UNDELETE wizard and advanced File Recovery

Active@ UNDELETE ver. 2
See documentation for latest version

How to use UNDELETE wizard for the advanced File Recovery?

Advanced file recovery feature includes previewing file contents and file cluster's chain manipulation before restoration occurs. It can be helpful when standard Undelete command can not successfully recover file because it's being partially overwritten with other data. Undelete Wizard allows you to see and view contents of clusters composing the file, you can add, remove, change clusters in place, thus composing file body manually before recovering. However it will help you for the only files having readable format, like *.txt, *.log, *.rtf ... files.

To use advanced file recovery feature:

1. Start Active@ UNDELETE, find and select deleted file
2. Start Undelete Wizard command by one of the following methods:
   • Click Undelete Wizard button on the toolbar
   • Right-click the file, and then click Undelete Wizard on the context menu
3. Read brief procedure description on Welcome screen and clear Show this dialog next time checkbox if you do not want to see welcome screen next time. Click Next to go to the next step
4. On Step 1 of the Wizard you'll see file information, like location, size and attributes. Click Next to go to the next step. If the file has poor chances to be recovered successfully, you will see warning message explaining the reason:
5. On Step 2 of the Wizard you can see clusters composing the file, preview and manipulate them:

   At the left side there is a list of all available drive's clusters. Clusters occupied by other files data have black color, like cluster 21930 in this example. Unoccupied, or free clusters have red color, like cluster 21936. Grey color have clusters selected for the recovery. At the right side there is a list of clusters composing file body. These clusters will be recovered later on. If you click any cluster in any list box, it's contents is displayed at the Preview pane below, where you can see it in Hex format, in Text format or mixed format, like on example above. You can switch between these formats using radio buttons.

   Image buttons help you manipulate the clusters: Page Up and Page Down buttons for Available Clusters list Find previous and next unoccupied cluster on the drive starting from the current position Buttons allows to Add and Remove current cluster to and from the Selected Clusters list Move current cluster in the Selected Clusters list one position Up and Down.

   When you examined clusters, and composed file body, click Next to finish recovery process.

6. On Step 3 of the Wizard you can change path and name of the file to be recovered and Preview the file using default viewer if you want to: When you defined all output parameters, click Finish to complete recovery process.

   For the safety reasons, the utility does not allow you to place the restored file into the same drive by default, because a newly created file should not overwrite the file under recovery (or a part of it), or the contents of the other deleted files. Always restore files to another logical, removable, floppy or network drive. However if you do not have a choice, go to configuration and turn on the option that allows you to restore file to the same drive.