Photorec converting one photo to two.

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
typehrishi
Posts: 1
Joined: 22 Aug 2024, 17:44

Photorec converting one photo to two.

#1 Post by typehrishi »

Hello there!

I had a disk with encrypted photos due to a ransomware.
Now, thanks to Photorec due to which I am able to recover all the files from it.
A HUGE THANKS!

Now, I have a question, while recovering the files from the disk, photorec is converting the 1620x1080 HD images into two images.
One with 640x420 resolution and one with original resolution as I mentioned above.
Also, it's reducing their size drastically for eg the 10MB images to 600kb - 800kb.

Any solutions on how to fix the issue so that only the photo with original resolution will be recovered? Also, will the change in size affect the photo quality?

Thanks and regards,
Hrishikesh Kelkar.
recuperation
Posts: 3028
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Photorec converting one photo to two.

#2 Post by recuperation »

typehrishi wrote: 22 Aug 2024, 17:51 Hello there!

I had a disk with encrypted photos due to a ransomware.
Now, thanks to Photorec due to which I am able to recover all the files from it.
A HUGE THANKS!
Unfortunately PhotoRec cannot recover encrypted content. It should not find anything as everything that is part of a fingerprint will be encrypted as well and not recognizable anymore. It is possible that your ransomware only encrypted parts of your files to speed up the encryption process.

Now, I have a question, while recovering the files from the disk, photorec is converting the 1620x1080 HD images into two images.
One with 640x420 resolution and one with original resolution as I mentioned above.
Also, it's reducing their size drastically for eg the 10MB images to 600kb - 800kb.

Any solutions on how to fix the issue so that only the photo with original resolution will be recovered? Also, will the change in size affect the photo quality?

Thanks and regards,
Hrishikesh Kelkar.
The little pictures that PhotoRec recovered may be preview pictures. There might be one for every big picture.

Do some research to see if the encryption scheme of your ransomware has been broken and if there is a software that is reversing this encryption process.
Locked