how to find Invalid files headers

[Abdur Rahim Sopon]

Hello 
is it possible to find Invalid file headers software?
I have a raw doc recovery case and I found around 17,000 files.
Now I need to remove  Invalid files. 

case History it's a flash Recovery case I dump with a flash extractor.
FE can't access FS so I made an image and ran raw recovery. 


Thank you 

[pbzcbf...@gmail.com]

You can use 7Zip to test the integrity of the "X" file types (DOCX, PPTX, XLSX). The following example tests one file, but you could write a batch script to test an entire directory.

"C:\Program Files\7-Zip\7z" t "System Configuration for Macs with the Apple T2 Security Chip.docx"

7-Zip 21.01 alpha (x86) : Copyright (c) 1999-2021 Igor Pavlov : 2021-03-09

Scanning the drive for archives:
1 file, 531204 bytes (519 KiB)

Testing archive: System Configuration for Macs with the Apple T2 Security Chip.docx
--
Path = System Configuration for Macs with the Apple T2 Security Chip.docx
Type = zip
Physical Size = 531204

Everything is Ok

Files: 17
Size:       933661

Compressed: 531204

You can test for an error in your batch file as follows:

IF %ERRORLEVEL% NEQ 0 Echo An error was found in file %f

[pbzcbf...@gmail.com]

"C:\Program Files\7-Zip\7z" t -r "docx\*.docx" > \docx_test.log 2>&1

[Alandata Recovery]

there is this

$199

--
Data Recovery Certification Group / for issue with google group please email sc...@myharddrivedied.com
---
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.
To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/8766e09a-0873-4109-9ad9-e128b5b646fan%40googlegroups.com.

--

Alandata Data Recovery -  (949)287-3282  
"Cleanroom Data Recovery of RAID, VMware, NAS, Linux, Tape, Disk, Forensics"

www.alandata.com   www.alandataRecovery.com

[jpv...@gmail.com]

Raw recovery using what?

And what file types you're actually trying to get?

If DOCX, XLSX etc. you may want to try Klennet Carver.

--

Data Recovery Certification Group / for issue with google group please email sc...@myharddrivedied.com
---
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.
To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/447a78b6-d3d4-4e26-b2ad-a91e5f87375dn%40googlegroups.com.

[juan van der meulen]

I use SMF tool and you must select the TrID option under folder search then it will display the status of all files and you can sort them and delete all wrong files

--

[pbzcbf...@gmail.com]

I haven't tested this batch script, but it uses 7Zip to test the integrity of all DOCX files in the specified Source directory and writes the list of bad files to a log. It can be modified to delete the bad files.

@echo off

setlocal enabledelayedexpansion

:: Set the command for testing a file here

set "Test=C:\Program Files\7-Zip\7z.exe t"

:: Set the path to the source files here

set "Source=D:\path\to\source\DOCX"

:: Set the path to the error log file here

set "Log=C:\path\to\log\DOCX_errors.txt"

:: Recursively process DOCX files in the source folder

set /a t=0                            :: initialise total file count
set /a b=0                            :: initialise bad file count

for /r "%Source%" %%F in (*.docx) do (
    echo Testing "%%F" ...
    "%%Test" "%%F" >nul 2>&1
    set /a t+=1                       :: increment total file count

    if %errorlevel% neq 0 (
        echo Error in "%%F">> "%%Log"
        set /a b+=1                   :: increment bad file count
    )
)

echo.
echo Total DOCX files processed = !t!
echo Number of DOCX files with errors = !b!
echo.

endlocal

[wayne horner]

How would you test for the first 2 bytes being D0 CF ?

or first block is all zeros ?

Alandata Data Recovery -  (949)287-3282  

"Cleanroom Data Recovery of RAID, VMware, Network Attached Storage, Linux, Tape, Disk, Forensics"

www.AlanData.com   www.AlanDataRecovery.com

--
Data Recovery Certification Group / for issue with google group please email sc...@myharddrivedied.com
---
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.
To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/89174239-bf0c-4d9a-afd2-6de06bc5b10en%40googlegroups.com.

[juan van der meulen]

I use SMF and it is very good with most file tipes, it also got a rating if file might be corrupted or repairable.

To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/CAJEn65r95GMdxPnGZBpJ%3D-W%3DYo7bK7Z9TOoOmKw%3DfZ7uxqD9%3DQ%40mail.gmail.com.

[Data Recovery Guru]

What is SMF? Sorry, brainfart here.

To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/CAGTWHEaZF8W0WchUOFQ52UgRLoASMQXU2je0iQ%3DYrduG%2BWiYeg%40mail.gmail.com.

[pbzcbf...@gmail.com]

7Zip identifies DOC files as a "Compound" type. It seems to test them OK.

I don't know if SMF actually extracts the components from DOCX/PPTX/XLSX archives, or if just makes some rudimentary checks.

[Abdur Rahim Sopon]

Hello, my dear colleague,

The UFS results look very good.

 

[pbzcbf...@gmail.com]

Search My Files

https://funk.eu/smf/

[Data Recovery Guru]

Aha, many thanks.

On Tue, Jul 16, 2024, 2:18 PM pbzcbf...@gmail.com <pbzcbf...@gmail.com> wrote:

Search My Files

https://funk.eu/smf/

--
Data Recovery Certification Group / for issue with google group please email sc...@myharddrivedied.com
---
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.
To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/de8fb41d-b420-449e-a353-01fd1f6ec74cn%40googlegroups.com.