Data Recovery and Disk Utilities Forum @R-TT

Alt wrote:4. Pray that the files aren't fragmented.

Thank you!
The deleted files are on external USB drive. Does it guarantee non-fragmented write? How do I know if the files are fragmented?

I've a question:
does the second sector (Sector 1) of all VHD files contain this string at the beginning:
63 78 73 70 61 72 73 65 - FF FF FF FF FF FF FF FF ?
or a part thereof?

Exactly! I analyzed all VHD files I have in HEX editor and the second sector (Sector 1) always starts with:
63 78 73 ...

Alt wrote:I'm waiting for the next R-Studio version, it has some improvements in processing known file types. It's going to be released soon.

When the release is expected?

I would remove size="512" from the end signature.

I removed size="512" from the end and started scan again:
<?xml version="1.0" encoding="utf-8"?>
<FileTypeList>
<FileType id="113" group="Disk Images" description="Virtual PC Virtual HD Image" extension="vhd">
<Signature from="begin" offset="0 ...

VHD file has the following structure:
http://s019.radikal.ru/i621/1211/06/6951c3f5814a.png
where
512-byte signature is highlighted in blue, and
a magic part of signature (the same for all VHD files) is highlighted in yellow.

512-byte signature is unique for every VHD file, but the same at the ...

Greeting!

I try to create a custom format XML to recover a large (~200 GB) file of VHD format .
As per format, the start and end signatures of VHD file are absolutely the same and have length 512 bytes starting from "conectix" .
Here is the current version of the XML file:

<?xml version="1.0 ...