFS Alternate Data streams (combined with resource forks)
  • Ability to include folder information when creating a File List (Need to enable in Options)
  • Implemented Command Line Parameter "/ep:" to avoid poppups during automated extraction
  • Support for VMWare Hard Drive *.vmdk image files containing FAT
  • Improvements:
  • Improvements to detect and find more FAT partitions
  • Recognition of Dynamic partitions
  • Improved support for *.gi multi-file image files
  • Removed "This is a packet written disc. Errors are not abnormal on this disc" warning for all type discs other than CD
  • "UD.DAT", a typical BD mastering file, is now part of the files that are automatically recognized when opening an image file.
  • Ability to open and support for VMWare Floppy *.flp image files
  • Do NOT prompt and ask if a file should be over-written when going through the temp folder (e.g. drag and drop)
  • Display 8 characters in a File List (e.g. 00000001) instead of 7, because for BD Dual Layer (which can contain up to 50 GB) 8 characters are required
  • Various GUI improvements and changes
  • Fixes:
  • The Toolbar does not change the homepage anymore
  • Fixed extremely rare exception error, seen only on one data set, during the "Find missing files and folders" scan
  • Fixed issue that prevented BD drive write-ability to be detected properly when no BD disc was mounted



Changes for v2.3.0.1 - v2.4

  • FAT12, FAT16 and FAT32 support
  • Show deleted files and folders from the FAT file-system immediately
  • "Find Missing files and folders" now includes finding orphaned FAT folders
  • "Find Missing files and folders" now includes finding FAT partitions
  • Ability to automatically check the boot image file to see if it contains FAT and list its files and folders if available (needs to be turned on in the options)
  • Recognition of BDAV files via their signatures, during a scan for missing files and folders
  • Custom remappping - Jump Offset and Jump Value - Via Options, [Business] feature for professionals
  • Improvements:
  • Ability to show and use only short file-names from the FAT file-system
  • Various options related to mounting and scanning for FAT files and folders
  • Added more file-types to the file recognition by signature functionality
  • Via Windows itself, right click image file "Extract" feature implemented
  • Added *.dsk, *.ima, *.vhd and *.vfd support when opening disk image files (these files, when they contain FAT, will open just fine)
  • Date / Time and Size can now also be exported to a file-list
  • Changed various default options on a system that hasn't had IsoBuster (recent version) installed yet
  • Installer will ask to close IsoBuster when already running to avoid Windows overwrite errors (Installer error 5)
  • Display text in the listview (right pane) when folders are empty to avoid confusion
  • Various other GUI improvements and changes
  • Fixes:
  • Fixed incorrect length for some boot image file-names



Changes for v2.3.0.1 - v2.4 Beta

  • FAT12, FAT16 and FAT32 support
  • Show deleted files and folders from the FAT file-system immediately
  • "Find Missing files and folders" now includes finding orphaned FAT folders
  • "Find Missing files and folders" now includes finding FAT partitions
  • Ability to automatically check the boot image file to see if it contains FAT and list its files and folders if available (needs to be turned on in the options)
  • Recognition of BDAV files via their signatures, during a scan for missing files and folders
  • Custom remappping - Jump Offset and Jump Value - Via Options, [Business] feature for professionals
  • Improvements:
  • Ability to show and use only short file-names from the FAT file-system
  • Various options related to mounting and scanning for FAT files and folders
  • Added more file-types to the file recognition by signature functionality
  • Via Windows itself, right click image file "Extract" feature implemented
  • Added *.dsk, *.ima, *.vhd and *.vfd support when opening disk image files (these files, when they contain FAT, will open just fine)
  • Date / Time and Size can now also be exported to a file-list
  • Changed various default options on a system that hasn't had IsoBuster (recent version) installed yet
  • Installer will ask to close IsoBuster when already running to avoid Windows overwrite errors (Installer error 5)
  • Display text in the listview (right pane) when folders are empty to avoid confusion
  • Various other GUI improvements and changes
  • Fixes:
  • Fixed incorrect length for some boot image file-names



