LSoft Technologies' blog: What are File Signatures and why should you care when recovering?

LSoft Technologies

Blog

What are File Signatures and why should you care when recovering?

June 2 2016, LSoft team

File Signature or Magic Number is a protocol set of constant numerical and text values used to identify file format. In other words, every file type requires a unique signature in order for an operating system to recognize it, classify it and show it to an end user. Magic numbers have been introduced in 1979 in Seventh Editions Unix (V7) and started to be commercially available in early 1980’s. In almost forty years’ hundreds of different magic numbers (file signatures) have been created for different uses.

But apart from the geeky stuff, why would file signatures be important to you today when you are performing a recovery? If you have deleted files with a specific file signature (*.jpeg for example), it would be far easier and less time consuming to scan your HDD for that specific file signature than scanning it for all possible file signatures, browsing through them and picking one by one to recover. With that in mind, we have implemented scan by File Signatures feature in all of our data recovery products.

Supported File Signatures

File types Active@ Undelete Active@ Partition Recovery Active@ File Recovery Uneraser
Adobe Files (*.pdf, *.aep, *.psd, *.swf) file signature, adobe files, undelete file signature, adobe files, partition recovery file signature, adobe files, file recovery file signature, adobe files, uneraser
Camera Raw Files (*.crw, *.cr2, *.dng, *.raf, *3fr, *.kdc, *.dcr, *mrw, *.mos, *.raw, *mef, *nef, *.orf, *.rw2, *.pef, *.srw, *.erf, *.x3f, *.arw, *.sr2, *.srf) file signature, Camera Raw Files, undelete file signature, Camera Raw Files, partition recovery file signature, Camera Raw Files, file recovery file signature, Camera Raw Files, uneraser
Compressed Archives (*.7z, *.arc, *.arj, *bz2, *.gz, *.lz4, *.lzh, *.tar, *.cab, *.rar, *.xz, *.zip, *.zoo) Compressed Archives- undelete Compressed Archives - partition recovery Compressed Archives - file recovery Compressed Archives - uneraser
Electronic Books (*.djvu, *.fb2, *.lit, *.qbw, *.rb) Electronic Books - undelete Electronic Books - partition recovery Electronic Books - file recovery Electronic Books - uneraser
File System Metadata *.iso, *.Sdir, *.Sfile, *.Sindx File System Metadata - undelete File System Metadata - partition recovery File System Metadata - file recovery File System Metadata - uneraser
FileMaker Platform *.fp3, *.fp5, *.fmp12, *.fp7 FileMaker Platform - undelete FileMaker Platform - partition recovery FileMaker Platform - file recovery FileMaker Platform - uneraser
Formatted Text Files *.chm, *.xml, *.htm, *.rtf, Formatted Text Files - undelete Formatted Text Files - partition recovery Formatted Text Files - file recovery Formatted Text Files - uneraser
Microsoft and OpenOffice Documents *.rpt, *.mdb, *.xlsx, *.xls, *.msg, *.doc, *.docx, *.odb, *.odf, *.odg, *.odp, *.ods, *.odt, *.ole, *..pst, *,pptx, *.ppt, *.vsd, *.xps Microsoft and OpenOffice Documents - undelete Microsoft and OpenOffice Documents - partition recovery Microsoft and OpenOffice Documents - file recovery Microsoft and OpenOffice Documents - uneraser
Miscellaneous *.max, *.dwg, *.3ds, *.dxf, *.eps, *.fdb, *.stl Miscellaneous - undelete Miscellaneous - partition recovery Miscellaneous - file recovery Miscellaneous - uneraser
Music and Audio Files *.4xa, *aac, *.ac3, *.aiff, *.aifc, *.flac, *.mid, *.ape, *.mp3, *.ogg, *.ra, *.au, *.mmf, *.wav, *.wvc, *.wma Music and Audio Files - undelete Music and Audio Files - partition recovery Music and Audio Files - file recovery Music and Audio Files - uneraser
Photos and images (*.bmp, *.cmx, *.cdr, *.gif, *.ico, *.jp2, *.j2c, *.jpg, *.c4d, *.mng, *.pcx, *.png, *.tif, *.ani,) Photos and images - undelete Photos and images - partition recovery Photos and images - file recovery Photos and images - uneraser
QuickTime Multimedia *.3g2, *.3gp, *.cdc, *.dcf, *.f4v, *.jpa, *.jpm, *.jpx, *.m4a, *.m4b, *.m4p, *.m4v, *.maf, *.mj2, *.mov, *.mp4, *.mpg, *.mqv, *.sdv QuickTime Multimedia - undelete QuickTime Multimedia - partition recovery QuickTime Multimedia - file recovery QuickTime Multimedia - uneraser
Video Files *.4xm, *.asf, *.amv, *.avi, *.fli, *.flc, *.flv, *.mxf, *.mkv, *.mpg, *.mts, *.mpeg, *.m2v, *.r3d, *.rm, *.rmvb, *.wmv Video Files - undelete Video Files - partition recovery Video Files - file recovery Video Files - uneraser
 

