I'm booting a PC from 'Ultimate Boot CD v5.0' media which includes a Linux-based distro of Parted Magic, which in turn includes PhotoRec v6.12. After launching Parted Magic, I am delivered to a rooted console.
I want to use PhotoRec to search for a file type that 1) is not included in the default list of recoverable file formats and 2) does not have an extension. I have run 'hexdump -C' against a sample file and received the following unique output string from the top line of the head:
Based on this output, I have created a '.photorec.sig' file in the /root directory with root:root ownership, 644 privs, and the following single line of content:
custom 0 "G\\"
Following this, when I run 'fidentify' against the sample file, I was expecting 'custom' to be outputted instead of 'unknown' to confirm that the distinctive file type would be correctly identified when PhotoRec is executed; however, I continue to receive the 'unknown' output. This makes me suspect that the .photorec.sig file is not being acknowledged. Any thoughts on how to correct my mistake(s)? Thanks for your time and attention in advance.
Using PhotoRec to recover lost data
2 posts • Page 1 of 1
- Site Admin
- Posts: 3164
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
Who is online
Users browsing this forum: No registered users and 1 guest