cgsecurity.org

Chris,

OK, I think I understand now. The resulting display will always be nearly immediate, since the display is based only on the directory entries and not on an examination of the data. Even on a 120 Gb disk, reading and display of the directories will occur very quickly.

In my case, there's not ...

Objective:
Recover files from external USB-attached FAT32 hard drive after multiple deletes and a format.

Background:
Western Digital WD1200 120 Gb drive was being used as a weekly backup drive using Retrospect Express software on a Windows XP system. The drive was formatted with a single FAT32 ...

OK, so for a FAT format I should expect to see files eligible for undelete (in red) as they are found. The absence of ANY such files after 18 hours would indicate that either none were found (which I would think rather unusual) or I did something incorrectly (which happens all too often). I'll ...

How can I tell is a FAT32 undelete is actually doing anything?

(Yesterday I did an undelete on an HTFS system and for a long time no change appeared on the screen, but I could see and hear activity on the drive being processed, so I let it run. After returned from lunch, I found thousands of ...