Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Posting-Version: version B 2.10.1 6/24/83; site sphinx.UChicago.UUCP
Path: utzoo!watmath!clyde!burl!ulysses!mhuxr!mhuxn!ihnp4!gargoyle!sphinx!shor
From: shor@sphinx.UChicago.UUCP (Melinda Shore)
Newsgroups: net.micro.pc
Subject: Re: Norton utilities question
Message-ID: <811@sphinx.UChicago.UUCP>
Date: Fri, 12-Jul-85 12:43:11 EDT
Article-I.D.: sphinx.811
Posted: Fri Jul 12 12:43:11 1985
Date-Received: Sat, 13-Jul-85 12:44:59 EDT
References: <5507@tekecs.UUCP>
Organization: U. Chicago - Computation Center
Lines: 14

[]
> From: glenm@tekecs.UUCP (Glen McCluskey)
> One of the Norton utilities claims to be able to recover
> deleted files.  Does it actually do this?  If so, how?

Under MS-DOS, when you delete a file the first byte in its directory entry
is changed to E5.  (It would be pretty inefficient to zero the whole file.)
File recovery utilities find the directory entry for the appropriate deleted
file and change the first byte back.  Note:  If the directory entry has been
reused or any of the clusters have been taken for storing another file, the
deleted file is not recoverable.
-- 
Melinda Shore                               ..!ihnp4!gargoyle!sphinx!shor
University of Chicago Computation Center    Staff.Melinda%chip@UChicago.Bitnet