PhotoRec

Infobox_Software
name = PhotoRec



caption = Demonstration of PhotoRec running in Linux
collapsible = yes
developer = Christophe Grenier
latest_release_version = 6.10
latest_release_date = release_date|2008|07|17
latest_preview_version =
latest_preview_date =
operating_system = Cross-platform
platform = CLI
genre = Data recovery
license = GNU General Public License
website = http://cgsecurity.org/wiki/PhotoRec

PhotoRec is a data recovery software tool designed to recover lost files from digital camera memory, (CompactFlash, Memory Stick, SecureDigital, SmartMedia, Microdrive, MMC, USB Memory Drives etc.), Hard Disks and CD-ROMs. It recovers most common photo formats, including JPEG, and also recovers audio files including MP3, document formats such as Microsoft Office, PDF, and HTML, and archive formats including ZIP.

PhotoRec does not attempt to write to the damaged media you are about to recover from. Recovered files are instead written to the directory from where you are running PhotoRec or any other directory you choose.PhotoRec is shipped with TestDisk.

Operating systems

PhotoRec is compatible with:
* DOS (either real or in a Windows 9x DOS box)
* Microsoft Windows (NT4, 2000, XP, 2003, Vista)
* Linux
* FreeBSD, NetBSD, OpenBSD
* SunOS
* Mac OS X

See also

* TestDisk

External links

* [http://www.cgsecurity.org/wiki/PhotoRec Official Site]
* Adrian Crenshaw, [http://www.irongeek.com/i.php?page=videos/data-carving-with-photorec-to-retrieve-deleted-files-from-formatted-drives-for-forensics-and-disaster-recovery Data Carving with PhotoRec] to retrieve deleted files from formatted drives for forensics and disaster recoveryThis video introduces the concept of data carving/file carving for recovering deleted files, even after a drive has been formatted.
* Seth Fogie - InformIT, [http://www.informit.com/guides/content.asp?g=security&seqNum=234&rl=1 Stealing Your Family Vacation: Memories of a Media Card]
* Kaspersky Lab, [http://www.viruslist.com/en/viruses/encyclopedia?virusid=313444 Recovering files encrypted by Virus.Win32.Gpcode.ak using PhotoRec] After encrypting files, the virus deletes the original files but PhotoRec can recover them.