Fragments recovery (raw disk copy)
Posted: 28 Aug 2014, 20:59
Hello,
I'm trying to recover from a CF card a photo that has been deleted and PARTIALLY OVERWRITTEN.
I've just run photorec, that's what I can see in the report.xml:
<fileobject>
<filename>f0999659.jpg</filename>
<filesize>2002259</filesize>
<byte_runs><byte_run offset="0" img_offset="511857664" len="2015232"/></byte_runs>
</fileobject>
<fileobject>
<filename>f1010219.ctg</filename>
<filesize>16384</filesize>
<byte_runs><byte_run offset="0" img_offset="517264384" len="16384"/></byte_runs>
</fileobject><fileobject>
511857664 + 2015232 = 513872896
Remembering the exact time in which my photo has been taken, I'm pretty sure that fragments of that file can be found from 513872896 and 517264384. Without header, of course (file has been partially overwritten).
Is there any way to have a raw copy of that data?
Thanks a lot.
I'm trying to recover from a CF card a photo that has been deleted and PARTIALLY OVERWRITTEN.
I've just run photorec, that's what I can see in the report.xml:
<fileobject>
<filename>f0999659.jpg</filename>
<filesize>2002259</filesize>
<byte_runs><byte_run offset="0" img_offset="511857664" len="2015232"/></byte_runs>
</fileobject>
<fileobject>
<filename>f1010219.ctg</filename>
<filesize>16384</filesize>
<byte_runs><byte_run offset="0" img_offset="517264384" len="16384"/></byte_runs>
</fileobject><fileobject>
511857664 + 2015232 = 513872896
Remembering the exact time in which my photo has been taken, I'm pretty sure that fragments of that file can be found from 513872896 and 517264384. Without header, of course (file has been partially overwritten).
Is there any way to have a raw copy of that data?
Thanks a lot.