Corrupted JPEGs

D

devilfish

Suspended / Banned
Messages
10
Edit My Images
No
Hi everyone,
I couldn't work out where's best to post my problem. I've recently come back from a long trip, where I'd been moving the photos from the SD cards of my compact digital camera to a portable hard drive. Everything was moved without any problems. On my return to the UK, I found that many photos were lost, some unregistered on the initial SD card, and most videos have also been lost. With the use of recovery software I retrieved many of the missing photos, but there are entire folders whose contents have been corrupted. Instead of being jpegs, the photos are now uniform .exe files of a smaller size. Given that this affects my Singapore photos, where photography was a big deal for me, I'd be grateful for any help in getting them back.
Thanks!
 
Welcome to the forum :wave:

Have you tried recovery software? This is one I have successfully used & it is free.

Good luck :thumbs:


http://www.piriform.com/recuva
 
Folders full of random exe files sounds nastily like a virus.
Upload one to VirusTotal and see what it says about it.

I'd also scan all the machines as a precaution anyway, no matter what the results of that are :)
 
I know nothing about recovery, but I do hope you get your images back!!
And welcome to the forums. :wave:
 
Thanks everyone. I have tried recuva but would at least need something which scans even deeper. Virustotal looks impressive with lists of Trojans coming up, but any ideas on how to find the next step?
 
devilfish said:
Thanks everyone. I have tried recuva but would at least need something which scans even deeper. Virustotal looks impressive with lists of Trojans coming up, but any ideas on how to find the next step?
Click to expand...

If that's from the file you uploaded, then the images have either been encrypted by a nasty piece of ransomware or are toast :(

http://www.bleepingcomputer.com/forums/t/501540/ransomcrypt-dirtydecryptexe-uses-efs/

Zip and post a sample file somewhere, and I can have a fish.
I make *absolutely* no promises, and TBQH I'd be treating these as toast with anything got back a bonus.
 
leezer3 said:
If that's from the file you uploaded, then the images have either been encrypted by a nasty piece of ransomware or are toast :(

http://www.bleepingcomputer.com/forums/t/501540/ransomcrypt-dirtydecryptexe-uses-efs/

Zip and post a sample file somewhere, and I can have a fish.
I make *absolutely* no promises, and TBQH I'd be treating these as toast with anything got back a bonus.
Click to expand...

Thanks very much! Here's a link:
https://www.dropbox.com/s/35inxqg1v0ngb9m/Two Singapore photos.zip
 
So, your two files are actually identical binary wise.
They seem to be a marginally different version of this:
http://about-threats.trendmicro.com/Malware.aspx?id=39153&name=WORM_NUQEL.SM&language=en

Unfortunately, you're going to get nothing back from these files.

To go deeper than Recuva, your best option is probably Photorec:
http://www.cgsecurity.org/wiki/TestDisk_Download
If you've been recycling SD cards & filling them to the max, then you're unlikely to get anywhere by trying it on them, but you may be able to recover one or two this way.
Photorec on the USB drive may yield some results, but I wouldn't make any guarantees about this either.
 
leezer3 said:
So, your two files are actually identical binary wise.
They seem to be a marginally different version of this:
http://about-threats.trendmicro.com/Malware.aspx?id=39153&name=WORM_NUQEL.SM&language=en

Unfortunately, you're going to get nothing back from these files.

To go deeper than Recuva, your best option is probably Photorec:
http://www.cgsecurity.org/wiki/TestDisk_Download
If you've been recycling SD cards & filling them to the max, then you're unlikely to get anywhere by trying it on them, but you may be able to recover one or two this way.
Photorec on the USB drive may yield some results, but I wouldn't make any guarantees about this either.
Click to expand...

Thanks again for your help!
 
A further issue you guys may be able to help with:
a number of photos have been skipped from the sequences; I remember taking them and reviewing them afterwards, but on the original card, backup folders and recovered files, they're completely absent. The file numbers just tend to skip those 20 or so in each sequence. Any ideas on how to get these back?

Thanks again.
 
Have a look for Pandora Recovery program. I'd lost a lot of photos when I had a computer problem recently and Recuva didn't scan deep enough to get them back. With Pandora I got them all back, although the file names had been altered so you might need to rename them.
 
You must log in or register to reply here.
Back
Top