File undelete - seems to get stalled on garbage files - possibility to script?
Posted: 30 Dec 2016, 23:02
Hi all,
first of, thank you very much for this amazing software! From what I can tell it works much better than the commercial programs that I have tested.
I am trying to recover some files that were unintentionally deleted on an exFAT partition using a Macintosh; I suspect there was some form of a file system problem, as those files were marked as deleted without actively deleting them. When I scan the disk with testdisk I can see all the lost files show up in the list marked as deleted, and I can also successfully restore them. The catch is that there are numerous levels of subfolder to every folder. If I select a folder, testdisk will successfully undelete a number of files but then get into an endless loop of failures of what I think is reading data garbage and potentially some loops; files were moved around a lot before. If I select files manually there is no failure, but it takes a huge amount of time.
Is there any way of specifying rules for undeletion of files, similar to the way PhotoRec works? I tried PhotoRec but end up with approx. 24 folder of files, and it does not restore the file structure I had before. Maybe it might be enough to tell testdisk to skip certain types of files - because when looking at the file structure in testdisk as a human it is not hard to discern which are the files I want to restore, and which is garbage. To me, the scripting information on http://www.cgsecurity.org/wiki/Scripted_run was not clear in this regard.
Alternatively is there any other way of running undelete on a folder so that it does not get caught up in such loops or failures?
I hope I was able to describe my problem somewhat clearly - I can post the log files and/or screenshots if you think it might help.
Thanks and best regards!
Goetz
first of, thank you very much for this amazing software! From what I can tell it works much better than the commercial programs that I have tested.
I am trying to recover some files that were unintentionally deleted on an exFAT partition using a Macintosh; I suspect there was some form of a file system problem, as those files were marked as deleted without actively deleting them. When I scan the disk with testdisk I can see all the lost files show up in the list marked as deleted, and I can also successfully restore them. The catch is that there are numerous levels of subfolder to every folder. If I select a folder, testdisk will successfully undelete a number of files but then get into an endless loop of failures of what I think is reading data garbage and potentially some loops; files were moved around a lot before. If I select files manually there is no failure, but it takes a huge amount of time.
Is there any way of specifying rules for undeletion of files, similar to the way PhotoRec works? I tried PhotoRec but end up with approx. 24 folder of files, and it does not restore the file structure I had before. Maybe it might be enough to tell testdisk to skip certain types of files - because when looking at the file structure in testdisk as a human it is not hard to discern which are the files I want to restore, and which is garbage. To me, the scripting information on http://www.cgsecurity.org/wiki/Scripted_run was not clear in this regard.
Alternatively is there any other way of running undelete on a folder so that it does not get caught up in such loops or failures?
I hope I was able to describe my problem somewhat clearly - I can post the log files and/or screenshots if you think it might help.
Thanks and best regards!
Goetz