[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [OT] undeleting on FAT32



On Fri, Nov 22, 2002 at 12:18:28AM +0100, Tim Dijkstra wrote:
> Hi,
> 
> This is slightly OT, but the file _was_ deleted with rm ;)
> 
> OK, so here's the problem: My girlfriend accidently deleted a file on a
> windows drive (which is not backuped). We managed to find 'cluster' and
> size of this file, now can I copy it somehow with this info. Perhaps
> with dd? Just shooting in the dark here...

I used to undelete DOS file by changing first byte of filename at the 
directory entry list from 0x5F or something to ordinary character.

Then you get back DOD file.  (Floppy and not in subdirectory, but it
should wok similarly...)

-- 
~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~ +++++
        Osamu Aoki <osamu@debian.org>   Cupertino CA USA, GPG-key: A8061F32
 .''`.  Debian Reference: post-installation user's guide for non-developers
 : :' : http://qref.sf.net and http://people.debian.org/~osamu
 `. `'  "Our Priorities are Our Users and Free Software" --- Social Contract



Reply to: