EraseUndo for NTFS

NTFS files undelete utility for Microsoft Windows NT and Microsoft Windows 2000

About EraseUndo for NTFS How it works Software and hardware requirements License agreement Responsibility and warranty Thanks from the author EraseUndo discussion club Registration

Download EraseUndo for NTFS 1.0.135	EraseUndo for NTFS Home Sites
EraseUndo.zip, 386 KByte	http://www.frolov.pp.ru (primary site) http://geocities.datacellar.net/eraseundo (mirror site)

About EraseUndo for NTFS

EraseUndo for NTFS is designated for restoring deleted files in NTFS drives. It will get your files back if you:

• occasionally deleted a file and the Recycle Bin was not activated;
• erasing files from the Recycle Bin deleted also something what you need;
• deleted needful file through a program which does not work with Recycle Bin;
• saved changes to a file and wish to return the previous edition;
• fall victim to viruses or Trojan programs, erasing files from the drive.

In particular, using EraseUndo for NTFS utility, Microsoft Windows NT server administrator will be able to restore files, occasionally deleted by users from network drives.

EraseUndo for NTFS utility restores not only files, deleted from standard Recycle Bin for Microsoft Windows but also files, erased from the so called Protected Recycle Bins, supplied by other software manufacturers.

However, EraseUndo for NTFS is not to be considered another Protected Recycle Bin. It physically reads NTFS drives to search for and restore deleted files. Therefore, to be able to restore a lost file, you do not need to previously install the utility as you do, using Protected Recycle Bin. You can install and apply EraseUndo after you discover, an important file is missing.

How it works

Practically all information, needed to restore files, deleted from NTFS drives is located in the so called Master File Table (MFT). Each file corresponds to a certain record in this table.

Upon deletion of a file the record, describing it, is marked as empty. Additionally a mark is made in a special system file about drive fragments (clusters), previously allocated for storage of the deleted file.

EraseUndo for NTFS scans MFT table, searching for records of deleted files. Then it tries to restore the files, using information, containing in the records, on file attributes and location of clusters, allocated for this file.

If you deleted a file from drive and then saved other files on that drive, the data of the deleted file may appear to be overwritten. That makes it impossible to restore the deleted file. That’s why, make sure to use EraseUndo for NTFS immediately after you discover loss of necessary files.

Software and hardware requirements

Version 1.0 of EraseUndo for NTFS utility compatible with the following operational systems:

• Microsoft Windows NT version 4.0 with Service Pack version 3.0 or later version;
• Microsoft Windows 2000 (does not recover encrypted files)

The current version of the utility restores deleted files only in NTFS drives.

There are no special requirements to PC hardware. It should support operation of the above mentioned systems. To setup EraseUndo for NTFS you need about 1 Mb hard drive space. The utility can be run from a floppy drive or a network drive.

License agreement

All rights for EraseUndo for NTFS utility and electronic Help system for it are reserved by Alexandre V. Frolov (E-Mail: alexandre@frolov.pp.ru, Web server: http://www.frolov.pp.ru)

The author of EraseUndo for NTFS utility allows its free redistribution on condition it is complete and in initial format. To charge fees for distribution of the utility is forbidden as well as to distribute along with the utility or separately its registration information.

It’s forbidden to reassemble the loading module of the program and its Help system file. You must not use graphic images inserted into the utility or any text fragment from Help system without obtaining written permission from the author.

To get consulted on distribution terms apply to alexandre@frolov.pp.ru.

Unregistered users of EraseUndo for NTFS utility are allowed to restore up to five deleted files on one or several computers. For further use of the utility they need either to register it or to remove it from disk.

It’s allowed to redistribute unregistered utility to other users for estimation of its potentials.

Registered users may obtain a single license for one computer or two, if they are used in the office and at home. If the program is to be operated on three or more computers, acquisition of a multiple license is necessary.

Registered users are entitled to make any number of reserved copies of EraseUndo for NTFS original distributive.

Registered users of EraseUndo for NTFS are not allowed to pass registration ID over to other parties as well as to distribute registration information gratis or for charge.

Responsibility and warranty

EraseUndo for NTFS utility is distributed in accordance with “As it is” principle.

Under no circumstances the author or the companies, distributing the utility, should not be considered liable for the losses, damages, missed profit or any other consequences, running out of EraseUndo usage. The author is not responsible for distribution by other parties of the modules of the utility, infected with computer viruses, or containing Trojan impregnations.

For the absence of complete and properly documented information on NTFS file system internal structure, at the moment of the program development, the author does not vouch for its unrestricted capacity for work in all configurations of Microsoft Windows operational system or other software.

Thanks from the author

The creator of NTFS file system driver for Linux Martin von Loewis helped me a lot at my work over EraseUndo for NTFS, allowing me to use the source text of hunk decompression function ntfs_decompress.

I’m grateful to Regis Duchesne – the author of NTFS file system manual. Its only due to his brilliantly made description of NTFS undocumented internal formats the utility EraseUndo came into existence.

I was amply aided by Maxim Sinev on the first stages of my work, getting into the bottom of MFT record structure secrets. He also made a lot of precious notices concerning functional potentials and internal realization of the utility.

I am grateful to my brother, Grigory Frolov, who let me use source texts of some auxiliary modules in EraseUndo for NTFS utility. This factor reduced to a noticeable extant the development time.

I am thankful to Alexey Abramkin, who implemented designer work on creation of interface of EraseUndo for NTFS and its Help system.

Also I would like to thank Elena Gorbunova, who made the translation of Help system into English.

Alexandre Frolov

This page hosted by
Get your own Free Home Page