I have acccidentaly deleted some files on NTFS volume (not using Explorer,
so Recycle is empty). Are those files lost forever or I can somehow restore
them?
Please respond ASAP!
TIA,
Vladimir
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
I believe there was an undelete utility at http://www.winternals.com.
Unfortunately, currently is this site under construction. There are probably
other undeletes (Symantec?).
In the meantime avoid all writing to this volume. Don’t browse web if your
browser cache is there. If the volume is on separate drive (different from
OS drive), you can disable this drive in the Device Manager temporarily.
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
From:
xxxxx@Starbase.com[SMTP:xxxxx@Starbase.com]
Reply To: xxxxx@lists.osr.com
Sent: Friday, November 02, 2001 4:04 AM
To: xxxxx@lists.osr.com
Subject: [ntfsd] Urgent: Undelete on W2K/NTFS volume
Importance: High<<message: microsoft exchange message>>
>
>
—
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com</message:>
Urgent: Undelete on W2K/NTFS volumeSwitch the power off (or better press Reset switch if you have it). Do not allow the caches to be flushed.
Then boot DOS and Norton DiskEditor or such.
Then arm yourself with Linux NTFS source and try to restore the files back by byte-editing the disk. Remember all updates made.
Then load NTFSDOS TSR (it is OK, it does not use the log-based restart) and read your files.
Then roll back all byte edits to avoid contradictions between disk data and transaction log contents (I cannot say just off-head whether this contradiction can be a disaster, but this is possible). Then boot NT back.
Max
----- Original Message -----
From: Chtchetkine, Vladimir
To: File Systems Developers
Sent: Friday, November 02, 2001 6:04 AM
Subject: [ntfsd] Urgent: Undelete on W2K/NTFS volume
I have acccidentaly deleted some files on NTFS volume (not using Explorer, so Recycle is empty). Are those files lost forever or I can somehow restore them?
Please respond ASAP!
TIA,
Vladimir
You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Urgent: Undelete on W2K/NTFS volumeor, buy and download FileRestore from
Winternals at:
http://www.winternals.com/products/repairandrecovery/filerestore.asp
// Fredrik
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of Maxim S. Shatskih
Sent: den 2 november 2001 04:52
To: File Systems Developers
Subject: [ntfsd] Re: Urgent: Undelete on W2K/NTFS volume
Switch the power off (or better press Reset switch if you have it). Do not
allow the caches to be flushed.
Then boot DOS and Norton DiskEditor or such.
Then arm yourself with Linux NTFS source and try to restore the files back
by byte-editing the disk. Remember all updates made.
Then load NTFSDOS TSR (it is OK, it does not use the log-based restart)
and read your files.
Then roll back all byte edits to avoid contradictions between disk data
and transaction log contents (I cannot say just off-head whether this
contradiction can be a disaster, but this is possible). Then boot NT back.
Max
----- Original Message -----
From: Chtchetkine, Vladimir
To: File Systems Developers
Sent: Friday, November 02, 2001 6:04 AM
Subject: [ntfsd] Urgent: Undelete on W2K/NTFS volume
I have acccidentaly deleted some files on NTFS volume (not using
Explorer, so Recycle is empty). Are those files lost forever or I can
somehow restore them?
Please respond ASAP!
TIA,
Vladimir
You are currently subscribed to ntfsd as: xxxxx@perfedge.com
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com