undelete a folder ?

[Billie Walsh]

Andrew Zajac wrote:
> http://help.ubuntu.com/community/DataRecovery
> 
> On Mon, Mar 3, 2008 at 12:13 AM, Richard <cms0009 at gmail.com> wrote:
>> I need to recovery a folder off my backup usb drive vfat 32
>>  is there a application for doing this??, or a linux command ??
>>
>>  Thanks in Advance
>>  Richard
>>
>>  --
>>  kubuntu-users mailing list
>>  kubuntu-users at lists.ubuntu.com
>>  Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/kubuntu-users
>>
> 
> The Fat filesystem does not have an easy way to undelete files.  Fat
> file undeletion software uses data carving techniques.
> 
> http://help.ubuntu.com/community/DataRecovery
> 
> If your drive is small, you can use foremost or photorec to data carve
> the files out.  If the drive is very big and you don't want to sort
> through a lot of recoverd files (it won't differentiate between intact
> and deleted files), you can use the "dls" tool from The Sleuth Kit to
> make an image of the unallocated blocks, and then recover from there.
> 

I don't know about Linux in general or Kubuntu in particular but

IF you haven't written anything else to the disk
If you can open the disk and see the file system

When you "delete" a file it will often just remove [ change the 
referrence ] the file name in the allocation table [ I think it's called ].

Sometimes I have been able to find this listing and redo the name.

IF you have written to the disk there is a good possibility that at 
least some of the file was overwritten and will not be recoverable.

There are a LOT of "IF'S" to this method but in some cases it can work.

-- 
Life is what happens while your busy making other plans.