file recovery/undelete on fat-system
 

hi all,

does anyone know a utility or howto on
undeleting/recovering files from fat16-fs?

thanks,

toby

Sure,
Download Knoppix live CD, boot it up and get to a root terminal. Navigate to another drive like an external USB drive or another partition with as much free space as the drive or partition you want to recover files from. Issue command: photorec and go through the options to configure it and let her rip. You can also stop it with 'Ctrl + C' and resume later if you don't have as much free space as the drive or partition you need to recover from.
If you can access the drive or partition from an installed Linux OS, you don't need to download Knoppix, just install testdisk and have at her.
There are also some exceptional Windows based applications, but because I'm in the data recovery business, I'll avoid shooting myself in the foot. Photorec is all I'll recommend for now, it's pretty good for non-elaborate files.

I'm not experienced at all in this field but I have one link that could be worth looking:
http://www.forensicswiki.org/wiki/
http://www.forensicswiki.org/wiki/Tools:Data_Recovery