Photorec recovers moov atoms

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
MartinaVC
Posts: 1
Joined: 17 Mar 2015, 17:34

Photorec recovers moov atoms

#1 Post by MartinaVC »

Hey evereybody,

I've used PhotoRec to recover some .mov-files from a 500GB HDD. It found several files and named them with numbers (e.g. f36193751.mov), but also some files with an additional _moov oder _ftyp on it (e.g. f41084749_moov.mov and f28480574_ftyp.mov). The ones with the _ftyp at the ends are actually playing but the '_moov'-ones produce a black picture in my player in the duration of the video.

I'm assuming, that _moov and _ftyp are refering to the mov-container. Do you think there is any way, that I can reproduce the videos from the _moov.mov files? Unfortunately there are no equal number in the filenames.
Some additional infos: there are also .java, .plist, .xml, .apple, .gz, .sqlite, .MYI in the recovered folder, but honeslty I have no clue what to do with it.

I would be really thankful, if you can help me with that!

Cheers
Martina

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Photorec recovers moov atoms

#2 Post by cgrenier »

Usually the first atom of the video file is a ftyp. Due to data fragmentation, PhotoRec is unable to find the first fragment of some files and only find the second one. Without a manual data recovery, it's usually impossible to find the missing fragment.

Locked