Monday, April 28, 2008

Creative editing of file properties in files found based on their signature

In a search for missing files and folders, IsoBuster is able to recognize a large files on the basis of their signature. These files are then under the " files found on their signature " File System icon. This is in addition to the files, IsoBuster found on the various file systems of course.
The signing of a file is represented by certain characters, Byte, which is usually in a certain position in the file. It is indeed a difficult thing to do, he recognizes such files, because most files are not optimized for this kind of file. In fact, media and file systems in general are not designed really to facilitate this type of file. Thus, the power of IsoBuster on hand to change what was actually found increases your chances for success.
Indeed addition to the excellent IsoBuster file to find routines, which will probably find most of your important files, you still have complete control over what was found. You can still change what IsoBuster found based on what you know about the files on the disk. For example, if you know that all files were zip files, then you can use other files for instance.
To can make these changes to first consider whether it is activated for you about the options " Enable advanced editing, Add and Delete ". If this option is enabled, you have the option " file " (from a right mouse click on the " files found on their signature " File System icon) More options & quot ; Rename ", " " Edit, Delete " "; available when you right-click the files found on their signature in the right pane of IsoBuster The most obvious option & quot ; Rename " is essentially the same as clicking on the selected file again, or click the " F2 " button when a file is selected. Ideally, for example, the extension of a file, if you do not agree with the analysis IsoBuster on the file type.
The advanced features " file ", " delete " and Edit & " ; quot; are the ones we want to explain a bit more. Let& 39;s start with the following example, 4 jpg files and a Zip file found on the basis of their signature.
PS. this is a fake, as in fact IsoBuster is clever enough not make this mistake, and it will not find a ZIP file into a jpg file, but it is a good example for dozens of other possible combinations, exist.
Now that I was sure that there were only 4 JPG picture files on the CD and IsoBuster IsoBuster but she is also a ZIP file, which does not exist. This type of behavior is possible if a file with a combination of random bytes in his body that accidentally resembles the signature of a file. It is something which can not be avoided in data recovery to file signatures. Remember that most of the files are not optimized for this kind of file-finding mission, and neither are the file systems. IsoBuster implements a range of measures to prevent these false positives, but it can happen.
The effect of this example is that jpg number 3 is indeed corrupt after extraction, because the end was cut and put in a zip file, which in turn is damaged and (since it is not really a zip file after all). IsoBuster decided that the length of the jpg ended 3, where the Zip file is how the lengths are determined with this kind of file finding.
However, this is easily fixed. Select the Zip file in IsoBuster with the right mouse button and select Delete " ". The file is erased from the memory list of found files. Of course, nothing physically deleted from the media. If you use the Search " missing files and folders " option again the same file could be found, even after again.
What you to delete the reference is that the file in an address (LBA) shortly before the Zip file, in length. The size grows to the beginning of the next file that could be found. In this example, this means that jpg 3 grows to its real size, and now, if you extract, it is not corrupt anymore.
There are a few exceptions to the auto-cultivation of the previous file. If the files have been changed (over " Edit " or " " file for example), then the previous file is not always very large, because otherwise the program could undo what They changed manually already.
However, this is where the editing function " " comes in handy. Select the file from the file length you want to change and choose Edit " ". An editing window into which you can the physical properties of the file. The situation on the disk (LBA = Logical block address), the length in bytes and offset printing. Most of the files start at offset 0, but only if it is possible to any value within the block. PS. A block is 2048 bytes in size.
Suppose you want to change the length of a file where the next file is started. Look at the start address of the file you want to change, write down the " Logical Block Address (LBA). Note the LBA the next file, where the file ends. Subtract both addresses from each other, and you have the length in blocks. Multiply this figure by 2048 (that is the amount of bytes per block) and you receive a file length after.
If They were sunk all this information, then you have no problems with the option " file & quot Either. If you know where a file is on the disc, you can create " " this file in IsoBuster & 39; list of files and thus you can extract IsoBuster this file for you. This option can be very useful in combination with View, hunting for a specific file is missing, for example. But in a subsequent article.
Following information may be interesting as well:
File signatures are often referred to as " " Magic Numbers: Magic Numbers According to wikipedia FileExt.com: invaluable source for file extensions, a look etc
Copyright 2007, www.isobuster.com All rights reserved. This article was written by Peter Van Hove, CEO of Smart Projects. Smart Projects is an experienced company with a high concentration on CD and DVD technology, highly involved in CD / DVD / BD and HD DVD Data Recovery with IsoBuster as one of its leading applications.
This article may be reproduced on a website , E-zine, CD-ROM, books, magazines, etc., as long as the above information in full, including the link back to this site.



Bookmark it: del.icio.usdigg.comreddit.comnetvouz.comgoogle.comyahoo.comtechnorati.comfurl.netbloglines.comsocialdust.comma.gnolia.comnewsvine.comslashdot.orgsimpy.com

No comments: