Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Posting-Version: version B 2.10.1 6/24/83; site sphinx.UChicago.UUCP Path: utzoo!watmath!clyde!burl!ulysses!mhuxr!mhuxn!ihnp4!gargoyle!sphinx!shor From: shor@sphinx.UChicago.UUCP (Melinda Shore) Newsgroups: net.micro.pc Subject: Re: Norton utilities question Message-ID: <811@sphinx.UChicago.UUCP> Date: Fri, 12-Jul-85 12:43:11 EDT Article-I.D.: sphinx.811 Posted: Fri Jul 12 12:43:11 1985 Date-Received: Sat, 13-Jul-85 12:44:59 EDT References: <5507@tekecs.UUCP> Organization: U. Chicago - Computation Center Lines: 14 [] > From: glenm@tekecs.UUCP (Glen McCluskey) > One of the Norton utilities claims to be able to recover > deleted files. Does it actually do this? If so, how? Under MS-DOS, when you delete a file the first byte in its directory entry is changed to E5. (It would be pretty inefficient to zero the whole file.) File recovery utilities find the directory entry for the appropriate deleted file and change the first byte back. Note: If the directory entry has been reused or any of the clusters have been taken for storing another file, the deleted file is not recoverable. -- Melinda Shore ..!ihnp4!gargoyle!sphinx!shor University of Chicago Computation Center Staff.Melinda%chip@UChicago.Bitnet