RAW ISO Recovery

Post a reply


This question is a means of preventing automated form submissions by spambots.
Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:

BBCode is ON
[img] is ON
[url] is ON
Smilies are ON

Topic review
   

Expand view Topic review: RAW ISO Recovery

Re: RAW ISO Recovery

by abolibibelot » Tue Jun 02, 2020 8:31 pm

A bit late but it may help someone some day... If the files are contiguous, Photorec is quite efficient at carving ISO files, provided that all other file types are unchecked in “File opt” (otherwise, since ISO files typically contain files of various types, it might truncate each ISO file as soon as it encounters a header of a another file type currently enabled).

Re: RAW ISO Recovery

by dd_recovery » Thu Jan 16, 2020 1:47 pm

Many thanks.

Re: RAW ISO Recovery

by Alt » Thu Jan 16, 2020 11:53 am

Sorry for the delay, we needed some time to give you the answer.
You may use this file type description to find iso files

Code: Select all

<?xml version="1.0" encoding="UTF-8"?>
<FileTypeList version="2.0">
    <FileType id="50001" group="ISO" description="ISO image" features="" extension="iso">
        <Begin combine="AND">
            <Signature offset="32769">CD001</Signature>
            <Signature offset="34817">CD001</Signature>
            <Signature offset="36865">CD001</Signature>
        </Begin>
        <End combine="OR"/>
    </FileType>
</FileTypeList>
But, frankly speaking, as you pointed out that those files are fragmented, I think you'll be able to find only the beginning of the files.

Re: RAW ISO Recovery

by dd_recovery » Thu Jan 16, 2020 10:00 am

Any response moderator?

RAW ISO Recovery

by dd_recovery » Tue Jan 14, 2020 10:33 am

I have a clients 8TB drive formatted NTFS with a reported 5TB of data. He installed Media Creation Tool on the drive by mistake so the first 32GB of the drive have been wiped. Therefore this will be a RAW recovery. The client has several ISOs on the drive he would like to get back. As these files are large they are likely very fragmented so recovery will be difficult, but we have to try. However R-Studio does not find any ISO signatures on the drive at all which with 5TB of data seems strange. I see ISO is not a default known file type in settings, so is it just missing the ISO file signature.

Top