photorec.sig not working

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
DBaciu
Posts: 3
Joined: 24 Apr 2016, 19:37

photorec.sig not working

#1 Post by DBaciu »

Hello everybody.
I'm trying to recover some files from a hard-drive with an accidentally deleted partition.
The files (3d and 2d grafic files) are not recognized by Photorec by default.
I tried to follow the instructions from http://www.cgsecurity.org/wiki/Add_your ... o_PhotoRec
but nothing seems to work. Please help!
I've got the file signatures by opening them with a hex editor and I've put them in a photorec.sig file, but they are not recognized.
These are the signatures:




fbx (max, maya, daz studio style)
4B 61 79 64 61 72 61 20 46 42 58 20 42 69 6E 61 72 79 20 20 00 1A 00

ASCII Size: 23 Bytes
Offset: 0 Bytes




fbx (houdini style)
70 72 6F 6A 65 63 74 20 66 69 6C 65 0A 3B 20 43 6F 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 37 2D 32 30 31 30 20

ASCII Size: 39 Bytes
Offset: 12 Bytes




geo
5B 0A 09 22 66 69 6C 65 76 65 72 73 69 6F 6E 22 2C 22

ASCII Size: 18 Bytes
Offset: 0 Bytes



bgeo
7F 4E 53 4A 62 5B 2B 00 0B 66 69 6C 65 76 65 72 73 69 6F 6E 26 00 2B 01 08

ASCII Size: 25 Bytes
Offset: 0 Bytes




EXR
76 2F 31 01 02 00 00 00

ASCII Size: 8 Bytes
Offset: 0 Bytes




RGB 01 DA 01 01 00 03 Silicon Graphics RGB Bitmap
ASCII Size: 6 Bytes
••••• Offset: 0 Bytes


HDR 23 3F 52 41 44 49 41 4E 43 45 Radiance High Dynamic Range image file
ASCII Size: 10 Bytes
#?RADIANCE Offset: 0 Bytes




PIC Houdini picture format
50 49 43 32 03 00 00 00

ASCII Size: 8 Bytes
Offset: 0 Bytes




rat (H13) Houdini picture format
74 61 72 48 00 05 D0 02 01 04 04 0A 01 00 00 00 78 29 00 00

ASCII Size: 20 Bytes
Offset: 0 Bytes




rat (H15) Houdini picture format
66 62 74 48 05 00 00 00

ASCII Size: 8 Bytes
Offset: 0 Bytes





tx Prman texture
49 49 2A 00

ASCII Size: 4 Bytes
Offset: 0 Bytes




tx (Pixar format) Prman texture
CE FA 03 00 00 10 00 04 01 08 00 0E

ASCII Size: 12 Bytes
Offset: 0 Bytes




tx (OpenExr format) Prman texture
76 2F 31 01 02 02 00 00 50 69 78 61 72 54 65 78 74 75 72 65 46 6F 72 6D 61 74 00

ASCII Size: 27 Bytes
Offset: 0 Bytes





hip
30 37 30 37 30 37 30 30 30 30 30 31 30 30 30 30 30 30 30 30 30 36 36 36 30 30

ASCII Size: 26 Bytes
Offset: 0 Bytes





hipnc
48 6F 75 4E 43 1A 31 30 33 33 36 30 30 62 61 61 30

ASCII Size: 17 Bytes
Offset: 0 Bytes




otl
49 4E 44 58 00 00 00 00 00 00 00 00 00 00 00

ASCII Size: 15 Bytes
Offset: 0 Bytes
00 00 00 0D 49 4E 44 45 58 5F 53 45 43 54 49 4F 4E 00 00 00 00 00 00

ASCII Size: 23 Bytes
Offset: 16 Bytes



rib (maya)
23 23 52 65 6E 64 65 72 4D 61 6E 20 52 49 42 0A

ASCII Size: 16 Bytes
Offset: 0 Bytes

rib (houdini)
23 23 52 49 42 0A 76 65 72 73 69 6F 6E 20
ASCII Size: 14 Bytes
Offset: 0 Bytes



ma
2F 2F 4D 61 79 61 20 41 53 43 49 49 20

ASCII Size: 13 Bytes
Offset: 0 Bytes


obj Maya 2015 exporter
23 20 54 68 69 73 20 66 69 6C 65 20 75 73 65 73 20
ASCII Size: 17 Bytes
Offset: 0 Bytes


obj Max exporter
23 20 33 64 73 20 4D 61 78 20 57 61 76 65 66 72 6F 6E 74 20 4F 42 4A 20 45 78 70 6F 72 74 65 72 20 76 30 2E 39 37 62
ASCII Size: 39 Bytes
Offset: 0 Bytes

obj Houdini exporter
23 20 46 69 6C 65 20 65 78 70 6F 72 74 65 64 20 62 79 20 48 6F 75 64 69 6E 69 20
ASCII Size: 27 Bytes
Offset: 0 Bytes






