Re: digital forensics - recovering images from a memory card with trashed file system
On Wed, 29 Oct 2008 00:07:44 +0100 Emanoil Kotsev [EMAIL PROTECTED] wrote: thveillon.debian wrote: Micha a écrit : After my camera died on a recent trip I bought a new one (nikon s52 if it helps). Due to some bug and bad timing on button presses the camera trashed the file system somehow. Based on the number of images it can write to disk it seems that the images are still there, but what I see under the directory is some directories with trashed file names that can't be used and some files with a size of 1TB that are junk (on a 2GB card). I'm looking for a way to rescue the images (jpegs) if possible. I tried rstudio under windows but it only found some AVIs but not the images (at least using the basic settings). Are there any programs (linux, windows or mac) that may be able to recover the images, or any other way to do it? It was a new (and formated) card so that there is a chance that the images written in some order but I don't know enough about this hardware. The card is a 2GB transcend secure digital (sd) thanks Hi, with Linux I guess Tesdisk and Photorec are your best bet, photorec did a great job for me once. With windows and Mac I guess products from diskinternals.com and prosofteng.com can do a similar job through a nice gui, but they don't come for cheap. If you want win/mac freeware just have a look on softpedia.com. Tom why don't try a card reader I tried 3. I wouldn't be able to access the card at all without one ... Like I said, it's not the card that's the problem it's the file system that is ruined, and even that partially, it's the file inodes (or whatever they are called under fat) or directory entries that were junked. I'm guessing that due to some concurrent read/write without a mutex or something like that. regards -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: digital forensics - recovering images from a memory card with trashed file system
On Tue, Oct 28, 2008 at 22:36:28 +0200, Micha ([EMAIL PROTECTED]) wrote: After my camera died on a recent trip I bought a new one (nikon s52 if it helps). Due to some bug and bad timing on button presses the camera trashed the file system somehow. Based on the number of images it can write to disk it seems that the images are still there, but what I see under the directory is some directories with trashed file names that can't be used and some files with a size of 1TB that are junk (on a 2GB card). I'm looking for a way to rescue the images (jpegs) if possible. I tried rstudio under windows but it only found some AVIs but not the images (at least using the basic settings). Are there any programs (linux, windows or mac) that may be able to recover the images, or any other way to do it? It was a new (and formated) card so that there is a chance that the images written in some order but I don't know enough about this hardware. The card is a 2GB transcend secure digital (sd) I seem to remember that this Windows freeware may do the job: http://www.pcinspector.de/Sites/smart_recovery/info.htm?language=1 if not, then maybe it was this one: http://www.pcinspector.de/Sites/file_recovery/info.htm?language=1 It is a few years since I used it, but it might be worth a try. -- Bob Cox. Stoke Gifford, near Bristol, UK. Registered user #445000 with the Linux Counter - http://counter.li.org/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: digital forensics - recovering images from a memory card with trashed file system
Micha a écrit : I tried 3. I wouldn't be able to access the card at all without one ... Like I said, it's not the card that's the problem it's the file system that is ruined, and even that partially, it's the file inodes (or whatever they are called under fat) or directory entries that were junked. I'm guessing that due to some concurrent read/write without a mutex or something like that. Hi, maybe Testdisk can help you rebuild the filesystem, it has never worked great for me on usb drives though... It's more easily done if you know exactly what the fs was, the partition scheme... Otherwise, did you try your camera or the memory card manufacturer website ? They may have emergency rescue tools. Tom -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: digital forensics - recovering images from a memory card with trashed file system
On Tue, 28 Oct 2008 22:06:51 + thveillon.debian [EMAIL PROTECTED] wrote: Micha a écrit : After my camera died on a recent trip I bought a new one (nikon s52 if it helps). Due to some bug and bad timing on button presses the camera trashed the file system somehow. Based on the number of images it can write to disk it seems that the images are still there, but what I see under the directory is some directories with trashed file names that can't be used and some files with a size of 1TB that are junk (on a 2GB card). I'm looking for a way to rescue the images (jpegs) if possible. I tried rstudio under windows but it only found some AVIs but not the images (at least using the basic settings). Are there any programs (linux, windows or mac) that may be able to recover the images, or any other way to do it? It was a new (and formated) card so that there is a chance that the images written in some order but I don't know enough about this hardware. The card is a 2GB transcend secure digital (sd) thanks Hi, with Linux I guess Tesdisk and Photorec are your best bet, photorec did a great job for me once. With windows and Mac I guess products from diskinternals.com and prosofteng.com can do a similar job through a nice gui, but they don't come for cheap. If you want win/mac freeware just have a look on softpedia.com. Thanks, you saved my @ss. Photorec did the job whithout a hitch. Took the windows programs half an hour to find nothing. Photorec found all the lost images in 2 minutes. Tom -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: digital forensics - recovering images from a memory card with trashed file system
