EHCanadian Posted December 17, 2008 Share Posted December 17, 2008 I've got this odd problem. I can delete something and atempt to recover it. But its not whats listed. Example. ImageLeft.jpg isn't ImageLeft.jpg but some other file that name was not even close, Like index.php. The only way to confirm whats a image or a text file or even a application is to atempt to make sence of the header Attached Image Windows Server 2003 Enterprise Slipstreamed SP2 AMD 3000+ @ 2.2GHZ 2GB DDR Kingston Link to comment Share on other sites More sharing options...
Moderators Augeas Posted December 17, 2008 Moderators Share Posted December 17, 2008 The filenames seem OK to me. Do you mean that the filenames are correct but the content isn't? If the filenames have changed then how do you know what to look at? Only menuboxleft appears to have the correct header for a jpg file, the other two look as if they've been overwritten. Unfortunately this is what can happen, quite quickly too. Link to comment Share on other sites More sharing options...
EHCanadian Posted December 17, 2008 Author Share Posted December 17, 2008 I understand that. But for some odd reason the filename and content didn't match but was marked as execelent. Also the path has a ? in it. Would it not be classed as a orange status as its recoverable just not what the filename says. Link to comment Share on other sites More sharing options...
Moderators Augeas Posted December 17, 2008 Moderators Share Posted December 17, 2008 How would a piece of software know that? Recuva can only make a guess at the state of the file based on what I imagine are some fairly basic assumptions, whether the data has been overwritten, etc. Recuva will recover whatever data is in the clusters pointed to by the file entry in the MFT, it can't possibly analyse the data itself, well, not a lot. I wouldn't put too much trust the in the state of the file field. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now