Trouble creating custom signature

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
moosington
Posts: 2
Joined: 23 Sep 2012, 15:48

Trouble creating custom signature

#1 Post by moosington »

Hi,

I'm trying to recover some of my wife's school files off her usb stick and I'm having trouble with creating a custom signature. The file is a .cxm and from the hex editor the first line is this:

------------------------------------------CPS EXPORT SECTION type=1 name=Mac

so for the photorec.sig file i was using this:

cxm 0 "------------------------------------------CPS"

when i run fidentity it comes up as a text file:

Documents/database.cxm: txt

and I'm not sure what im doing wrong, any ideas are greatly appreciated. Thanks!

stumpyuk
Posts: 16
Joined: 19 Sep 2012, 11:41

Re: Trouble creating custom signature

#2 Post by stumpyuk »

You would be better of using the string "CPS EXPORT SECTION" as your signature. Count the number of "-" characters before the string and use the start of the string as your file offset, so if there were 20 "-" characters before "CPS EXPORT SECTION", your custom signature would be:

cxm 19 "CPS EXPORT SECTION"

That should work, assuming there are consistently 20 hyphen characters at the start of the cxm file.

moosington
Posts: 2
Joined: 23 Sep 2012, 15:48

Re: Trouble creating custom signature

#3 Post by moosington »

thanks i'll give it a shot

Locked