IsoBuster 4.3

# Changes / New:
* Implemented a Breadcrumbs control for easy navigation, with right mouse click Pop-up for easy task selection.
* The Breadcrumbs' edit control also interprets paths you copy in it (with limitations), or can show the current path, for easy copying to the clipboard.
* Support for typing in a limited list of commands in the Breadcrumbs' edit control (@close, @refresh:drives, @stop, @restart, @new, @find:).
* Ability to turn off TreeView trying to follow selections made in ListView and Breadcrumbs (faster and less memory use due to virtual implementation).
* Elaborate Search functionality (Ctrl+F), to try and find file(s) and/or folder(s) with certain properties in existing file-systems or file lists. Not to be confused with data/file carving functionality to try and find missing files and folders (Ctrl+F3).
# Improvements:
* Improved use of, and added a lot more ShortCuts throughout the software.
* Different ListView columns layout for search results and ability to show the full path.
* Improved display of files and folders in the status bar, during exploration of folders etc.
* Improvement in time stamp display and during file extraction, for files created in a different daylight saving time period.
* Ability to reload the drives' list (Shift+Ctrl+R) and all associated objects (files folders etc.)(To check if USB drives have been inserted or removed).
* Improved the speed of finding a TreeView item exponentially.
* Make sure the size of an initial install is not bigger than the screen resolution (on systems with low resolution).
* Workaround for Oracle VM VirtualBox 'VBOX CD-ROM' virtual drive that doesn't return correct information in case the ISO file is big (e.g. of a DVD).
* Added Main menu item to allow you to Upgrade from a [Personal] license to a [Professional] license
* Allow to properly resize the Properties (Ctrl+I) Window.
* Show blocks being read in status bar while doing a scan for missing files and folders.
* Added 'Copy path as text to clipboard' function (Ctrl+C).
* Quite a few improvements, changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality.
* Various GUI improvements.
# Fixes:
* Bugfix for HFS - Not all folder content was shown all the time (*).
* Bugfix for FAT - Big folders covering multiple clusters would sometimes not be explored fully (*).
* Fixed it so that the Save Dialog, Print Dialog and Font Dialog won't be displayed behind the SectorView window.

# Changes / New:
- Implemented a Breadcrumbs control for easy navigation, with right mouse click Pop-up for easy task selection
- The Breadcrumbs' edit control also interprets paths you copy in it (with limitations), or can show the current path, for easy copying to the clipboard
- Support for typing in a limited list of commands in the Breadcrumbs' edit control (@close, @refresh:drives, @stop, @restart, @new, @find:)
- Ability to turn off TreeView trying to follow selections made in ListView and Breadcrumbs (faster and less memory use due to virtual implementation)
- Elaborate Search functionality (Ctrl+F), to try and find file(s) and/or folder(s) with certain properties in existing file-systems or file lists. Not to be confused with data/file carving functionality to try and find missing files and folders (Ctrl+F3)
# Improvements:
- Improved use of, and added a lot more ShortCuts throughout the software
- Different ListView columns layout for search results and ability to show the full path
- Improved display of files and folders in the status bar, during exploration of folders etc.
- Improvement in time stamp display and during file extraction, for files created in a different daylight saving time period
- Ability to reload the drives' list (Shift+Ctrl+R) and all associated objects (files folders etc.)(To check if USB drives have been inserted or removed)
- Improved the speed of finding a TreeView item exponentially
- Make sure the size of an initial install is not bigger than the screen resolution (on systems with low resolution)
- Workaround for Oracle VM VirtualBox 'VBOX CD-ROM' virtual drive that doesn't return correct information in case the ISO file is big (e.g. of a DVD)
- Added Main menu item to allow you to Upgrade from a [Personal] license to a [Professional] license
- Allow to properly resize the Properties (Ctrl+I) Window
- Show blocks being read in status bar while doing a scan for missing files and folders
- Added 'Copy path as text to clipboard' function (Ctrl+C)
- Quite a few improvements, changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality
- Various GUI improvements
# Fixes:
- Bugfix for HFS - Not all folder content was shown all the time (*)
- Bugfix for FAT - Big folders covering multiple clusters would sometimes not be explored fully (*)
- Fixed it so that the Save Dialog, Print Dialog and Font Dialog won't be displayed behind the SectorView window

