Jump to content
Piriform Community Forums
Sign in to follow this  
gr8sphnx

My files turned XML Files

Recommended Posts

HI!

 

My flashdrive has experienced an error, I cannot use my drive unless it is formatted. And since I have a 8gb data there I installed Recuva (free version) so that I can recover my files when I format it. After formatting, I started Recuva to identify the files that I have deleted. I saw my files but have extension of XML (ex. 2x2.jpg.xml). I thought it is normal, so I clicked "recover". I went to the destination folder where my files were located but found out that the files also have XML extension. How can I bring it back to its original extension? I have videos and documents there.

 

Please see attached files for my screenshot of both seen in Recuva and my recovered files.

post-75386-0-75512900-1455103427_thumb.png

Share this post


Link to post
Share on other sites

before the XML extension is the correct one, I see some INI and JPG extensions.

have you tried renaming a file to remove the .XML and just leave the .JPG for example?

Share this post


Link to post
Share on other sites

In Recuva Advanced mode, can you post a screenshot of the Info pane, where it shows the first 100 bytes of the file.

 

What's the file system on the flash drive, FAT32?

 

What's the cluster number(s) on the files - just one will do for now.

Share this post


Link to post
Share on other sites

Select a file and show us the file header and the cluster numbers (info and header views). And a larger Recuva window with as much info as possible please.

Share this post


Link to post
Share on other sites

Maybe we ought to go back a step. What was used to format the drive? There are a few posts elsewhere where users either copying files or with encrypted files have had the .xml extension added. Does this apply in this case? Recuva does not alter file names or data at all.

 

As far as I know if a FAT32 drive is formatted the FAT tables are zeroed and rewritten, and the root directory at least would be rewritten with all user file info removed. So how did Recuva find those file names? The pic in post 1 shows the wizard being used, was a deep scan selected? The screenshot shows file names but no directory name info, those names must have come from a directory as they're not held in the file data.

 

Still need answers to post 7.

Share this post


Link to post
Share on other sites

Hi Hazelnut!

 

Thank you for the link, Yeah, my work computer has a symantec program in encrypting the files. Problem is, that computer is in my previous work. Do I have the chance to recover the original file? I have a close friend from my previous work, maybe he can give me the .exe file. It is always automatically installed whenever we plugged our devices to the computer.

Share this post


Link to post
Share on other sites

Yes H, that's one of the threads that made me think it was encryption software. As this is messy - we have to get to post 11 to find that the o/p is trying to retrieve encrypted and possibly copyrighted files from a previous workplace - I'm pulling out of this thread.

 

As an aside, why is the Recuva window in the screenshot so small? Most of the relevant info, dates, sizes, state, cluster numbers, etc.  is missing.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×