Page 1 of 1

Files lost thier names after recovery

Posted: 23 Sep 2020, 20:53
by Hima3d
Hello,
I am trying to recover a web dedicated server after all files have been deleted because of a hack. The website was in WordPress and I need to recover the whole directory /home/web/www
When I recover the files (600k files) I found that names of the files have been changed (for example, it became f1522512.JPG), also the name of the directory. Is there anyway to recover with the same old structure

Re: Files lost thier names after recovery

Posted: 23 Sep 2020, 21:30
by recuperation
You used Photorec which is the recovery program of last resort that comes at a price of loosing file names and folder information.
Please use Testdisk first.

Re: Files lost thier names after recovery

Posted: 23 Sep 2020, 21:38
by Hima3d
Actually I used testdisk

Re: Files lost thier names after recovery

Posted: 23 Sep 2020, 21:42
by recuperation
In that case the attacker changed your files so that they resemble the Photorec naming convention.
If this is an individual hack you won't be able to restore the original file names.
If this is an ransomware attack, you sometimes find descriptions on the net how to deal with some known encrypting attacks.
Otherwise I do not see a chance for file name and folder name recovery.