# Changes / New:
- Support for the Linux EXT file system
- Support for Rimage mastered CD/DVD discs with manifest file
- Support for Nintendo GameCube file system
- Support for GEMDOS / Atari - ST FAT12-16 variant
- Support for High Sierra on CD-ROM (the predecessor to ISO9660)
- Implemented internal device caching, especially used during File System recognition. Many file systems start from similar addresses. Caching avoids having to re-read blocks for every file-system that is checked
- Detect if the Nintendo Wii file system is present and show an icon for it (*)
- Detect if the Linux RomFS file system is present and show an icon for it (*)
- Detect if the Unix/Linux JFS file system is present and show an icon for it (*)
- Detect if the Unix/Linux ZFS file system is present and show an icon for it (*)
- Detect if the Unix/Linux Minix file system is present and show an icon for it (*)
- Detect if the Linux BtrFS file system is present and show an icon for it (*)
- Detect if the Linux SquashFS file system is present and show an icon for it (*)
- Detect if the Linux CramFS file system is present and show an icon for it (*)
- Detect if the Linux BeFS (BFS) file system is present and show an icon for it (*)
- Detect if the Microsoft ReFS file system is present and show an icon for it (*)
- New and much faster way to find deleted files and folders in an NTFS file system
(*) Full exploration of this file system is not implemented but now an investigator can see if it is present
# Improvements:
- Extra tests to make sure a child folder doesn't have subfolders that are a parent folder, creating circular links, in buggy or recovered file systems
- Added a 'Paranoid mode' when creating managing IBP/IBQ image files, to make sure all data is flushed to the destination without system caching, and structures are updated regularly
- Allow to complete a managed image file from media of which the layout doesn't fully match, but the risk is manageable [Professional]
- Allow to complete a managed image file from another non-managed image file [Professional]
- Improved speed when updating the IBP managed image file
- Added various extraction type switches via the command line: /ET: A, IBP, WAV, RAW, R2U, RUN, DLL
- Added new file system switches via the command line: /EF: see the various newly implemented file systems
- Added Pinnacle Studio mastered DVDs to the IFO/VOB recognition sequence ("PCLE UDFLib")
- Added ability (via right mouse click) to see the properties-window-text as text in a memo field (for easy copy and paste)
- Support for underscores in function names in the libewf.dll, so that Borland bcc32 built dlls can be used as well
- Always display FileName:StreamName, with or without [ADS] appended, for NTFS Alternate Data Streams
- Removed registration dialog nag when doing a surface scan on BD media
- Improvements in the Extract From-To functionality, dialog and warnings
- Make sure testing for encrypted partitions only happens once, not every time the visual node is created (e.g. when switching devices in GUI)
- Do not read extra blocks to test for partition encryption if there are enough cached blocks
- Updated the 'Agent' string when doing an online query, to check for a new version, to be more compatible with modern servers and systems
- Reverse the order of AVDP parsing, LBA 512 first rather than 256 first, in case of a CeQuadrat made UDF disc, to deal with CeQuadrat UDF bugs
- Get the proper volume name for CeQuadrat made UDF CD-R discs
- After an image file has been made, save its filename to the recently opened image files, so that it can be opened immediately from the recent image files' list
- Improved .GI image file interpretation, specifically improvements in finding the header size
- Show files and folders with the System property in another color
- Show special files, file entries that are not used in the classical way by Unix/Linux file systems, in another color
- Show Windows overlay icons and add the shortcut overlay icon to EXT symbolic link files
- Added checkbox to options to uncheck using CD-Text in filenames, when audio tracks are extracted
- The file-exists dialog now also allows to auto-rename a file, instead of over-writing or ignoring the file (non-Windows file systems allow duplicate but caps-sensitive names in the same folder)
- New dialog to auto-rename filenames that are illegal in Windows but OK in other non-Windows file systems
- Auto-rename folders, during extraction, when they contain illegal Windows-filename characters or a Windows-reserved file/folder name.
- Show Endianess in UFS, XFS, ISO and SquashFS and other File System properties
- Improvements in drag&drop functionality and the use of the temporary folder. Better clean-up afterwards
- Possibility to always get the RETRY SELECT ABORT error dialog (instead of RETRY OMMIT ABORT) on file extraction
- Various improvements, changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality
- Various GUI improvements
# Fixes:
- Fixed GUI issue that caused incorrect values to be displayed in certain error messages
- Fixed possible hang when EWF image files are loaded
- Fixed that sometimes the sanitizing part after finding missing files and folders on a FAT volume could take 'forever', due to bad FAT records
- Fixed data-corruption issue, introduced in 3.5, while extracting files with more than 10 extents (fragments would be extracted in the wrong order)
- Fixed it so that when an IBP/IBQ is made twice in a row from the same media (without a refresh) the bitmap is still fully written out to the IBP
- Avoid exception error on bad IBP without (enough) bitmap data (rare test case)
- Fixed extraction of named streams of an NTFS folder (not file)

