🚀 go-pugleaf

In article <jf=ylsk@rpi.edu> ncc1701@acm.rpi.edu writes:
>Sounds like some of the files were cross-linked.  As long as
>they were all deleted, they had equal chance of being recovered
>in an "orderly" fashion.  However, once one file that was
>cross-linked with another was recovered, the second file
>would see part of itself as being allocated, and would
>therefore no longer have a good chance at recovery.
>
Not necessarily - more likely the files were fragmented, and undeleting one
of the earlier ones incorrectly included the start cluster of one of the later
files (since, without delete tracking, there is no way of telling which
clusters apart from the first one to use - so undelete programs generally
allocate the next available cluster until the file length is satisfied). It
can be better to undelete starting from the LAST file in the directory and
working up, but the best solutions are i) don't delete the wrong files in
the first place :-) ii) keep backups iii) use delete tracking iv) unfragment
your hard disk regularly
--
Thomas Sandford | t.d.g.sandford@bradford.ac.uk