Sector to Sector recovery! Need some help..

[mihaelozg]

Hello,
I tried to recover video and jpg files from SD card, and it worked.. I managed to recover a few images from card but no avi files. Weird thing is that one of those pictures(jpg) has 839MB. I think that my video file might be in there. So, I have created ISO file from SD card. Now, how to extract specific files from sectors? Dr.Google says that it has something to do with sector to sector file recovery. Can somebody please take a minute and explain how does that work? How to make that avi file again? Thanks!

[fzabkar]

This answer may apply to you also:
viewtopic.php?f=1&t=17856#p119676

[mihaelozg]

Ty, tried but didnt work. Still looking for some way to extract that video file from jpg extension. Renaming didnt work either.

[fzabkar]

When you say "ISO", do you mean an image file? If so, then that would be a sector-to-sector copy.

Which data recovery software have you tried?

Assuming that the 839MB JPG file does in fact contain a complete, contiguous AVI file, then use a hex editor to search for an AVI text header within the body of the JPG. You will need to look at the header information in a typical AVI file so that you will know what to search for. If you find such a header, then strip off that part of the JPG that precedes it.

[mihaelozg]

Files were recovered with Zero Assumption Recovery 8.5.11 software. Yes, I have created ISO (image) file, now I'm trying to find some Hex Editor, seems like R-Studio or WinHex might do the job. I have never worked with Hex editors so it is a long way ahead for me. The video I'm trying to recover contains my baby's first steps,so it's very precious to me. If you have time for some more advices, I would be very greatful!

[mihaelozg]

This is how the file looks in hex

Attachments

hex

[dick]

Hi,
If the header is still intact, then for an avi file you could search for the text string 'RIFF' or search for the same in hex '52 49 46 46'

If the format is not avi but another then you would search for the header used by that format.

If the header is damaged or missing there may be other ways of searching for the file. eg. by file name or by date.

You can also use Dmde free edition for this work which also allows you to recover single files without size limit.

Do a google search using the terms 'file header hex edit' and you will find loads of clear explanations. Also info on how to repair a broken/corrupted file header.

[mihaelozg]

Hi,
If the header is still intact, then for an avi file you could search for the text string 'RIFF' or search for the same in hex '52 49 46 46'

If the format is not avi but another then you would search for the header used by that format.

If the header is damaged or missing there may be other ways of searching for the file. eg. by file name or by date.

You can also use Dmde free edition for this work which also allows you to recover single files without size limit.

Do a google search using the terms 'file header hex edit' and you will find loads of clear explanations. Also info on how to repair a broken/corrupted file header.

Ty very much, I've spent my day googleing. Unfortunatly, I wasn't able to find any tips about replacing the header. Is header shown in first line only? I didn't find anybody who had similar problem.. movie file under jpg extension.. God, I feel soo
stupid..
I tried DMDE but not sure how to start.. DMDE doesn't allow me to open single file, however WinHex does.. Most of google articles are about fixing corrupted header, fixing avi etc..
File directly opened in WinHex shows that there is movie file inside (MV930 Movie)..
Any tips how to locate beggining and the end of my avi file hidden in the jpg? Thank you

Attachments

[fzabkar]

Here is a freeware hex editor and disc editor:
http://mh-nexus.de/en/hxd/

This article may help you understand the EXIF header:
http://en.wikipedia.org/wiki/Exchangeab ... ile_format

I'd use Google to research "EXIF II" and "MVI".

But the very first thing I would do is to use your camera to record a short movie, say 10 seconds, and a still photo. Then analyse these known good files to get a feeling for their structures, especially the headers. I'd also get a feeling for the bit rate of the movie file, ie how many kilobytes per second. That should tell you what file sizes you should expect.