mscotgrove wrote:
Nothing complex except that the carving program has to determine that it is a .xls rather than a .doc
Quick test.
Mount the .exe "as is" with IMDISK.
Run Photorec on the drive letter assigned to the mounted "disk image".
Result is f167.xls (perfectly fine when opened in Excel).
jaclaz
↧