cgsecurity.org

Hello,

I am a new user of your wonderful utilities so excuse me my possible misunderstanding.
When using Photorec version 7.2 i am able to recover my documents, but their original names for some reason are lost.
For example:
- Original file "MyDocument.xlsx" recovered as f0301856.xlsx
- Original file "Mountain.png" recovered as f2292528.png

Is this an expected behaviour or i am doing something wrong? Maybe outdated version of Photorec?

Thanks

It's the expected behaviour.
TestDisk's Undelete can recover the original filenames, PhotoRec can't.
TestDisk can undelete files from FAT12/16/32, NTFS, exFAT and ext2, PhotoRec isn't limited to these filesystem and can work even if the filesystem is corrupted.

Thank you for response. Regarding to inability to recover original filenames in Photorec - is it some technical limitation of application design or you simply had no time yet to implement this feature and maybe planning it in further releases? Just interesting, because i saw that other recovery utilities were able to recover file names during deep scanning

https://www.cgsecurity.org/wiki/PhotoRec

PhotoRec ignores the file system and goes after the underlying data, so it will still work even if your media's file system has been severely damaged or reformatted.

=> no metadata evaluation => no file names

It's not a bug. It's a feature of a well-defined search strategy.
Other recovery software products are working differently.