Micha wrote : On Tue, 28 Oct 2008 22:06:51 + thveillon.debian [EMAIL PROTECTED] wrote: Hi, with Linux I guess Tesdisk and Photorec are your best bet, photorec did a great job for me once. With windows and Mac I guess products from diskinternals.com and prosofteng.com can do a similar job through a nice gui, but they don't come for cheap. If you want win/mac freeware just have a look on softpedia.com. Thanks, you saved my @ss. Photorec did the job whithout a hitch. Took the windows programs half an hour to find nothing. Photorec found all the lost images in 2 minutes. Great, Thank Christophe GRENIER who wrote the program, I even managed to misspell Testdisk from the same author ! ;-) http://www.cgsecurity.org/wiki/Main_Page Tom -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: digital forensics - recovering images from a memory card with trashed file system
On Wed, Oct 29, 2008 at 11:42:26 +, thveillon.debian ([EMAIL PROTECTED]) wrote: Micha wrote : On Tue, 28 Oct 2008 22:06:51 + thveillon.debian [EMAIL PROTECTED] wrote: Hi, with Linux I guess Tesdisk and Photorec are your best bet, photorec did a great job for me once. With windows and Mac I guess products from diskinternals.com and prosofteng.com can do a similar job through a nice gui, but they don't come for cheap. If you want win/mac freeware just have a look on softpedia.com. Thanks, you saved my @ss. Photorec did the job whithout a hitch. Took the windows programs half an hour to find nothing. Photorec found all the lost images in 2 minutes. Great, Thank Christophe GRENIER who wrote the program, I even managed to misspell Testdisk from the same author ! ;-) I just installed the Debian testdisk package, which includes photorec and can confirm it is really excellent. Many thanks. -- Bob Cox. Stoke Gifford, near Bristol, UK. Registered user #445000 with the Linux Counter - http://counter.li.org/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: digital forensics - recovering images from a memory card with trashed file system
Micha a écrit : After my camera died on a recent trip I bought a new one (nikon s52 if it helps). Due to some bug and bad timing on button presses the camera trashed the file system somehow. Based on the number of images it can write to disk it seems that the images are still there, but what I see under the directory is some directories with trashed file names that can't be used and some files with a size of 1TB that are junk (on a 2GB card). I'm looking for a way to rescue the images (jpegs) if possible. I tried rstudio under windows but it only found some AVIs but not the images (at least using the basic settings). Are there any programs (linux, windows or mac) that may be able to recover the images, or any other way to do it? It was a new (and formated) card so that there is a chance that the images written in some order but I don't know enough about this hardware. The card is a 2GB transcend secure digital (sd) thanks Hi, with Linux I guess Tesdisk and Photorec are your best bet, photorec did a great job for me once. With windows and Mac I guess products from diskinternals.com and prosofteng.com can do a similar job through a nice gui, but they don't come for cheap. If you want win/mac freeware just have a look on softpedia.com. Tom -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: digital forensics - recovering images from a memory card with trashed file system
thveillon.debian wrote: Micha a écrit : After my camera died on a recent trip I bought a new one (nikon s52 if it helps). Due to some bug and bad timing on button presses the camera trashed the file system somehow. Based on the number of images it can write to disk it seems that the images are still there, but what I see under the directory is some directories with trashed file names that can't be used and some files with a size of 1TB that are junk (on a 2GB card). I'm looking for a way to rescue the images (jpegs) if possible. I tried rstudio under windows but it only found some AVIs but not the images (at least using the basic settings). Are there any programs (linux, windows or mac) that may be able to recover the images, or any other way to do it? It was a new (and formated) card so that there is a chance that the images written in some order but I don't know enough about this hardware. The card is a 2GB transcend secure digital (sd) thanks Hi, with Linux I guess Tesdisk and Photorec are your best bet, photorec did a great job for me once. With windows and Mac I guess products from diskinternals.com and prosofteng.com can do a similar job through a nice gui, but they don't come for cheap. If you want win/mac freeware just have a look on softpedia.com. Tom why don't try a card reader regards -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