# Changes / New:
- Support for the Linux EXT file system
- Support for Rimage mastered CD/DVD discs with manifest file
- Support for Nintendo GameCube file system
- Support for GEMDOS / Atari - ST FAT12-16 variant
- Support for High Sierra on CD-ROM (the predecessor to ISO9660)
- Implemented internal device caching, especially used during File System recognition. Many file systems start from similar addresses. Caching avoids having to re-read blocks for every file-system that is checked
- Detect if the Nintendo Wii file system is present and show an icon for it (*)
- Detect if the Linux RomFS file system is present and show an icon for it (*)
- Detect if the Unix/Linux JFS file system is present and show an icon for it (*)
- Detect if the Unix/Linux ZFS file system is present and show an icon for it (*)
- Detect if the Unix/Linux Minix file system is present and show an icon for it (*)
- Detect if the Linux BtrFS file system is present and show an icon for it (*)
- Detect if the Linux SquashFS file system is present and show an icon for it (*)
- Detect if the Linux CramFS file system is present and show an icon for it (*)
- Detect if the Linux BeFS (BFS) file system is present and show an icon for it (*)
- Detect if the Microsoft ReFS file system is present and show an icon for it (*)
- New and much faster way to find deleted files and folders in an NTFS file system
(*) Full exploration of this file system is not implemented but now an investigator can see if it is present
# Improvements:
- Extra tests to make sure a child folder doesn't have subfolders that are a parent folder, creating circular links, in buggy or recovered file systems
- Added a 'Paranoid mode' when creating managing IBP/IBQ image files, to make sure all data is flushed to the destination without system caching, and structures are updated regularly
- Allow to complete a managed image file from media of which the layout doesn't fully match, but the risk is manageable [Professional]
- Allow to complete a managed image file from another non-managed image file [Professional]
- Improved speed when updating the IBP managed image file
- Added various extraction type switches via the command line: /ET: A, IBP, WAV, RAW, R2U, RUN, DLL
- Added new file system switches via the command line: /EF: see the various newly implemented file systems
- Added Pinnacle Studio mastered DVDs to the IFO/VOB recognition sequence ("PCLE UDFLib")
- Added ability (via right mouse click) to see the properties-window-text as text in a memo field (for easy copy and paste)
- Support for underscores in function names in the libewf.dll, so that Borland bcc32 built dlls can be used as well
- Always display FileName:StreamName, with or without [ADS] appended, for NTFS Alternate Data Streams
- Removed registration dialog nag when doing a surface scan on BD media
- Improvements in the Extract From-To functionality, dialog and warnings
- Make sure testing for encrypted partitions only happens once, not every time the visual node is created (e.g. when switching devices in GUI)
- Do not read extra blocks to test for partition encryption if there are enough cached blocks
- Updated the 'Agent' string when doing an online query, to check for a new version, to be more compatible with modern servers and systems
- Reverse the order of AVDP parsing, LBA 512 first rather than 256 first, in case of a CeQuadrat made UDF disc, to deal with CeQuadrat UDF bugs
- Get the proper volume name for CeQuadrat made UDF CD-R discs
- After an image file has been made, save its filename to the recently opened image files, so that it can be opened immediately from the recent image files' list
- Improved .GI image file interpretation, specifically improvements in finding the header size
- Show files and folders with the System property in another color
- Show special files, file entries that are not used in the classical way by Unix/Linux file systems, in another color
- Show Windows overlay icons and add the shortcut overlay icon to EXT symbolic link files
- Added checkbox to options to uncheck using CD-Text in filenames, when audio tracks are extracted
- The file-exists dialog now also allows to auto-rename a file, instead of over-writing or ignoring the file (non-Windows file systems allow duplicate but caps-sensitive names in the same folder)
- New dialog to auto-rename filenames that are illegal in Windows but OK in other non-Windows file systems
- Auto-rename folders, during extraction, when they contain illegal Windows-filename characters or a Windows-reserved file/folder name.
- Show Endianess in UFS, XFS, ISO and SquashFS and other File System properties
- Improvements in drag&drop functionality and the use of the temporary folder. Better clean-up afterwards
- Possibility to always get the RETRY SELECT ABORT error dialog (instead of RETRY OMMIT ABORT) on file extraction
- Various improvements, changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality
- Various GUI improvements
# Fixes:
- Fixed GUI issue that caused incorrect values to be displayed in certain error messages
- Fixed possible hang when EWF image files are loaded
- Fixed that sometimes the sanitizing part after finding missing files and folders on a FAT volume could take 'forever', due to bad FAT records
- Fixed data-corruption issue, introduced in 3.5, while extracting files with more than 10 extents (fragments would be extracted in the wrong order)
- Fixed it so that when an IBP/IBQ is made twice in a row from the same media (without a refresh) the bitmap is still fully written out to the IBP
- Avoid exception error on bad IBP without (enough) bitmap data (rare test case)
- Fixed extraction of named streams of an NTFS folder (not file)

# Changes / New:
- 64-bit sector addressing so that we can properly show, extract and support any partition, file, folder or file system above the 2TB boundary
- Most objects (files, folders etc), despite the 64-bit address instead of the 32-bit address, now use less memory because of intense work and serious optimizations
- Saving and updating of managed image files, especially for huge drives, is considerably made faster, and yet kept backwards compatible
- Ability to load a generic image file (*.iso, *.dks, *.flp) with specified properties on the command line: /IPROP:header|blocksize (e.g. /IPROP:100|2048)
- Ability to extract CD segments as *.WAV file (Gives you the power to wrap any raw CD data in WAVE RIFF headers)

