Undelete from MS-DOS/VFAT from Linux?
Ben Scott
dragonhawk at gmail.com
Fri Jul 18 01:55:56 EDT 2008
I've got a FAT-formatted flash drive with a deleted file on it I'd
like to get back. I'm pretty sure the file is still there, just the
directory entry for it is deleted. I'm wondering if anyone here has
knowledge on this.
I found "mundelete" on SourceForge, but it seems to have a serious
case of software rot. All I can get it to do is segfault. Plus the
docs stink and the code is a mess.
I found reference to using fsck.vfat with the -u switch, but I get
this, which looks bad:
Warning: Did only undelete 26 of 2529 clusters.
File size is 41428540 bytes, cluster chain length is 425984 bytes.
Truncating file to 425984 bytes.
I'm not sure if that means the FAT chains have been lost, or just
that fsck is confused.
I dismounted the flash drive as soon as I realized the file was
deleted, so I am expecting the FAT chains to be intact. But maybe my
luck is bad.
-- Ben
More information about the gnhlug-discuss
mailing list