Jump to content
Sign in to follow this  
michaelslamet

How to know if partition/hdd was reformatted?

Recommended Posts

michaelslamet

If we format a HDD, the serial number wont change, isn't it?

How do we know if the partition/hdd was reformatted? what was changed by action format? Volume label could be same also with the previous one.

One of my future script need to detect this.

Thank you and have a nice weekend :ILA2:

Share this post


Link to post
Share on other sites
orbs

label and serial number can be changed by format, although not changed by default.

a formatted volume has no files in it, right? that should be indicative enough i think.

if it is your script that is doing the format, it can log it's activity to a network share.

Share this post


Link to post
Share on other sites
michaelslamet

Thank you, orbs :)

My script doesn't do the format.

Except from the empty files (files count), label and serial number, is there any another way to do it?

Maybe something unique like serial number every time we format the hdd/partition? There is no something like that?

Share this post


Link to post
Share on other sites
orbs

 

Maybe something unique like serial number every time we format the hdd/partition? There is no something like that?

 

yes of course, just talk to microsoft, symantec, and practically all software vendors in the world, present and future, i'm sure they'll be happy to change all the formatting utilities to randomize the serial number upon formatting  ;)

why zero file count is not sufficient?

Share this post


Link to post
Share on other sites
michaelslamet

yes of course, just talk to microsoft, symantec, and practically all software vendors in the world, present and future, i'm sure they'll be happy to change all the formatting utilities to randomize the serial number upon formatting  ;)

why zero file count is not sufficient?

 

:*

Because most of the time it's not a pure format, but restore from previous backup/image ghosting

Share this post


Link to post
Share on other sites
Neutro

Hey Michael,

If I were you, I would make a script that would create a fake important file, like "pfs.dll" in "C:\Windows\System32\".

No one will try to delete it because it will seems to be regular Windows DLL.

Then your script can check if the file exists or not.

If it does, then the hard drive did not get format, else it was :)

Share this post


Link to post
Share on other sites
jchd

If the volume is NTFS, create an alternate data stream (ADS) under the root directory. These can be deleted only by reformatting and very few people will notice.

BTW, the volume serial number is a timestamp.


This wonderful site allows debugging and testing regular expressions (many flavors available). An absolute must have in your bookmarks.
Another excellent RegExp tutorial. Don't forget downloading your copy of up-to-date pcretest.exe and pcregrep.exe here
RegExp tutorial: enough to get started
PCRE v8.33 regexp documentation latest available release and currently implemented in AutoIt beta.

SQLitespeed is another feature-rich premier SQLite manager (includes import/export). Well worth a try.
SQLite Expert (freeware Personal Edition or payware Pro version) is a very useful SQLite database manager.
An excellent eBook covering almost every aspect of SQLite3: a must-read for anyone doing serious work.
SQL tutorial (covers "generic" SQL, but most of it applies to SQLite as well)
A work-in-progress SQLite3 tutorial. Don't miss other LxyzTHW pages!
SQLite official website with full documentation (may be newer than the SQLite library that comes standard with AutoIt)

Share this post


Link to post
Share on other sites
BrewManNH

Why does it matter if the drive whether the drive has been formatted or restored from an image? Either way, whatever was on the drive previously is gone and the drive should be empty.

Maybe explain why you need this information and what possible use it could be, because frankly it sounds like you're worried about something and you probably don't need to be.

BTW, formatting a drive does nothing for security, usually all it does is blank out the FAT so that it looks empty but the data is still there on the drive if you use a sector editor.


If I posted any code, assume that code was written using the latest release version unless stated otherwise. Also, if it doesn't work on XP I can't help with that because I don't have access to XP, and I'm not going to.
Give a programmer the correct code and he can do his work for a day. Teach a programmer to debug and he can do his work for a lifetime - by Chirag Gude
How to ask questions the smart way!

I hereby grant any person the right to use any code I post, that I am the original author of, on the autoitscript.com forums, unless I've specifically stated otherwise in the code or the thread post. If you do use my code all I ask, as a courtesy, is to make note of where you got it from.

Back up and restore Windows user files _Array.au3 - Modified array functions that include support for 2D arrays.  -  ColorChooser - An add-on for SciTE that pops up a color dialog so you can select and paste a color code into a script.  -  Customizable Splashscreen GUI w/Progress Bar - Create a custom "splash screen" GUI with a progress bar and custom label.  -  _FileGetProperty - Retrieve the properties of a file  -  SciTE Toolbar - A toolbar demo for use with the SciTE editor  -  GUIRegisterMsg demo - Demo script to show how to use the Windows messages to interact with controls and your GUI.  -   Latin Square password generator

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×