Page 1 of 1

Help with Photorec extension skip configuration

Posted: 17 Jan 2022, 14:12
by Mamukata
Hi all,
after I got a Qlocker ransomware on my Qnap, I'm try to recover my files with Photorec.
I have a 30Tb strorage drive and the scan is very slow and I need that the scan skip a kind of extension.

The extension that I need to skip is .epub but I don't know how to remove this extension from the rescue process.

I run the photorec on ssh terminal on my NAS but i'm not a linux guru and also I have read the info on this page,

https://www.cgsecurity.org/wiki/Add_you ... e_recovery

I'm not able to do this customization.
Please, can someone help me about?

this is a screen of my terminal
Image

Regards

Re: Help with Photorec extension skip configuration

Posted: 17 Jan 2022, 19:23
by recuperation
It looks like an epub file is packed with zip.
You have to drop the zip format.

Re: Help with Photorec extension skip configuration

Posted: 17 Jan 2022, 20:28
by Mamukata
recuperation wrote: 17 Jan 2022, 19:23 It looks like an epub file is packed with zip.
You have to drop the zip format.
no, i need to totally skip these file in zip and .epub format.
I do a scan, that i stop, and Photorec find like 30.000 epub files, but these files is not encrypted by ransomware and i have it so I don't need that photorec detect it.

Re: Help with Photorec extension skip configuration

Posted: 17 Jan 2022, 20:38
by recuperation
Did you understand what I said?

Re: Help with Photorec extension skip configuration

Posted: 17 Jan 2022, 20:42
by Mamukata
so is not possible to drop epub and keep zip file?
you mean that photorec is able to find also the file inside the zip? in this case epub files

Re: Help with Photorec extension skip configuration

Posted: 17 Jan 2022, 21:47
by recuperation
Mamukata wrote: 17 Jan 2022, 20:42 so is not possible to drop epub and keep zip file?
No, because epub files are embedded in a zip container.
Microsoft Office docx, xlsx and pptx files use a zip container as well.

You can only select and deselect families of extensions.
If a family has just one member you are fine.
The zip families has many members, not just the ones listed above.
If you deselect the family you will suppress the recovery of each of its members.
you mean that photorec is able to find also the file inside the zip? in this case epub files
No. This is a postprocessing subject. You either program something or you do that manually.

Re: Help with Photorec extension skip configuration

Posted: 17 Jan 2022, 22:56
by Mamukata
recuperation tnx a lot