Some advice

26 views
Skip to first unread message

Conray van Biljon

unread,
Feb 21, 2013, 1:58:25 AM2/21/13
to datarecovery...@googlegroups.com
hi
 
i have this file made by Nero Backitup and has gone corrupt is the a way to mount this file and recover some files from it.
 

--
Regards,
 
Conray

sup...@rambuscomputers.co.uk

unread,
Feb 21, 2013, 5:41:36 AM2/21/13
to datarecovery...@googlegroups.com
I know 7zip can extract or view files on a .nba not tried it on a corrupt file. 

FTKImager also can access .nba files but as above i have not got a corrupt file to test in on. 

Loki

Sent from my iPhone 4S
--
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.
To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.
To post to this group, send email to datarecovery...@googlegroups.com.
Visit this group at http://groups.google.com/group/datarecoverycertification?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

sup...@rambuscomputers.co.uk

unread,
Feb 21, 2013, 6:15:42 AM2/21/13
to datarecovery...@googlegroups.com
Just tested corrupting a file using winhex. 

At offset 00000000 was 50 4B 03 04 2D 00 08 08 08 if i zero the 2D 00 08 08 08 the file still opens in ftkimager & 7zip but if you zero the 04 then the file wont open. 

Does the offset at 00000000 start with 50 4B 03 04 

Also i noticed that the 50 4B 03 04 2D 00 08 08 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 is repeated at various locations in the file when searching in hex. Just search for 17x 00

Hope this might be helpful?

Loki



Sent from my iPhone 4S

Conray van Biljon

unread,
Feb 21, 2013, 7:26:15 AM2/21/13
to datarecovery...@googlegroups.com
Thanks Loki
 
I will give it a try , much appreciated.
Regards,
 
Conray

Conray van Biljon

unread,
Feb 22, 2013, 12:53:12 PM2/22/13
to datarecovery...@googlegroups.com
Hi Loki

At offset 00000000 is 4E 45 52 4F


Please find attached file


On Thu, Feb 21, 2013 at 1:15 PM, Sup...@rambuscomputers.co.uk <sup...@rambuscomputers.co.uk> wrote:



--
Regards,
 
Conray
Clip.jpg
Reply all
Reply to author
Forward
0 new messages