search

cgsecurity / testdisk

TestDisk & PhotoRec
https://www.cgsecurity.org/
GNU General Public License v2.0
1.58k stars 195 forks source link

Random names for recovered files f0280112 etc #45

Closed tehmasterer closed 6 years ago

tehmasterer commented 6 years ago

I am trying to recover a specific text file that was overwritten by Windows. When I use the program it gives me something like this... D:\recup_dir.1\f0280112.txt

All recovered files have these weird names and the modification dates are the same. There are over 6000 text files with no way to easily find what I am looking for.

Did I do something wrong here?

cgsecurity commented 6 years ago

Did you do something wrong ? You probably didn't read https://www.cgsecurity.org/testdisk.pdf ;-) If the file has been overwritten, no data can be recovered. You can always search with Windows Explorer in the recovered files for a text specific to the file you are looking for.

tehmasterer commented 6 years ago

my apologies. in my frustration I read that shortly after I posted. I used testdisk instead. I found the file but it was still overwritten.

Do you have any suggestions? Search found nothing. The file was not saved and overwritten. Windows overwrote it with some crap. The modification date is still the same as the last time it was saved.