cgsecurity.org

Hi there,

How do I use (Photorec ?) to recover all files with a specific custom extension (e.g. *.abc) but without specifying a particular signature? This file does not have a constant signature anywhere in its contents.

I have followed the instructions here

http://www.cgsecurity.org/wiki/Add_your ... o_PhotoRec

And using a null string at offset zero, but understandably that doesn't work.

regards
Peter

If there is no constant specific to the file type, the data need at least to have some properties that can be use to identify the file. In this case, a programmer can add the necessary code to PhotoRec.

The files are binary and encrypted so unfortunately the only common property is its extension. Is that at all possible to cater for by writing specific source code for PhotoRec ?

The only possibility will be to add some code to test the decryption of each data block and if it works, consider it's the beginning of a new file.