cgsecurity.org

Hi All,

Recently I have lost my database files after server (Qnap) reboot.
I need to recover the MYD files.
I know that MYD files doesn't have common file signature.

I've recreated the database from the earlier backup (on local machine) just to check if the signature changes when new data inserted and it seams like the signature bit is not changing.
I'm not sure if that means I have the signature of the file that I'm looking for.
I've tried to create a photorec.sig file and entered MYD 0 0x00010065fe00000100003101aa70010f00 which are the first 34 chars of the hexdump result.
I've saved this file into the current working directory and ~/.photorec.sig and tried to recognize with fidentify_static which always returns unknown.

I don't know what I'm missing.

Regards

MYD files have no signature because each MYD file has a different beginning.
With the signature you have created, it will probably only match the file you have used as model.

Hi cgrenier,

Thanks for your reply.
It's not even matching the model.
I'm using the same file for fidentify.

Regards
Erol

At least can anyone tell me how to make sure that the signature file is created correctly and placed to the right place on qnap?

Regards
Erol

On QNAP, the file should be named ".photorec.sig" and placed at the root of your user account.
To check if the signature is correct, run fidentify on one of the files you have created. If the signature is ok, fidentify should identify correctly the file you have created a signature for.