support for carving files from other files

Using PhotoRec to recover lost data
Message
Author
pokemon
Posts: 3
Joined: 23 Mar 2012, 05:00

support for carving files from other files

#1 Postby pokemon » 23 Mar 2012, 05:16

.

Sponsored links

User avatar
cgrenier
Site Admin
Posts: 3059
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: support for carving files from other files

#2 Postby cgrenier » 23 Mar 2012, 07:29

If you mean carving from dd or EWF image, run "photorec file.dd".
If your goal is to carve embedded files, ie jpg from a .doc,officially, you can try

Code: Select all

photorec /d recup_dir /cmd file.doc blocksize,1,fileopt,txt,disable,search
but it's not officially supported.

pokemon
Posts: 3
Joined: 23 Mar 2012, 05:00

Re: support for carving files from other files

#3 Postby pokemon » 25 Mar 2012, 04:06

yes, i want to carve embedded files. i tried with the xm filetype because the file contains xm files in it, and it doesn't recover anything.

the test file https://www.rapidshare.com/files/581506371/testfile.

also, is support for that planned?

User avatar
cgrenier
Site Admin
Posts: 3059
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: support for carving files from other files

#4 Postby cgrenier » 25 Mar 2012, 09:40

Currently xm files are detected only if they begins by the signature "Extended Module: ". It's not the case here.

pokemon
Posts: 3
Joined: 23 Mar 2012, 05:00

Re: support for carving files from other files

#5 Postby pokemon » 25 Mar 2012, 10:22

i uploaded by accident a different file containing mod tracker files (which by the way aren't supported. is support for the mod file type planned?). this is the file containing the xm files. https://www.rapidshare.com/files/3055337305/testfile2.

i checked it with a hex editor and it doesn't contain that string. it has protection.


Return to “File recovery”

Who is online

Users browsing this forum: No registered users and 1 guest