[plug] [ot] Fat32 undelete from dos mode ?

[Steve Grasso]

Mike,

1.  I think you'll find UNDELETE.EXE from DOS 6.22 will work fine on a FAT32 
(Win95a and Win95b, not Win98) disk, although you'll have to lock the disk 
first ie. type lock at the prompt

2. You may get some joy booting from a Linux bootdisk -- eg. Toms Root Boot 
http://www.toms.net/rb/home.html -- and using something like the following on 
key words:

dd if=/dev/hda | strings | grep -A 5 -B 5 associate's_name(s)_here

NOTE: I can't remember if Tomsrtbt has support for disks, I know LOAF 
doesn't. If it doesn't, I have a rebuilt RamFloppy disk image which I put 
together specifically for repairing/recovering data from IDE disks which I'll 
email you if you want.

3.  Pull the disk out of the computer, install it in a computer running Linux 
on another disk, and use lde -- http://lde.sourceforge.net/ -- to 
progressively dump raw portions of the disk's partition(s) to file on the 
Linux disk, grepping through the recovered goop for usefull data.

Use something like: 
lde -D startblock -N how_many_blocks+1 /dev/hdb1 > /some_path_to_the/outfile

Then:
strings /some_path_to_the/outfile | grep -A 5 -B 5 some_key_word_here
or 
strings /some_path_to_the/outfile | more

HTH
Steve

On Wednesday 08 August 2001 07:47, Mike wrote:
> Hi chaps,
>
> Sorry for the off topic, I'm in a quandry to help a friend
> recover his mailboxes and nicknames so he can email associates
> before he travels o/seas.
>
> Have been looking for recover routine that doesn't need to be
> installed (ie not upset clusters) on his drive, so any equivalent
> to UNDELETE.EXE that can work on FAT32 and fit on a floppy
> would be ideal, searches haven't found anything :(