[Wolves] NTFS deleted file recovery

[Broadfield Robert]

Soz leo
 
Don't include the $ signs at the start of filenames when in DOS - I'm
getting confused (sign of age).  Command prompt from Windoze - Start -> Run
- (type cmd in box) click OK.
 
If you want to use Linux I can't help with shell script especially since I
don't know the format of the file command and how to get filenames/types
from it and pass these to an mv command - maybe best to use a pipe or type
commands in at command line rather than shell script.  Ron may be able to
help. As regards running any script against these files - it's probably best
to run it on copies in a new directory.  Maybe putting all your files back
into one directory would help you sort them easier after renaming anyway.
File permissions may be a consideration as well so any shell script may need
a chmod or two unless run as root - now I know I'm babbling/blagging LOL.
 
Rob
 
 -----Original Message-----
From: Broadfield Robert [mailto:BroadfieldR at walsall.gov.uk] 
Sent: 16 October 2006 10:38
To: 'Wolverhampton Linux User Group'
Subject: RE: [Wolves] NTFS deleted file recovery



Have you tried renaming in DOS?  Find the command prompt, then find the
directory where you stored the files using cd.  The command is as follows:
 
ren $oldfilename $newfilename
 
Obviously, just changing file extension in each case.
 
I have used this before to change file extensions and it does work.
 
I'm new to Linux so not sure whether the mv command would work the same way.
If it does, and you wanted to save time, you might be able to write a shell
script using "file" to test for the filetype and mv to create a file with
the correct extension in each case.
 
Rob
 
 -----Original Message-----
From: leo sandhu [mailto:leosandhu at gmail.com] 
Sent: 15 October 2006 23:36
To: Wolverhampton Linux User Group
Subject: Re: [Wolves] NTFS deleted file recovery



It's not worked :(   I have already seperated all the files into seperate
directories based upon size and the alleged extension.  Running *.* is
simply  confirming  that the files are sorted correctly :S 

Still very few of them are actually  opening and the  huge files are still
insisting to be .doc files.  Is it possible that they are some form of temp
file created by M$ Office?? 

:'(

Ron said>>>

Mount the disk under Linux (ubuntu live CD?), open up a shell and run
"file" against the files e.g. "file *.*" this will at least identify if
the file is a PDF, Office document, mpeg, iso whatever based on the 
content of the file instead of the extension.

HTH

<<<<






leo sandhu wrote:
>
> Does anybody know about manipulating file headers?
>
> In the end I used PhotoRec and succesfully recovered 36GB of data from
> the old 40Gb drive.  The problem now is that although I requested only a 
> few  file types -  .pdf .doc .ppt .xl ; the stupid thing has actually
> recovered what looks like every file on that hard disk outside of the
> main "windows" directory and liberally distributed a file extension 
> based upon what seems to be luck of the draw.
>
> This means I now have doc files that are 640mb in size.  Me thinks these
> seem likely to be either MPG or iso files and are easily ignored.
> However, actually sifting through the thousands of remaining files is
> worse than drowning in custard.  There is some 20Gb of files under 10mb
> in size,
>
> Please, can anyone tell me a way to easily (or at least more sensibly) 
> filter these files, maybe try to reallocate file extensions and check
> for integrity?
>
> please :S please :S





-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.lug.org.uk/pipermail/wolves/attachments/20061016/b1ac931c/attachment.html