by abolibibelot » Fri Sep 18, 2020 2:14 am
The blue square / rectangle, if I'm not mistaken, means that the file was also detected by the file signature search method and therefore appears as a link under “Extra found files” (right-clicking on it should show a “Links” context menu, then clicking on the file name directly leads to the linked file). Indeed, in most cases, if a file of a type that was selected for signature search during the scan appears in “Root” without the blue thingy, the file is probably corrupted / overwritten (at least its header – even a single overwritten cluster at the beginning renders the file undetectable, and generally unreadable, unless it's a text file or something similar).
But it can also happen that a file of a supposed type, for instance PDF, appears with a link to “Extra found files” as another file type (for instance it's been replaced by the beginning of a MP4 video file, and the PDF appears in the “MP4” virtual directory under “Extra found files”), and is therefore no longer recoverable as a PDF. All the files identified in “Root” that do appear in the “Adobe PDF document” directory, however, should be readable (unless they have been partially overwritten at another location than the header and are too damaged to be opened).
The blue square / rectangle, if I'm not mistaken, means that the file was also detected by the file signature search method and therefore appears as a link under “Extra found files” (right-clicking on it should show a “Links” context menu, then clicking on the file name directly leads to the linked file). Indeed, in most cases, if a file of a type that was selected for signature search during the scan appears in “Root” without the blue thingy, the file is probably corrupted / overwritten (at least its header – even a single overwritten cluster at the beginning renders the file undetectable, and generally unreadable, unless it's a text file or something similar).
But it can also happen that a file of a supposed type, for instance PDF, appears with a link to “Extra found files” as [i]another[/i] file type (for instance it's been replaced by the beginning of a MP4 video file, and the PDF appears in the “MP4” virtual directory under “Extra found files”), and is therefore no longer recoverable as a PDF. All the files identified in “Root” that do appear in the “Adobe PDF document” directory, however, should be readable (unless they have been partially overwritten at another location than the header and are too damaged to be opened).