# Improvements:
- A plethora of improvements to properly 'guess' the size of an El Torito boot image on CD or DVD, in case that information is not present in the data structures
- Show how the size was determined in the Boot Image file Properties window
- Improvements to try an find FAT file systems inside Boot Images on CD and DVD
- Implemented ability to (via right mouse click) find a matching file for a Boot Image and use that file's size properties
- Changed 'Last LBA' display to take the last block of the last extent that actually has a size (in case the last one(s) ha(s)(ve) no size)
- A great number of improvements and workarounds to deal with CD-i discs that have audio and data combined in one track. Because it is an illegal state many drives return unexpected data for such discs
- Save the status more often while making or completing managed image files. More saves as more problems are encountered
- Display the address where the process 'Completing IBP/IBQ Image' was aborted in the 'test and complete managed image files' dialog.
- Ability to create one big IBQ file instead of ~1GB (or otherwise defined) sized IBQ files (will only work on NTFS volumes)
- The From-To dialog can now also extract *.WAV (via checkbox) from CD
- Extracting an audio track to WAV or BIN/ISO will now happen including the pre-gap of the next audio track, default set in options
- Work around Windows issue with downloaded CHM files by removing the "Zone Identifier" stream from the CHM file that was added by Windows after download.
- Memory and speed improvements in the management of the erroneous-sectors-bitmap
- Various other smaller GUI improvements

# Fixes:
- Show the correct Last LBA for an Audio track
- GUI fix that properly shows what track is being completed during the completion of a managed IBP/IBQ image file
- Not all orphaned UDF folders would be found during a "find missing files and folders" in certain situations (bug introduced in IsoBuster 3.2)

# Changes / New:
* 64-bit sector addressing so that we can properly show, extract and support any partition, file, folder or file system above the 2TB boundary
* Most objects (files, folders etc), despite the 64-bit address instead of the 32-bit address, now use less memory because of intense work and serious optimizations
* Saving and updating of managed image files, especially for huge drives, is considerably made faster, and yet kept backwards compatible
* Ability to load a generic image file (*.iso, *.dks, *.flp) with specified properties on the command line: /IPROP:header|blocksize (e.g. /IPROP:100|2048)
* Ability to extract CD segments as *.WAV file (Gives you the power to wrap any raw CD data in WAVE RIFF headers)
# Improvements:
* A plethora of improvements to properly 'guess' the size of an El Torito boot image on CD or DVD, in case that information is not present in the data structures
* Show how the size was determined in the Boot Image file Properties window
* Improvements to try an find FAT file systems inside Boot Images on CD and DVD
* Implemented ability to (via right mouse click) find a matching file for a Boot Image and use that file's size properties
* Changed 'Last LBA' display to take the last block of the last extent that actually has a size (in case the last one(s) ha(s)(ve) no size)
* A great number of improvements and workarounds to deal with CD-i discs that have audio and data combined in one track. Because it is an illegal state many drives return unexpected data for such discs
* Save the status more often while making or completing managed image files. More saves as more problems are encountered
* Display the address where the process 'Completing IBP/IBQ Image' was aborted in the 'test and complete managed image files' dialog.
* Ability to create one big IBQ file instead of ~1GB (or otherwise defined) sized IBQ files (will only work on NTFS volumes)
* The From-To dialog can now also extract *.WAV (via checkbox) from CD
* Extracting an audio track to WAV or BIN/ISO will now happen including the pre-gap of the next audio track, default set in options
* Work around Windows issue with downloaded CHM files by removing the "Zone Identifier" stream from the CHM file that was added by Windows after download.
* Memory and speed improvements in the management of the erroneous-sectors-bitmap
* Various other smaller GUI improvements
# Fixes:
* Show the correct Last LBA for an Audio track
* GUI fix that properly shows what track is being completed during the completion of a managed IBP/IBQ image file