Changes for v2.1 - v2.2

  • Support for command line parameters
  • Support for mkisofs El Torito Patch (boot image)
  • Support for spanned *.dmg image files. (*.dmg, *.002.dmgpart, *.003.dmgpart)
  • Option to specify that extraction of image files is in *.ISO format, rather than *.TAO or *.BIN
  • Image file extraction save dialog, 'save as type' allows to select between *.ISO and *.TAO or *.BIN
  • Ability to hide [Business] features via options.
  • Show file extents. (Show the different parts of a file, when it is fragmented on disc.)
  • Ability to add/edit extents on custom created files (e.g. Lost and Found and Customizable file system)
  • Ability to add a customizable file system (where you can add, edit files, for engineering purposes)
  • Show [xx%] status in task bar at the bottom, during extraction.
  • Improvements for UTF7 and UTF8 interpretation.
  • More progress information is exposed when completing a managed image file.
  • Various smaller GUI improvements, e.g. icons.
  • Various smaller improvements.
  • Turned off message asking to turn on admin rights on a system other than XP.



Changes for v2.1 - v2.2 Beta

  • [All]
  • Support for command line parameters (See help for syntax)
  • Support for mkisofs El Torito Patch (boot image)(Enable in options)
  • Support for spanned *.dmg image files. (*.dmg, *.002.dmgpart, *.003.dmgpart)
  • Option to specify that extraction of image files is in *.ISO format, rather than *.TAO or *.BIN (See options)
  • Image file extraction save dialog, 'save as type' allows to select between *.ISO and *.TAO or *.BIN
  • Ability to hide [Business] features via options.
  • [Business type license]
  • Show file extents. (Show the different parts of a file, when it is fragmented on disc)
  • Ability to add (change) extents on custom created files (e.g. Lost and Found and Customizable file system)
  • Ability to add a customizable file system (where you can add, edit files, for engineering purposes)



Changes for v2.1 Beta - v2.1

  • Added font recognition (e.g. true type) during the scan for missing files based on file signatures.
  • Work around for bad behaving drives that return a start addres other than 0, for the first track on a DVD-R, using certain commands (e.g. seen with LITEON DVD-ROM LTD 163 but can quite possibly also occur with other drives)
  • Work around for bad behaving drives that return a track length of 0, for tracks on DVD-R, using certain commands (e.g. seen with HL-DT-ST GDR8162B (fw 0015) but can quite possibly also occur with other drives)
  • Updates, content and translations, in Help, Installer and Program resources.
  • Various graphical improvements for VISTA. Text cut due to window width, flickering of progress bar etc.
  • Disabled Asynchronous Drag and Drop on VISTA systems again. Sometimes this lead to an error message, the second time a drop was done.
  • Various smaller improvements.
  • Various smaller bugfixes.



Changes for v2.0 - v2.1 Beta

  • Added font recognition (e.g. true type) during the scan for missing files based on file signatures
  • Work around for bad behaving drives that return a start addres other than 0, for the first track on a DVD-R, using certain commands (e.g. seen with LITEON DVD-ROM LTD 163)
  • Work around for bad behaving drives that return a track length of 0, for tracks on DVD-R, using certain commands (e.g. seen with HL-DT-ST GDR8162B (fw 0015))
  • Updates, content and translations, in Help, Installer and Program resources
  • Various graphical improvements for VISTA. Text cut due to window width, flickering of progress bar etc
  • Various smaller improvements
  • Various smaller bug fixes



Changes for v1.9.1 - v2.0

  • BD (Blu Ray) and HD DVD support.
  • UDF 2.6.
  • Implemented the ability to use other system installed code pages, such as MAC, SYMBOL, UTF8 etc., for ISO9660.
  • Properties for drives show, next to CD and DVD, also BD and HD DVD Read and Write capabilities.
  • Installation and IsoBuster.exe are now code signed to make Windows (more or less) happy.
  • Implemented ASynchronous Drag and Drop (file extraction) on VISTA systems to avoid the VISTA over-write dialogue to become stuck under the IsoBuster window, which looks like a hang, but it isn't.
  • VISTA style directory icons when ran on a VISTA system.
  • Start with font Tahoma on XP or Segoe UI on VISTA.
  • Smaller changes here and there.



<<Back to software description