I've tried this on a CentOs sistem, I've put the photorec.sig file in the home folder but it's not working.
This is the content of the photorec.sig file that I've made:




fbx 0 4B617964617261204642582042696E6172792020001A00

fbxhou 12 70726F6A6563742066696C650A3B20436F707972696768742028432920313939372D3230313020

geo 0 5B0A092266696C6576657273696F6E222C22

bgeo 0 7F4E534A625B2B000B66696C6576657273696F6E26002B0108

exr 0 762F310102000000

hdr 0 233F52414449414E4345

pic 0 5049433203000000

rat13 0 746172480005D0020104040A0100000078290000

rat15 0 6662744805000000

tx 0 49492A00

txpix 0 CEFA0300001000040108000E

txexr 0 762F310102020000506978617254657874757265466F726D617400

hip 0 3037303730373030303030313030303030303030303636363030

hipnc 0 486F754E431A3130333336303062616130

otl 16 0000000D494E4445585F53454354494F4E000000000000

ribmaya 0 232352656E6465724D616E205249420A

ribhoudini 0 23235249420A76657273696F6E20

ma 0 2F2F4D61796120415343494920

obj 0 2320546869732066696C65207573657320

objmax 0 2320336473204D6178205761766566726F6E74204F424A204578706F727465722076302E393762

objhou 0 232046696C65206578706F7274656420627920486F7564696E6920

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: photorec.sig not working

#2 Post by cgrenier »

You have forgotten the "0x" before each hexadecimal value.

Code: Select all

fbx 0 0x4B617964617261204642582042696E6172792020001A00
fbxhou 12 0x70726F6A6563742066696C650A3B20436F707972696768742028432920313939372D3230313020
geo 0 0x5B0A092266696C6576657273696F6E222C22
bgeo 0 0x7F4E534A625B2B000B66696C6576657273696F6E26002B0108
exr 0 0x762F310102000000
hdr 0 0x233F52414449414E4345
pic 0 0x5049433203000000
rat13 0 0x746172480005D0020104040A0100000078290000
rat15 0 0x6662744805000000
tx 0 0x49492A00
txpix 0 0xCEFA0300001000040108000E
txexr 0 0x762F310102020000506978617254657874757265466F726D617400
hip 0 0x3037303730373030303030313030303030303030303636363030
hipnc 0 0x486F754E431A3130333336303062616130
otl 16 0x0000000D494E4445585F53454354494F4E000000000000
ribmaya 0 0x232352656E6465724D616E205249420A
ribhoudini 0 0x23235249420A76657273696F6E20
ma 0 0x2F2F4D61796120415343494920
obj 0 0x2320546869732066696C65207573657320
objmax 0 0x2320336473204D6178205761766566726F6E74204F424A204578706F727465722076302E393762
objhou 0 0x232046696C65206578706F7274656420627920486F7564696E6920

DBaciu
Posts: 3
Joined: 24 Apr 2016, 19:37

Re: photorec.sig not working

#3 Post by DBaciu »

It is really needed? This is what it says here http://www.cgsecurity.org/wiki/Add_your ... o_PhotoRec
quote:


The signature can be written as

pfi 0 "PhotoFiltre Image"

or

pfi 0 "PhotoFiltre", 0x20, "Image"

or if you prefer hexadecimal

pfi 0 0x50686f746f46696c74726520496d616765


I tried one of the signatures written like this (with 0x before each hexa value) but that didn't worked either.

DBaciu
Posts: 3
Joined: 24 Apr 2016, 19:37

Re: photorec.sig not working

#4 Post by DBaciu »

Nevermind, apparently it's working now. I don't know what I did for this, the only thing that I know of is a system restart...

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: photorec.sig not working

#5 Post by cgrenier »

BTW if you want the signature to be integrated to the main version, please send me 3 file sample for each extension.

Locked