* Changes:
- IsoBuster now also provides access to logical drives (C: D: etc.) instead of only Physical drives (see options). This gives access to Windows volumes. So on a higher level, which means that drivers can translate the data first before IsoBuster gets it. This is particularly useful in case of encrypted volumes, for instance TrueCrypt mounted volumes
- Dialog for experts with a [Professional] license to work with, test and complete managed image files
> Once an IBP file is loaded, right mouse click the drive-selection control in the left corner and choose "Change or Test managed Image File Properties (Expert)"
> Count the amount of errors inside a specified range
> Change the status of an area
> Complete the image file inside a range
- Command line parameters /CI: /RANGE: /FROMTO: and /EP:NPC to complete a managed image file, inside a range or not
- Ability to create an empty IBP/IBQ file set (no actual reads executed) via /ET:E to allow investigators to complete regions via /CI: and /RANGE: or /FROMTO:
- Allow managed image files to be completed at the end with dummy data if the input drive is "*" (/D:*)
- Implemented ability to reverse read (during extraction), using a given range
- Ability to reverse read via command line parameter: /RR:[Interval]
- Detect if the Linux EXT(2-4) file system is present and show an icon for it (exploration of EXT itself is not implemented but now an investigator knows it's present)
- Detect if the Unix UFS(1-2) file system is present and show an icon for it (exploration of UFS itself is not implemented but now an investigator knows it's present)
- Detect if the Linux Reiser(1-4) file system is present and show an icon for it (exploration of Reiser itself is not implemented but now an investigator knows it's present)
- Detect if the Unix XFS(1-4) file system is present and show an icon for it (exploration of XFS itself is not implemented but now an investigator knows it's present)
- Ability to load an additional LibEWF.dll next to the already present, embedded, libewf-20130416 version. A libewf.dll and its dependables need to be put in the /plugins/ folder
- IsoBuster will now always first try to load the dynamic version (assumed to be more recent) before falling back on the embedded libewf-20130416 version. The embedded version may be removed over time to reduce the size again, we'll see
- New option that defines how strict surface scanning is and whether there should be an abort after an error
* Improvements:
- Improved device naming if Inquiry fails
- Improved determination of HD vs USB stick/Flash etc.
- Improved user feedback while cleaning up (sanitising) NTFS so that the user has an idea about where the process is
- Create sparse files when extracting sparse files and no filters are in use for that file
- Ability to drag files to IsoBuster's TreeView, to open as image file, when IsoBuster is running in an elevated state
- Popup warning when extracting from the ISO9660 file system, when other better file systems are present
- Support for the *.image disk file format
- Show attributes for Tracks, Sessions and Partitions in ListView (instead of N/A)
- Fixed it so that HDs larger than 2 TB are seen as 2 TB instead of less, so that at least that space can be fully adressed and explored
- Rewrote the automatic skipping and retry-count reducing mechanism, during extraction of a managed image file, to perform much better
- Allow <%FN> in the filename, in case an image is extracted via the command line
- Dependency on cc3250.dll for old Win2K OS in combination with multi-language support has been removed
- You can now always choose the installation folder. Before this was dependant on previous installations
- Show the object Type, cfr. Windows, in the ListView (for instance "JPG file") and allow to sort this new column (column may be hidden by default, right mouse click the ListView columns to enable)
- Added more sort options that will be performed right after the low level file system / folder exploring is done
- Various other smaller GUI improvements
* Fixes:
- Fixed an exception error that happened if auto-folder-scanning was interrupted by closing the application
- Fixed an issue that could cause the last part of Video not to be saved to a file, when this video was being filtered via: "Extract but filter only MPG frames"

* Changes:
- IsoBuster now also provides access to logical drives (C: D: etc.) instead of only Physical drives (see options). This gives access to Windows volumes. So on a higher level, which means that drivers can translate the data first before IsoBuster gets it. This is particulary useful in case of encrypted volumes, for instance TrueCrypt mounted volumes
- Dialog for experts with a [Professional] license to work with, test and complete managed image files
> Once an IBP file is loaded, right mouse click the drive-selection control in the left corner and choose "Change or Test managed Image File Properties (Expert)"
> Count the amount of errors inside a specified range
> Change the status of an area
> Complete the image file inside a range
- Command line parameters /CI: /RANGE: /FROMTO: and /EP:NPC to complete a managed image file, inside a range or not
- Ability to create an empty IBP/IBQ file set (no actual reads executed) via /ET:E to allow investigators to complete regions via /CI: and /RANGE: or /FROMTO:
- Allow managed image files to be completed at the end with dummy data if the input drive is "*" (/D:*)
- Implemented ability to reverse read (during extraction), using a given range
- Ability to reverse read via command line parameter: /RR:[Interval]
- Detect if the Linux EXT(2-4) file system is present and show an icon for it (exploration of EXT itself is not implemented but now an investigator knows it's present
- Detect if the Unix UFS(1-2) file system is present and show an icon for it (exploration of UFS itself is not implemented but now an investigator knows it's present
- Detect if the Linux Reiser(1-4) file system is present and show an icon for it (exploration of Reiser itself is not implemented but now an investigator knows it's present
- Detect if the Unix XFS(1-4) file system is present and show an icon for it (exploration of XFS itself is not implemented but now an investigator knows it's present
- Ability to load an additional LibEWF.dll next to the already present, embedded, libewf-20130416 version. A libewf.dll and its dependables need to be put in the /plugins/ folder
- IsoBuster will now always first try to load the dynamic version (assumed to be more recent) before falling back on the embedded libewf-20130416 version. The embedded version may be removed over time to reduce the size again, we'll see
- New option that defines how strict surface scanning is and whether there should be an abort after an error
* Improvements:
- Improved device naming if Inquiry fails
- Improved determination of HD vs USB stick/Flash etc.
- Improved user feedback while cleaning up (sanitising) NTFS so that the user has an idea about where the process is
- Create sparse files when extracting sparse files and no filters are in use for that file
- Ability to drag files to IsoBuster's TreeView, to open as image file, when IsoBuster is running in an elevated state
- Popup warning when extracting from the ISO9660 file system, when other better file systems are present
- Support for the *.image disk file format
- Show attributes for Tracks, Sessions and Partitions in ListView (instead of N/A)
- Fixed it so that HDs larger than 2 TB are seen as 2 TB instead of less, so that at least that space can be fully adressed and explored
- Rewrote the automatic skipping and retry-count reducing mechanism, during extraction of a managed image file, to perform much better
- Allow <%FN> in the filename, in case an image is extracted via the command line
- Dependency on cc3250.dll for old Win2K OS in combination with multi-language support has been removed
- You can now always choose the installation folder. Before this was dependant on previous installations
- Show the object Type, cfr. Windows, in the ListView (for instance "JPG file") and allow to sort this new column (column may be hidden by default, right mouse click the ListView columns to enable)
- Added more sort options that will be performed rigt after the low level file system / folder exploring is done
- Various other smaller GUI improvements
* Fixes:
- Fixed an exception error that happened if auto-folder-scanning was interrupted by closing the application
- Fixed an issue that could cause the last part of Video not to be saved to a file, when this video was being filtered via: "Extract but filter only MPG frames"

