Using PhotoRec to recover lost data
Posts: 2
Joined: 19 Jul 2012, 03:00


#1 Postby MAFCLEAN » 19 Jul 2012, 03:07

I have explored Rucuva and now...testdisk plus Photorec but I am not able to determine if the programs are actually looking for gdb and gpx extension files...
I have tried to figure out how to add custom signatures to Photorec but frankly...the command prompt window, etc, is beyond my skillset.

I formatted my hard drive and reinstalled windows.
I forgot to backup Garmin gpx and gdb files ...holy S*** batman!
I am screwed!

any help appreciated....

Sponsored links

Posts: 2
Joined: 19 Jul 2012, 03:00


#2 Postby MAFCLEAN » 22 Jul 2012, 05:37

I have spent several days now turning this problem around.
(Over 100 views but no replies to my post on bleepingcomputer.)
It seems that the gpx xml files may be tough to search with photorec.
But what about gdb?
I have looked at the hex info with several readers and seems likely that a photorec.sig file could be added for gdb files.
The info seems to be in the first line, 0 offset...
And I don't know how to work fidentify.
I have created various text file versions of a photorec.sig file and placed them in the testdisk folder.
gdb 0 0x4D735263660002
gdb 0 0x4D 0x73 0x52 0x63 0x66 0x00 0x02
gdb 0 0x4D73526366
gdb 0 0x4D 0x73 0x52 0x63 0x66
gdb 0 "MsRcf"


I also tried to introduce a test, using similar approach with hex info from pdf files.
I even tried punching in the example signature from the instruction page
http://www.cgsecurity.org/wiki/Add_your ... o_PhotoRec
I have been clicking the fidentify_win file, and it seems to open a command window, scan the files in the folder, generate a text file, and vanish.
The text file at first gave me an ms-dos error, which was resolved by searching and finding a fix regarding environment variables.
But, I have not generated any response so far regarding the various .sig text files that I have tried.

Obviously I am missing a lot here.
Is it something really really basic?
Do I have to run fidentify from a command prompt?
I am not getting any result, no "unknown" or "?gdb" or goodtogo...nothing.


4D 73 52 63 66 00 02 00 00 00 44 6D 00 1B 00 00 00 41 67 02 73 71 61 00 46 65 62 20 20 39 20 32 30 30 39 00 31 31 3A 33 31 3A 33 30 00 4D 61 70 53 6F 75 72 63 65 00 70 00 00 00 57 20 30 31 31 4C 64 73 00 00 00 00 00 00 00 00 00 00 FF

User avatar
Site Admin
Posts: 3070
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France


#3 Postby cgrenier » 31 Aug 2012, 09:24

The signature looks ok. Please send me a few file samples, I will try to add the signature directly in PhotoRec.

Return to “File recovery”

Who is online

Users browsing this forum: No registered users and 0 guests