problems files recover with testdisk Topic is solved

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Blixa
Posts: 3
Joined: 20 Sep 2020, 13:19

problems files recover with testdisk

#1 Post by Blixa »

hello. i just recovered very important files on a unreadable partition, but many of them have a .hdpvsbm extension and its impossible to read, even if i change it (i.e. pic.jpg.hdpvsbm). any suggestion? thanks
recuperation
Posts: 3030
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: problems files recover with testdisk

#2 Post by recuperation »

Blixa wrote: 20 Sep 2020, 22:55 hello. i just recovered very important files on a unreadable partition, but many of them have a .hdpvsbm extension and its impossible to read, even if i change it (i.e. pic.jpg.hdpvsbm). any suggestion? thanks
Did you use Testdisk or rather Photorec?
Blixa
Posts: 3
Joined: 20 Sep 2020, 13:19

Re: problems files recover with testdisk

#3 Post by Blixa »

hello, thanks fr the answer. i used testdisk cause with testdisk i found the backup folder i had prepared before the damage happened. so I was able to save the entire content, but many files came with taht extension. using photorec I don't have this possibility, but only search for certain files on the whole disk (i.e. *.jpg). now I am making this attempt but it has been working for about 12 hours and I still haven't been able to verify the result.
recuperation
Posts: 3030
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: problems files recover with testdisk

#4 Post by recuperation »

I don't know this file extension and can't find information about it.
Testdisk does not change file names. They must have been there before.

For me it appears as the result of a ransomware attack.
When you say "unreadable" partition do you mean that the partition as a whole is not accessible anymore?

Usually the attackers leave a message somewhere or when the drive with the OS is affected you get a notification your screen.

To access your files you probably will have to reverse some kind of encryption. Removing the new part of the extension is not enough.
Blixa
Posts: 3
Joined: 20 Sep 2020, 13:19

Re: problems files recover with testdisk

#5 Post by Blixa »

you were right... when i have read "Testdisk does not change file names" i understood. i had some problems some days ago, and probably the files got corrupted a few days ago and I didn't notice it. testdisk did a good job. thanks so much, you were really helpful
Locked