# Changes:
- Added "Extract but filter Mpg" for all files, not just mpeg1 filtering of *.dat files on VCD. If you extract a *.VOB file from a DVD this way you end up with a perfect mpeg2 *.mpg file. See DVDVob2Mpg for more information
- Detect Encrypted partitions on which no file-systems can be found (for instance encrypted with TrueCrypt)
- Implemented certain shell commands. Right mouse click on an optical drive will show "investigate with IsoBuster". IsoBuster is added to the list of programs that is available via "Open with"
# Improvements:
- The toolbar installation is unchecked by default, so that people who don't read and just install, don't get the toolbar. Seems like a good compromise.
- FAT Improvement. Test the backup BPB as well, even if the primary BPB is readable and seems ok, and next decide on the best one to use.
- FAT Improvement. No read-ahead anymore of the FAT. On large volumes this can be time consuming and the FAT records may even not be in use
- Deal smarter with huge FATs, suppress warning message and don't load in memory all at once
- Better error display instead of the horrific and way too generic Borland C++ Builder 'EEFFACE' message for C++ exceptions
- Avoid Nikon *.nef files being found as Kodak *.kdc files
- Suppress Windows 2000 dialog when there is no floppy in the drive and the drive is being scanned
- Implemented the ability to detect a floppy drive for what it really is even if there is no floppy in the drive. Before it was not possible to detect a floppy drive properly if it had no disk inside.
- Scan the full drive letter range A - Z in search of floppy drives, instead of just A and B, now that they can be detected more reliable
- Small speed improvements here and there, trying to serve results faster when and where possible.
- Improvements in finding the proper recordings' names on edited DVD-VR discs
- Improvements to deal with bad (non-windows compatible) file names
- Improvement in building FAT long file names from corrupted directory tables with wrong checksums
- Improvement to detect UDF on a CD-R with incorrect track layout
- Remove certain dialogs with questions during startup for very new users (no prior install), to not confuse them. Use the best Exploration settings instead
- Updated LibEWF support to libewf-20130416
- Show compressed folders blue in the Treeview (left pane), not just the ListView (right pane)
- Show encrypted files and folders green in both left and right pane
- Show encrypted partitions green in both left and right pane
- Show "Sparse" for LastLBA in case the object (or last extent) is Sparse
- Show an empty block and do not read block 0 in case the object is sparse during a SectorView
- When an NTFS extent is extracted on its own ([Professional] license) and when that extent is a compressed part of a compressed file, then it's decompressed on the fly as well
- Various other smaller GUI improvements
# Fixes:
- On Windows 2000 an error dialog was shown (sometimes) when another language was selected because of a change in the language resource dlls in previous version. All fixed now.
- Fixed NTFS issue, probably only seen on large volumes (Terabytes). Fragmented MFT files were not always properly seen as such, so that parts or even the root of the file system could not be found.
- Fixed FAT issue on large FAT volumes that are formatted by other software than Windows itself. In other words an improvement to deal with unexpectedly huge FATs
- Fixed obscure and rare EEFFACE error while selecting objects
- Fixed Uninstallation error "Runtime Error (...): Could not call proc."

