| Author | Message | ||
     Robert (Rsmcomp) |
Hello, I copied an entire CD-R as a single "raw" data file to my hard drive(538mb). Now I would like to extract all the JPG's that are within this file. When I search and count HEX 4a494649(JFIF) I get 1956 as the result. When I do a File Retrieval using 4a494649, Offset of 6 and file size of 100000 I only get 9 files. I have also tried using 4a494649 as the footer, but then I get NO files. When I use the Position data and manually mark the data between two occurrences 4a494649 I get a valid JPG file. The JPG files I have been able to recover range in size from 38kb to 81kb. I have tried many variations of the automated File Retrieval function. I either get the same 9 files or no files. Any ideas as to why I cannot automatically extract the 1956 files or what I can to do TO extract these files? | ||
| Stefan Fleischmann (Admin) |
This is most likely because you are trying to extract the files from an image file, where WinHex cannot automatically determine important parameters such as "Sector size in bytes", "Cluster size in sectors", etc. Please check all these parameters. They are important because WinHex looks for file headers only at the beginning of a cluster. One reason why you get no files when you specify the header at the same time as the footer may be that the maximum file size specified was too small, so the footer was not found within this limit. The report log file should explain that. At any rate, you could write a script that recovers all of these files regardless of cluster boundaries, e.g. like this: Open "[name of the image file]" Assign Count 1 { //Search file header Find 0x4A464946 Down IfFound Else ExitLoop Move -6 Block1 CurrentPos Move 6 //Search next file's header Find 0x4A464946 Down IfFound Move -7 Block2 CurrentPos //Recover file CopyIntoNewFile "D:\Recovery\File +Count+.jpg" Move 8 Inc Count EndIf }[2000] (Disclaimer: I didn't try this script and cannot guarantee its correctness for this purpose.) | ||
| Julien Lavanchy |
Hello, I have a problem with my LaCie 500GB external Hard Drive, i'm running XP, and my HDD was just working fine (NTFS), yesterday i reboot my computer and now windows "see" the disc as "RAW". When i try to open it it ask me to format it wich is not an option for me... i have all my life on this HDD :-).. so can i use winhex to recover the data because it must be on the disc...so here is my question : is it possible to change the HDD Format from Raw to NTFS without formating it? or is it possible to recover my data from the Raw format transfer it to an other disc format the raw one and then copy the data back? If so, how will the files look like (file name, extension...) and last.. any idea what happen? Thanks a lot and please excuse my english (thanks to respond by mail) Best Regards Julien | ||
| Stefan Fleischmann (Admin) |
> so can i use winhex to recover the data Probably yes, either using File Recovery by Type, in case WinHex still can detect the partition as NTFS probably also using File Recovery by Name. > is it possible to change the HDD Format from > Raw to NTFS without formating it? With the approriate knowledge of disk partitioning and file systems, I think so. > any idea what happen? No, sorry. | ||
| Julien Lavanchy |
hello, Thanks a lot for your quick answer. I tried to recover my files but Winhex can't open the disc, i had an error message. [... deleted by adminstrator ...] I was thinking maybe i should format the disc in NTFS and then open it with winhex and recover the data..will it work? is it a good / bad idea? can i do something te rebuild my 160Gb of raw datat so it will look the same as before the crash or is it useless? Thanks a lot for your help Best Regards Julien | ||
| Stefan Fleischmann (Admin) |
If WinHex cannot open the logical drive any more because it is corrupt, open the physical disk instead. > I was thinking maybe i should format the disc > in NTFS and then open it with winhex and > recover the data..will it work? is it a good / > bad idea? You should try first without doing so. Either using File Recovery by Type, or in case WinHex still can detect the partition as NTFS (when you open it via the Access button menu) using File Recovery by Name. > can i do something te rebuild my 160Gb of raw > datat so it will look the same as before the > crash or is it useless? With appropriate knowledge of disk partitioning and file systems, I think so. | ||
| Gutfeld (Ultimagutti) |
Well Hello. I Have the exact same problem with a 120 gig disk. taken from a older machine and set in to the new one... it displays it as raw and ask me to format.... well have tried this before and i know the solution.. put the disk on a win2000 system go to administrate. diskmanegement. and klik on the partition marked as raw. as far as i can remember there is an tool in 2000 that can show u the admin rights of the disk. change this to all acces.. then u can move the disk to a new system.. only prob i have is that i really dont want to install 2000 just for that.. so im looking for a tool for XP that could do the same.. so if u find one please let me know.. This solved the prob on my old disk that i moved. but again i really dont want to install 2000.. hope this helps |