5 replies
by vagab0nd
Yes, in most cases you can. To do this obtain utility like Symantec Undelete or something similar.
That is possible because when you delete the file it is not actually erased from hard drive. File dissappears completely only when other file is written over it.
That's why when you need to recover deleted files you should minimize all work with HDD to avoid overwritting.
Hope it helps.
by fzabin
by eujay
As long as nothing else is written to the drive then you should be able to get your file back.
The file is not deleted from the drive. All that happens is the first letter of the file name is taken off of the entry in the File Allocation Table.
Dos Undelete, Norton utilities, symantec and what have will allow you access to all entries in the FAT and will show a list of fuly recoverable files. All of these will have a filename with a "?" as the first character. It will also show a list of potentially recoverable files. These too will have a "?" at the beginning.
When you select a file to recover it will ask you for the first letter. It writes that letter back to the FAT and you have your file back.
If there been any disk writes since the deletion then the space where the file is at may have been used or partially used so you might get none or some of the file back.
You can get away with this in Windows/DOS but not in UNIX which is very unforgiving of deleted files but thats another story.
Hope this helps. email me if you have any questions
by fzabin
by fzabin
This discussion is closed to new replies.
Trending Windows Forum posts
Sort by Trending