AVI Recovery Software for camera memory chips
How to recover deleted AVI video files
The AVI video format is very popular with cameras. If a camera FAT32 memory chip is deleted, then the locations of any fragmented AVI is lost. As AVIs tend to be large files, 20-30MB a minutes, the chance of fragmentation is high. Many cameras actually record files in a fragmented way and so simple data carving does not work. Download demo to see what is possible.
CnW Recovery has a routine that will help process fragmented AVI files. It is part of the Data carving function, when the Process fragments option is enabled. There are two modes that the routine will work in, as follows. However, the preferred process is to use the AVI Wizard
Defragmenting by carving.
This mode operates by finding the start of an AVI file - it has a signature of RIFF - and then finding the ‘idx1’ section of the file. This section of the files indicates where each element is stored. By having the idx1, it is then possible to search the disk for clusters that match the idx1 pointers. By using this technique the chance of a false match is almost zero.
Recovery by recreating the idx1
The preferred method described above will have a very high chance of producing a working file, but is does rely on all data clusters still remaining on the disk. Sometimes cluster can be overwritten, and so it is impossible to recover the complete original AVI file. In these instances, the program will make use of what it has, and reconstruct the idx1 section of the file. This will give a shortened AVI file, but one which will be viewable. The length of the file does depend on how it was fragmented and so in the worst case, it could be just one cluster long, or 99% complete
Second type of AVI file
Not all AVI files have the same structure. A variation has been found on a video camera using a memory chip. Instead of an idx1 section at the end of the file, there are ix00 and ix01 indexes at the start of the file. The interesting twist is when the camera stores the data, it starts with the data, and then ends with a cluster (or multiple clusters) that contain the ix00 and ix01 index pointers. When it comes to carving a FAT disk that may have been deleted, the data will be found first, followed by the header. If the file is copied to another disk, then the sequence will be more logical. The CnW fragmentation recovery routine will work with this sequence and has a very high recovery rate.
Click here for a white paper on the subject