Undelete

Choose the volume or disk image you want to analyze.

Options

Select disk to analyze

Lists the volumes available for analysis. Select the volume you want to scan for deleted files. The list is disabled while Disk Image is checked.

Disk Image

Clear this check box to analyze a volume. Choose the volume from the list of available volumes. Select this check box to analyze a disk image. Enter the disk image filename in the edit box below.

Browse

Opens a file dialog where you can choose the disk image file (for example, an *.img or *.ima file) instead of typing its name. Available only when Disk Image is checked.

Scan vacant clusters on FAT partitions

When checked, the plugin also scans vacant clusters of FAT volumes when looking for directories. This is ignored on NTFS and exFAT volumes.

Show existing files and directories

When checked, both deleted and existing files and directories will be displayed.

Show files with zero size

When checked, files with zero size will also be displayed.

Show empty directories

When checked, also empty directories will be displayed.

Show metafiles

When checked, there will be a special {Metafiles} virtual folder containing some file system metafiles. You can ignore this folder for ordinary recovery tasks.

Estimate files damage

When checked, the plugin checks whether clusters of each deleted file are also used by existing files or by other deleted files, and shows the result in the Condition column (switch the panel to Detailed view). When unchecked, the analysis is faster, but the condition of deleted files is shown as Unknown. See Getting Started with Undelete Plugin for the meaning of the condition values.

See Also

Recovering Deleted Files and Directories