Log in ....Tribune

Monday, December 15, 2003
Downloads

Recover deleted files
Raman Mohan

THERE is a lot hidden on your computer hard disk. At times, we accidentally delete certain files and then regret their loss. There are programs that help you undelete the files but very few of them are freeware. This fortnight we feature a freeware that does much more than recover long deleted files. With this handy tool you can view your disks in their raw form.

Disk Investigator

This is a multiple utility that can perform the following functions — locate sensitive data with the search viewing functions, display the true drive contents by bypassing the operating system and directly read the raw drive sectors, undelete previously deleted files, view raw directories, files, clusters, and system sectors, view low-level BIOS parameter block attributes, view files through external applications, search files and raw clusters for content and verify the effectiveness of file and disk wiping programs. There are two disk-viewing modes to which you can switch to using the radio buttons at the top left of the disk investigator window. The first is the Disk Mode. Here you can view the raw contents of disk on a sector-by-sector basis. Use the horizontal slider at the bottom to view different parts of the disk. You can also enter the sector number directly. This mode can be used for viewing both the used space of the disk as well as the free space (which may contain recoverable data). The other is the Directory Mode. In this mode, you can view the disk contents via the directory structure, which enables you to view the raw contents of any file on the disk. This mode cannot be used for viewing the free space of the disk. The Search function is available when disk investigator is running in “Disk” view mode. Use this function to search for data on the selected disk. This function will search all used and unused space on the disk. (Note that data can be found on “ unused” part of the disk). The Undelete function automatically recovers previously deleted files (i.e., those coloured red on FAT file systems). Preferably select a different drive as a destination for the recovered files, which will eliminate the risk of data yet to be recovered being overwritten by recovered files. Download from www.theabsolute.net/sware/dskinv.html