Recovery of a text ...
 
Notifications
Clear all

Recovery of a text file with damaged MFT (zero sized file)

63 Posts
11 Users
0 Reactions
7,357 Views
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

@damaged_mft
You can try this
http//recsveditor.sourceforge.net/
which is a "specific CSV" tool derived from
http//record-editor.sourceforge.net/Record02.htm

Should have no such thing as a "row number limit", or anyway a much larger one than 65,536.
Then you can make smaller files.

@Cults14
JFYI, there exists an "intermediate" version of Office, called "Office XP" which has "single apps" called "2002", i.e. Excel 2002, Word 2002, etc.
http//en.wikipedia.org/wiki/Microsoft_Office_XP

jaclaz


   
ReplyQuote
(@cults14)
Reputable Member
Joined: 17 years ago
Posts: 367
 

JFYI, there exists an "intermediate" version of Office, called "Office XP" which has "single apps" called "2002", i.e. Excel 2002, Word 2002, etc.

I stand corrected oops


   
ReplyQuote
TuckerHST
(@tuckerhst)
Estimable Member
Joined: 16 years ago
Posts: 175
 

Or maybe OpenOffice can cope with more rows? I don't know about this one but it might be worth a look

FYI, LibreOffice supports 2^20 rows, i.e., 1,048,576.


   
ReplyQuote
(@damaged_mft)
Eminent Member
Joined: 12 years ago
Posts: 30
Topic starter  

okay thank you guys for all your suggestions regarding CSV editors.
I will try at least one of them.

@Cults14
yes, my Excel is "2002", according to the Help>About menu item.


   
ReplyQuote
DonSidje
(@donsidje)
Active Member
Joined: 12 years ago
Posts: 7
 

Hi guys,

I found a document on a suspect's machine. Let say the document's name is ABC.docx. On further review, we found a duplicate of this document but with the name ABC1.docx.

Is this a computer generated duplicate or is it enough to conclude that the suspect saved a duplicate copy of the document?

Thanks guys,
Yours,
DonSidje.


   
ReplyQuote
TuckerHST
(@tuckerhst)
Estimable Member
Joined: 16 years ago
Posts: 175
 

Is this a computer generated duplicate or is it enough to conclude that the suspect saved a duplicate copy of the document?

Completely different topic, but ok. . .

Are they cryptographically identical? Given that Office stores metadata in its files, such as "revision number" and "last saved," it is extremely unlikely that two saves of the same document will be identical.

Here's a little white paper on Office metadata for you.


   
ReplyQuote
(@damaged_mft)
Eminent Member
Joined: 12 years ago
Posts: 30
Topic starter  

@damaged_mft
You can try this
http//recsveditor.sourceforge.net/
which is a "specific CSV" tool derived from
http//record-editor.sourceforge.net/Record02.htm

Should have no such thing as a "row number limit", or anyway a much larger one than 65,536.
Then you can make smaller files.

jaclaz, I have installed reCSVEditor_0.90, but after installation, when I try to launch it, Windows cannot find a file "javaw.exe". what does it mean? Do I have to install java on this machine?


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

jaclaz, I have installed reCSVEditor_0.90, but after installation, when I try to launch it, Windows cannot find a file "javaw.exe". what does it mean? Do I have to install java on this machine?

Sure, the thingy is written in Java.

jaclaz


   
ReplyQuote
(@damaged_mft)
Eminent Member
Joined: 12 years ago
Posts: 30
Topic starter  

okay, I have installed Java, and it took 130MB of my hard disk!!
Open Office wanted to take 300MB more, but my Windows hard disk didn't have that much room for it.
So, for now, I will use reCSVEdit.
The logfile.csv has 90101 rows.
The mftdump.csv has 382289 rows.

The data is layed out cleanly.


   
ReplyQuote
(@damaged_mft)
Eminent Member
Joined: 12 years ago
Posts: 30
Topic starter  

guys, I am following joakim's instructions on p.m.
we will tell you the result. )


   
ReplyQuote
Page 6 / 7
Share: