After recovering some pics, If a JPEG image is only 96x96 or 96x72, where do you think it came from and were does it belong?

Sounds like it was a thumbnail.

Thankz for the fast response

Quote:

---

Originally Posted by NeedKarma

Sounds like it was a thumbnail.

---

If it is a thumbnail where do it belong? Would that be in a thumbs.db?

I have a e01 image there is file called thumbs.db encryptable, am using ftk toolkit how do I recover it data carved won't recover it.

Try sorting the files by name and check out the extensions. If the extensions are not recognizable image types then I don't know how to help you.

Okay I got the file names, the only problem I have right now is that when I view the free space right the first file there is file0 it is a long file name but it doesn't have an extension, and the second problem I have is, I can see there is a thumbs.db encrytpable but I don't know how to recover it, I don't see a option or anyting I ftk toolkit

Hi,
Do a Search for FileAlyzer; available for free many places. It will give you a view of the contents in several ways.
Most of my systems default to it with extensions not listed in the Registry. You may need to only change the extension to one of a graphic.
Peace,
Clarke

Thanks will try.

Still can't recover any files, the filealyzer is really good it pick out all the file names, but I just need to recover it now

Hi,
It is unclear if you have one omnibus file or separate ones. If it is one big one, use a program such as Editpad Lite or Notepad++ to copy the pieces to a new file and the Save As... option to name it correctly. If they are separate files, then no need to break into pieces, just the save. Can also be done with Esxplorer or File Manager by simply clicking name slowly twice and changing it to and extant (extension) that a graphics program understands.
Peace,
Clarke

Thankz