cgsecurity.org

Hello there!

I had a disk with encrypted photos due to a ransomware.
Now, thanks to Photorec due to which I am able to recover all the files from it.
A HUGE THANKS!

Now, I have a question, while recovering the files from the disk, photorec is converting the 1620x1080 HD images into two images.
One with 640x420 resolution and one with original resolution as I mentioned above.
Also, it's reducing their size drastically for eg the 10MB images to 600kb - 800kb.

Any solutions on how to fix the issue so that only the photo with original resolution will be recovered? Also, will the change in size affect the photo quality?

Thanks and regards,
Hrishikesh Kelkar.

typehrishi wrote: 22 Aug 2024, 17:51 Hello there!

I had a disk with encrypted photos due to a ransomware.
Now, thanks to Photorec due to which I am able to recover all the files from it.
A HUGE THANKS!

Unfortunately PhotoRec cannot recover encrypted content. It should not find anything as everything that is part of a fingerprint will be encrypted as well and not recognizable anymore. It is possible that your ransomware only encrypted parts of your files to speed up the encryption process.

Now, I have a question, while recovering the files from the disk, photorec is converting the 1620x1080 HD images into two images.
One with 640x420 resolution and one with original resolution as I mentioned above.
Also, it's reducing their size drastically for eg the 10MB images to 600kb - 800kb.

Any solutions on how to fix the issue so that only the photo with original resolution will be recovered? Also, will the change in size affect the photo quality?

Thanks and regards,
Hrishikesh Kelkar.

The little pictures that PhotoRec recovered may be preview pictures. There might be one for every big picture.

Do some research to see if the encryption scheme of your ransomware has been broken and if there is a software that is reversing this encryption process.