If you just want to recover files with a specific signature, click on the Last Chance button within the software (Last Chance available only in File Recovery, Partition Recovery, and Uneraser).

Last chance button - file recovery software

Select the device you want to scan

scan - file recovery software

And choose the appropriate file signatures or (if you are not sure about the specific signature) file types and click Start.

 file signatures - file recovery software

To scan for files by their signatures in Undelete, click on the Recovery Wizards and choose Recover files detected by their signatures.

Recovery Wizards - undelete software

After selecting which drive you want to scan, In the next window choose which specific file types or file signatures you would like to recover.

Recovery Wizards - undelete software

Further customizing your scan

Additionally, you can also customize your scan by entering the file’s name or file signature within the scan. To do that click on the Search button in the software. Search feature is available in File Recovery and Uneraser.

Search feature is available in File Recovery and Uneraser

More features are at the disposal, from the date you have created, modified or deleted them to their size and ID. The scan can be further customized by searching for deleted files only.

Recovering files from one file system to another using boot disk

Using boot disk (Active@ LiveCD or Active@ Boot Disk) you can recover files from one platform to another. To see more differences between Active@ LiveCD or Active Boot Disk check out our “Active@ BootDisk, LiveCD and Data Studio comparison and which to pick?” article. Boot disks are in general very useful for data recovery. If the system is not working and you need external access to recover it or files, or you want to disable the resident operating system from overwriting your files – boot disk is the best tool for the job.

Active@ Boot Disk and Active LiveCD are available with Professional and Ultimate versions of Undelete, Partition Recovery, File Recovery and Uneraser.

General Information

  Active@ Undelete Active@ Partition Recovery Active@ File Recovery Uneraser
Supported Platform Windows Windows Windows Windows
Active@ Boot Disk Installer Boot Disk Installer * Boot Disk Installer ** Boot Disk Installer ** Boot Disk Installer *
Active@ LiveCD Installer LiveCD Installer ** LiveCD Installer ** LiveCD Installer ** LiveCD Installer **
 

*available within Professional version;
** available within Ultimate version

If you are about to recover files from, for example, Linux to Windows (or vice versa) platform you can do that with any of our recovering software using Active@ LiveCD. However, if you want to recover files from ReFS file system (Windows Server 2012) or you just work with Windows operating systems and like the comfort of the Windows UI, then you might want to use Active@ Boot Disk.

File System Access Mode under boot disk

  Active@ BootDisk Active@ LiveCD
Windows: FAT, FAT32, NTFS, exFAT Read/Write Read/Write
Windows: ReFS Read/Write
Linux: Ext2, Ext3, Ext4, BtrFS, JFS, XFS, F2FS, ReiserFS, Nilfs2 Read/Write
Unix: UFS, XFS, ZFS Read/Write
Mac OS X: HFS & HFS+ Read/Write
Optical Media: UFS & CDFS Read/Write Read/Write

Conclusion

We hope that we have shed some light on the process of recovering files and why it doesn’t have to be some tiresome. With the standard version of the software, you can use various filters, scan and recover particular files on your Windows computer. With Professional and Ultimate versions, you get the flexibility of recovering your files and system outside your OS environment and transfer your files to other OS environments.