Simon,
I got the samples, thanks. Below is a diff of the metadata. Basically, here is what Windows has done:
1) Deleted the JPEG MPImage trailer containing the PreviewImage
2) Corrupted the MakerNotes offsets
3) Added some XMP
4) Re-generated the ThumbnailImage
5) Changed the EXIF byte order <-- THIS IS A REAL NO-NO!!
6) Added EXIF OffsetSchema and XPKeywords tags
The bottom line is that Microsoft has made a real mess of the EXIF and deleted the PreviewImage completely. Nasty. There is no way to completely recover from this.
- Phil
diff tmp/2011-01-08_14-49-59_1.txt tmp/2011-01-08_14-49-59.txt
2c2,4
< [System] File Name : 2011-01-08_14-49-59_1.jpg
---
> [ExifTool] Warning : [minor] Possibly incorrect maker notes offsets (fix by 3768?)
> [ExifTool] Warning : [minor] Suspicious MakerNotes offset for DataDump
> [System] File Name : 2011-01-08_14-49-59.jpg
4,5c6,7
< [System] File Size : 4.4 MB
< [System] File Modification Date/Time : 2011:01:08 08:49:58-05:00
---
> [System] File Size : 3.8 MB
> [System] File Modification Date/Time : 2011:01:08 09:49:59-05:00
9c11
< [File] Exif Byte Order : Little-endian (Intel, II)
---
> [File] Exif Byte Order : Big-endian (Motorola, MM)
24a27,28
> [IFD0] XP Keywords : Misc
> [IFD0] Padding : (Binary data 2060 bytes, use -b option to extract)
56a61,62
> [ExifIFD] Padding : (Binary data 2060 bytes, use -b option to extract)
> [ExifIFD] Offset Schema : 3768
66d71
< [Panasonic] Data Dump : (Binary data 8200 bytes, use -b option to extract)
70c75
< [Panasonic] Internal Serial Number : (F52) 2009:11:26 no. 0059
---
> [Panasonic] Internal Serial Number :
84c89
< [Panasonic] Baby Age : (not set)
---
> [Panasonic] Baby Age :
96c101
< [Panasonic] AF Point Position : 0.7 0.5
---
> [Panasonic] AF Point Position : 0 0
115c120
< [Panasonic] Baby Age : (not set)
---
> [Panasonic] Baby Age :
117d121
< [InteropIFD] Interoperability Index : R98 - DCF basic file (sRGB)
139,140c143,144
< [IFD1] Thumbnail Offset : 10752
< [IFD1] Thumbnail Length : 4424
---
> [IFD1] Thumbnail Offset : 14670
> [IFD1] Thumbnail Length : 3809
155c159
< [MPImage2] MP Image Start : 4014592
---
> [MPImage2] MP Image Start : 4001936
157a162,165
> [XMP-rdf] About : uuid:faf5bdd5-ba3d-11da-ad31-d33d75182f1b
> [XMP-microsoft] Date Acquired : 2011:01:10 10:51:36.348
> [XMP-microsoft] Last Keyword XMP : Misc
> [XMP-dc] Subject : Misc
159c167
< [Composite] Base Name : 2011-01-08_14-49-59_1
---
> [Composite] Base Name : 2011-01-08_14-49-59
169c177
< [Composite] Thumbnail Image : (Binary data 4424 bytes, use -b option to extract)
---
> [Composite] Thumbnail Image : (Binary data 3809 bytes, use -b option to extract)