HFS+ Rescue - hfsprescue
Release date for hfsprescue 1.2 stable is planed for end of august 2015. Contact me if you have files that are not recovered to improve the program.
The create file error will be fixed in 1.2 (already done in the test version).
The 1.2 release will have a lot of new features. Strong fragmented files will be supported too (already done in the test version). There will be also a new feature to find the Extents Overflow File.
New test releases will be available in the next days.
2015/07/30: test7 - File name problems fixed. On duplicate files only the latest will be restored. To restore all files (even deleted) use --alternative in step 3. Documentation is not correct for the new test version.
2015/08/04: Release candidate 1 comes tomorrow. I am rewriting this page now.
HFS+ (HFS Plus, Hierarchical File System Plus) is a file system, developed and used by Apple®.
hfsprescue is a linux program. It scans a damaged image file or partition that is formatted with HFS+. You can restore your files and directories, even when it's not possible to mount it with your operating system. Your files and directories will be stored in the directory './restored' in your current directory. The HFS+ file or partition will not be changed. So you need enough space to copy out the files from the HFS+ file system.
hfsprescue supports HFS+ compression (resource fork).
Download latest version
hfsprescue-1.2-test7.tar.gz (2015/07/30) - Latest test version
Recover your files
You have to complete 5 steps to restore your files:
hfsprescue will guide you through every step and is telling you the command for the next step.
5 Steps to complete:
hfsprescue -s1 /dev/sdb1
Searching unicode strings and/or bytes from a file
An additional debug/search feature is to find unicode strings and/or bytes from a file. This can be used to find the file name in a sector with a directory entry. It's also possible to find the bytes of a file. The search mode tells you the location when it finds something. With this information and the infos of fileinfo.txt it is possible to calculate the offset to a partition when there is no valid partition table or boot sector and the start of the partition is unknown.
hfsprescue -fi <device node|image file> [-fs <string>] [-ff <file> <num bytes>]
Additional files created by hfsprescue
Unicode file names
If you have unicode file names and you want to copy the files to a HFS+ or NTFS file system then convert the file names with convmv.
Example: convmv -f iso-8859-1 -t utf8 -r restored/*
I wrote this tool for my neighbour. He was unable to mount the HFS+ partition. He got the error hfs: failed to load catalog file and some other errors about the B-Tree. I was able to restore the most files. Maybe it helps other people too.
© 2015 by Elmar Hanlhofer