# Changes:
* Added "Extract but filter Mpg" for all files, not just mpeg1 filtering of *.dat files on VCD. If you extract a *.VOB file from a DVD this way you end up with a perfect mpeg2 *.mpg file. See DVDVob2Mpg for more information
* Detect Encrypted partitions on which no file-systems can be found (for instance encrypted with TrueCrypt)
* Implemented certain shell commands. Right mouse click on an optical drive will show "investigate with IsoBuster". IsoBuster is added to the list of programs that is available via "Open with"
# Improvements:
* The toolbar installation is unchecked by default, so that people who don't read and just install, don't get the toolbar. Seems like a good compromise.
* FAT Improvement. Test the backup BPB as well, even if the primary BPB is readable and seems ok, and next decide on the best one to use.
* FAT Improvement. No read-ahead anymore of the FAT. On large volumes this can be time consuming and the FAT records may even not be in use
* Deal smarter with huge FATs, suppress warning message and don't load in memory all at once
* Better error display instead of the horrific and way too generic Borland C++ Builder 'EEFFACE' message for C++ exceptions
* Avoid Nikon *.nef files being found as Kodak *.kdc files
* Suppress Windows 2000 dialog when there is no floppy in the drive and the drive is being scanned
* Implemented the ability to detect a floppy drive for what it really is even if there is no floppy in the drive. Before it was not possible to detect a floppy drive properly if it had no disk inside.
* Scan the full drive letter range A - Z in search of floppy drives, instead of just A and B, now that they can be detected more reliable
* Small speed improvements here and there, trying to serve results faster when and where possible.
* Improvements in finding the proper recordings' names on edited DVD-VR discs
* Improvements to deal with bad (non-windows compatible) file names
* Improvement in building FAT long file names from corrupted directory tables with wrong checksums
* Improvement to detect UDF on a CD-R with incorrect track layout
* Remove certain dialogs with questions during startup for very new users (no prior install), to not confuse them. Use the best Exploration settings instead
* Updated LibEWF support to libewf-20130416
* Show compressed folders blue in the Treeview (left pane), not just the ListView (right pane)
* Show encrypted files and folders green in both left and right pane
* Show encrypted partitions green in both left and right pane
* Show "Sparse" for LastLBA in case the object (or last extent) is Sparse
* Show an empty block and do not read block 0 in case the object is sparse during a SectorView
* When an NTFS extent is extracted on its own ([Professional] license) and when that extent is a compressed part of a compressed file, then it's decompressed on the fly as well
* Various other smaller GUI improvements
# Fixes:
* On Windows 2000 an error dialog was shown (sometimes) when another language was selected because of a change in the language resource dlls in previous version. All fixed now.
* Fixed NTFS issue, probably only seen on large volumes (Terabytes). Fragmented MFT files were not always properly seen as such, so that parts or even the root of the file system could not be found.
* Fixed FAT issue on large FAT volumes that are formatted by other software than Windows itself. In other words an improvement to deal with unexpectedly huge FATs
* Fixed Uninstallation error "Runtime Error (...): Could not call proc."

# Changes:
- Support for ExFAT.
- Find deleted NTFS files and folders during a scan for missing files and folders.
- Implemented a "Find deleted files and folders" option, when an NTFS file-system is selected. This is a much faster scan if you're only interested in finding deleted files and folders in an NTFS file-system.
- Support for FATX
- Support for XISO / XDVDFS
- Extended Master Boot Record (EMBR) support.
- BSD partitions support.
# Improvements:
- Further improved the UAC experience by tweaking and fixing issues. The experience is still the same as described in previous release.
- Remove duplicate partitions (for instance when there's a GPT but the MBR fields still point to valid partitions as well).
- Ways to dump all sectors that are being read to log files (for debug purposes) (support for *.ibdat and *.ibadr).
- Added .bkf file type recognition to the file-signature scan.
- Further improved the ListView Columns' drag behaviour by working around (Builder) VCL limits/bugs.
- An NTFS file also gets the Sparse property now when it's not fragmented (and not only when its extents are sparse)
- Display the File's start LBA for a sparse file, except when the first extent is sparse, then "Sparse" is displayed
- Added Full Path(s) and Start and Finish processing time to the MD5 file (as comments).
- Ability (set via options) to store and restore the position of the main form (instead of always centered).
- Added *.dd to the supported image files.
- Recognize EXT SuperBlock when trying to determine the blocksize of an image (for instance a Linux made .dd file with an EXT1,2,3 or 4 file-system).
- Improved handling of NTFS MFT embedded files during the scan for missing files based on their signature
- Various improvemens to reduce false positives during scanning for missing files and folders.
- Various other smaller GUI improvements
# Fixes:
- Not all *.png files were found during a scan for missing files and folders (bug introduced in version 3.1).
- Mac HFS file systems with large fragmented files (more than 8 extents) could trigger a program crash.
- In rare cases not all files and/or folders of an NTFS folder were found, if that folder was described in both the MFT record and via INDX records.
- Sometimes too small files were created, when they were fully sparse (one extent, sparse (= all zeroes) (NTFS).
- Fixed it so that the progress bar also changes color (red) in case of errors, during a scan for missing files and folders
- Show the last LBA in case of compressed files
- Fixed one more exception error that could occur while scanning for lost files and folders, due to buggy MS Office documents detection code.

