[Wolves] NTFS deleted file recovery

Broadfield Robert BroadfieldR at walsall.gov.uk
Mon Oct 16 10:38:18 BST 2006

Have you tried renaming in DOS?  Find the command prompt, then find the
directory where you stored the files using cd.  The command is as follows:
ren $oldfilename $newfilename
Obviously, just changing file extension in each case.
I have used this before to change file extensions and it does work.
I'm new to Linux so not sure whether the mv command would work the same way.
If it does, and you wanted to save time, you might be able to write a shell
script using "file" to test for the filetype and mv to create a file with
the correct extension in each case.
 -----Original Message-----
From: leo sandhu [mailto:leosandhu at gmail.com] 
Sent: 15 October 2006 23:36
To: Wolverhampton Linux User Group
Subject: Re: [Wolves] NTFS deleted file recovery

It's not worked :(   I have already seperated all the files into seperate
directories based upon size and the alleged extension.  Running *.* is
simply  confirming  that the files are sorted correctly :S 

Still very few of them are actually  opening and the  huge files are still
insisting to be .doc files.  Is it possible that they are some form of temp
file created by M$ Office?? 


Ron said>>>

Mount the disk under Linux (ubuntu live CD?), open up a shell and run
"file" against the files e.g. "file *.*" this will at least identify if
the file is a PDF, Office document, mpeg, iso whatever based on the 
content of the file instead of the extension.



leo sandhu wrote:
> Does anybody know about manipulating file headers?
> In the end I used PhotoRec and succesfully recovered 36GB of data from
> the old 40Gb drive.  The problem now is that although I requested only a 
> few  file types -  .pdf .doc .ppt .xl ; the stupid thing has actually
> recovered what looks like every file on that hard disk outside of the
> main "windows" directory and liberally distributed a file extension 
> based upon what seems to be luck of the draw.
> This means I now have doc files that are 640mb in size.  Me thinks these
> seem likely to be either MPG or iso files and are easily ignored.
> However, actually sifting through the thousands of remaining files is
> worse than drowning in custard.  There is some 20Gb of files under 10mb
> in size,
> Please, can anyone tell me a way to easily (or at least more sensibly) 
> filter these files, maybe try to reallocate file extensions and check
> for integrity?
> please :S please :S

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.lug.org.uk/pipermail/wolves/attachments/20061016/20eb8841/attachment-0001.html

More information about the Wolves mailing list