Jump to content
Piriform Community Forums
Kingsley

Cannot recover file as it has no filename

Recommended Posts

Hey guys.

I have a 80GB file that appears in Recuva after a deep scan, but I cannot recover it as it has no filename. I know what the filename originally was. But There's nowhere for me to put that information.

Any help would be hugely appreciated!

recover e.PNG

Share this post


Link to post
Share on other sites

I've never seen a file found with any scan not have a name, so I din't know what's happening there. There's no way to rename a file during recovery. What's the message when you try to recover it?

Is it a file that you just 'found', or is it a file you know about? After all you would probably know if you had lost an 80gb file, but if you didn't know you had one then it probably isn't worth worrying about.

PS I think I might have had some no-name files right at the end of a deep scan, but they were of no significance so I ignored them.

Share this post


Link to post
Share on other sites

Thanks for the reply!

The error it gives me is: "The filename, directory name, or volume label syntax is incorrect.".

 

Some back story:
I had issues installing my AV (NOD32), and they recommended doing a system scan (the guy remoted into my PC at the time and performed it). It discovered a "potentially unwanted application" inside a 80GB .zip backup of my partners laptop (which includes pictures of the kids between 0-2 years)

It seems like it did a "secure overwrite" as I was unable to use other software to recover it. (which could also explain why the "Header" tab is all zero'd out).

So I know the contents of the file, the original file name etc. and it's there with no overwritten clusters, I just can't recover it :(

Share this post


Link to post
Share on other sites

These a/v's are getting too big for their boots.

You could run a hex editor such as HxDen and using Recuva's cluster number work out the start sector, go there and have a look at the following sectors to see if there's anything actually there apart from zeroes. You could use the start and end sectors and copy all 80 gb elsewhere but there will be some head-scratching maths involved.

If the header is zeroed then the chances of any application apart from wordpad opening what you've recovered is very slight. You could also try a data recovery specialist.

Share this post


Link to post
Share on other sites

How can I get the cluster number?

I'm really impressed it found the file, even after the secure overwrite obliterated the "this is a .zip file" section of it.

Share this post


Link to post
Share on other sites

If you've run the Wizard switch to Advanced Mode. Highlight the file then look at the Info pane on the right. The cluster numbers will be listed in decimal. This is an onerous task with little chance of recovering data.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×