Page 1 of 2

file brooken?

Posted: Fri Jan 25, 2019 9:00 am
by Freakazoid
Is there any chance to recover this file? (marked in blue)

file brooken?

Posted: Fri Jan 25, 2019 11:39 am
by lcoughey
Care to share some actual details about the situation?
What is the problem with the drive?
Are you working with the patient drive or the clone?
Why do you need to recover that file?
What is the problem with the file when you save it out?

file brooken?

Posted: Fri Jan 25, 2019 3:21 pm
by Freakazoid
Sorry to give no information :roll:
"What is the problem with the drive?" No problem. Its a mini sd card (sitting in a huawei p9)
"Are you working with the patient drive or the clone?" working with the sd card in r-studio
"Why do you need to recover that file?" File/movie was accident deleted.
"What is the problem with the file when you save it out?" The problem after I save it out is that I'm not able to play it in vlc.

file brooken?

Posted: Fri Jan 25, 2019 3:38 pm
by lcoughey
What about the .tmp version of the file above it? Assuming that there was no data written back after the file was deleted, you may need a better recovery program to handle recovering fragmented MP3 files.

file brooken?

Posted: Fri Jan 25, 2019 5:22 pm
by Freakazoid
lcoughey wrote:Source of the post What about the .tmp version of the file above it? Assuming that there was no data written back after the file was deleted, you may need a better recovery program to handle recovering fragmented MP3 files.


non of them working. (could it been encrypted?)

What program can be better than r-studio? I have pc3000-Flash

file brooken?

Posted: Sat Jan 26, 2019 7:35 am
by Jared
No, it's not encrypted. Are you saying that no MP4 files recovered from the card will play? Perhaps it could be just a codec issue if that's the case.

As Luke mentioned, that .tmp file just above it was a temporary container for that file, so by recovering and renaming that to .mp4 it might play.

Do you know if more data was added after the file was deleted? R-Studio seems to indicate that the file header is good, but perhaps it's partially overwritten.

file brooken?

Posted: Sat Jan 26, 2019 7:40 am
by Jared
Actually I just noticed the log in R-Studio...looks like R-Studio is indicating that the file is party overwritten based on what it's finding in the FAT. It may be possible to still recover some playable video from within that file though. The fact that the opening header appears good is a possible good sign.

I'd give CnWRecovery a spin, specifically the MP4 recovery feature of the program. It may be able to still get some playable video carved out of that file.

file brooken?

Posted: Sat Jan 26, 2019 2:28 pm
by Freakazoid
No, it's not encrypted. OK :D
Are you saying that no MP4 files recovered from the card will play?only VID_20181114_000457.mp4 will be played

As Luke mentioned, that .tmp file just above it was a temporary container for that file, so by recovering and renaming that to .mp4 it might play. Tried to rename the the TMP file without any good success.

Do you know if more data was added after the file was deleted? I never trust the customer :lol: but what he said the phone was not used and turned of after he accidentally deleted the file.

I need to fix some DLL files for running CnWRecovery :? but will try thanks for the tips

file brooken?

Posted: Sat Jan 26, 2019 3:40 pm
by Freakazoid
result when scanning with CnWRecovery. Need to buy it for saving files... is there any way to check if the fil is working before buying it?

file brooken?

Posted: Mon Jan 28, 2019 9:49 am
by Jared
Not really, the previewing never did work right on that program in my experience. However, for the price, it's a program well worth having in your toolbox. You can even buy just a 30-day license if you want.