Hi, I'm new on this forum; sadly I have got a problem (I think it's related to motherboard age considering that laptop have 16 years) and while I was copying files from my new notebook to old notebook on a usb pendrive of 512 GB with realvnc, the notebook (or the realvnc) crashes, I don't know how but usb pendrive cannot be read and windows suggest me to repair with check disk. This was not enough, so before to use testdisk I have exctracted files with Tenorshare 4DDiG. Now some files are exctract correctly, other not. So the first question is:
1. it's possible add a feature both to photorec that qphotorec that, reading all that is possible on NTFS or exfat file table, can list all the files with path and near to filename show the sector ranges that contains the file and exctract that to a file txt ? In this case, if a file is stored in contiguos sectors (so one sector range), I can be sure that isn't damaged.
The second question is the following: if I have made a previous backup of some files, it's possible make a table with sha512 code of all sectors of pendrive and, give in input to testdisk files that I'm sure that integrity check is true, split the file in part of size of file table cluster, made a check of contiguos sector (verified by contiguos sha512 codes) with sha512 codes calculated from file? In such case, with canvas recovery, it's useful to exclude sector from scan that are knowed contains data that are already recovered and reduce the probability of recover damaged files (moreover exclude sector that contain file more smaller of their size, exclude sectors that can be read from ntfs/exfat table).
Hope that I have explained clearly my idea
Request of exctraction of range sector and optimization to scan device and recover files
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
recuperation
- Posts: 3181
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Request of exctraction of range sector and optimization to scan device and recover files
PhotoRec is the last line of defense. It is to be used when metadata is lost or dammaged. Therefore metadata like file name, folder paths are not available. PhotoRec is useless in your scenario. If metadata exists you can use TestDisk to browse the partition and select files and folders to be recovered.Dioxide wrote: Yesterday, 17:00 Hi, I'm new on this forum; sadly I have got a problem (I think it's related to motherboard age considering that laptop have 16 years) and while I was copying files from my new notebook to old notebook on a usb pendrive of 512 GB with realvnc, the notebook (or the realvnc) crashes, I don't know how but usb pendrive cannot be read and windows suggest me to repair with check disk. This was not enough, so before to use testdisk I have exctracted files with Tenorshare 4DDiG. Now some files are exctract correctly, other not. So the first question is:
1. it's possible add a feature both to photorec that qphotorec that, reading all that is possible on NTFS or exfat file table, can list all the files with path and near to filename show the sector ranges that contains the file and exctract that to a file txt ? In this case, if a file is stored in contiguos sectors (so one sector range), I can be sure that isn't damaged.
Unfortunately no. Typically if I don't understand a question upon the first time I read it, chances are big that rereading the text a couple of times does not provide more insight. This applies to your second question. Think about formatting your text in sections and avoid run-on sentences.
The second question is the following: if I have made a previous backup of some files, it's possible make a table with sha512 code of all sectors of pendrive and, give in input to testdisk files that I'm sure that integrity check is true, split the file in part of size of file table cluster, made a check of contiguos sector (verified by contiguos sha512 codes) with sha512 codes calculated from file? In such case, with canvas recovery, it's useful to exclude sector from scan that are knowed contains data that are already recovered and reduce the probability of recover damaged files (moreover exclude sector that contain file more smaller of their size, exclude sectors that can be read from ntfs/exfat table).
Hope that I have explained clearly my idea
I have a vague idea what you mean here:
There is no double assignment of clusters to recovered files.it's useful to exclude sector from scan that are knowed contains data that are already recovered
PhotoRec does not only recover files. It provides you with file location information. Please read:
https://www.cgsecurity.org/testdisk_doc/photorec.html
Photorec generates a file named "report.xml". That contains a wealth of information you are probably looking for.
In subsection 11.12 there is a description how to read it.