# Changes:
- Support for ExFAT.
- Find deleted NTFS files and folders during a scan for missing files and folders.
- Implemented a "Find deleted files and folders" option, when an NTFS file-system is selected. This is a much faster scan if you're only interested in finding deleted files and folders in an NTFS file-system.
- Support for FATX
- Support for XISO / XDVDFS
- Extended Master Boot Record (EMBR) support.
- BSD partitions support.
# Improvements:
- Further improved the UAC experience by tweaking and fixing issues. The experience is still the same as described in previous release.
- Remove duplicate partitions (for instance when there's a GPT but the MBR fields still point to valid partitions as well).
- Ways to dump all sectors that are being read to log files (for debug purposes) (support for *.ibdat and *.ibadr).
- Added .bkf file type recognition to the file-signature scan.
- Further improved the ListView Columns' drag behaviour by working around (Builder) VCL limits/bugs.
- An NTFS file also gets the Sparse property now when it's not fragmented (and not only when its extents are sparse)
- Display the File's start LBA for a sparse file, except when the first extent is sparse, then "Sparse" is displayed
- Added Full Path(s) and Start and Finish processing time to the MD5 file (as comments).
- Ability (set via options) to store and restore the position of the main form (instead of always centered).
- Added *.dd to the supported image files.
- Recognize EXT SuperBlock when trying to determine the blocksize of an image (for instance a Linux made .dd file with an EXT1,2,3 or 4 file-system).
- Improved handling of NTFS MFT embedded files during the scan for missing files based on their signature
- Various other smaller GUI improvements
# Fixes:
- Not all *.png files were found during a scan for missing files and folders (bug introduced in version 3.1).
- Mac HFS file systems with large fragmented files (more than 8 extents) could trigger a program crash.
- In rare cases not all files and/or folders of an NTFS folder were found, if that folder was described in both the MFT record and via INDX records.
- Sometimes too small files were created, when they were fully sparse (one extent, sparse (= all zeroes) (NTFS).
- Fixed it so that the progress bar also changes color (red) in case of errors, during a scan for missing files and folders

# Changes:
- On Windows VISTA and higher, if you do not run in admin mode by default (UAC not disabled) you get the UAC (User Account Control) popup each time when you start IsoBuster. This is because admin rights are required to talk to Hard Drives and USB/Flash drives etc. However, in this version, if you disable listing Hard Drives and Flash drives in Options or during install, then you don't get the UAC anymore. The same is true when you run the shell command "extract" or when you start IsoBuster with command line parameters /nodrives or /nohd.
- Support for GPT (GUID) Partition formatting
- Also list empty card readers etc. when detected. Insert a card, hit refresh, and IsoBuster will show the content, like it does on optical media
- Windows 7 (and higher) progress indication via the taskbar
- Added the ability to choose how the VIDEO_TSVTS_0x_0x.VOB file size is determined in the VIDEO file-system (Via Options)
- Implemented extra columns in Listview (Blocks, Offset, Last LBA, Attributes)
- List unallocated space as a hidden partition, provided it has a reasonable size
- File signature recognition for *.cr2 (Canon photo format)
# Improvements:
- Improvements for Floppy/Diskette detection
- Improvements for finding NTFS file systems (for instance when there's no partition data to start from)
- Try to guess the correct code page of CD-Text on an Audio CD based on its Language field
- Allow columns order to be changed
- Popup to enable/disable columns
- Store new column order, width, hidden etc.
- Which column is sorted, and in what direction, is now shown properly
- Once a column header is clicked to sort, that sorting order is also applied to every other folder you browse to
- Various speed and memory allocation improvements throughout the code, noticeable during all sorts of functions.
- Always use code page 10000 when parsing HFS, this improves special characters display such as the small TM in the top corner
- Improvements in the detection between optical and other type media image files with shared extensions (e.g. .img)
- Removed older Win9x / NT4 / Aspi related settings from Options / Communication
- Introduced ability to start IsoBuster with only optical / only other than optical / both or none at all.
- Added command line switches: /nocd and /nohd
- Improved scanning for lost files and folders by reducing false positives for certain FAT and UDF structures
- Exposed more settings via Options / GUI / Messages, for which a popup occured but no way to change it again existed
- Various other smaller GUI improvements
# Fixes:
- Fixed a possible exception error when scanning for lost files and folders on +VR discs
- Fixed several excpetion errors that could occur while scanning for lost files and folders, due to buggy MS Office documents detection code.
- Fixed issue that would prevent ibp images files of other-than-optical media to be accessed properly at all times, because space outside the partitions would stay hidden.
- Fixed issue that caused an extended partition to be shown as well even though it contained other partitions
- Fixed issue that sometimes prevented IsoBuster to see all partitions
- Fixed it so that partitions are sorted, since the partition table may not be sorted
- Fixed issue causing multi-session optical discs not to produce correct image files all the time.
- Fixed rare exception errors when opening certain image files where IsoBuster needed to detect optical vs. HD/Flash etc.
- Fixed rare stack overflow error when deleting a file.
- Fixed rare exception error when the 'Default' button is clicked in Options