|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] OT - winxp file evaporation
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Doug Crompton wrote:
> On Tue, 1 Nov 2005, LeRoy Cressy wrote:
>
>
>>I think that you can find your file if you mount the filesystem as a
>>msdos file system
>>
>>mount -t msdos /dev/fatfs-dev /mountpoint
>>This will take away all of the long filenames from view, and every file
>>will be 8.3
>>
>>This might work, though I never tried it.
>>
>
> I guess I could give that a try sometime but keep in mind this drive is
> not mounted on Linux it is a true WinXP system.
>
> Doug
The second question is is the file system a ntfs or a vfat file system.
If it is a vfat file system then you can use my suggestion above using
a KNOPPIX CD. On the other hand, I think that you might have to use
some of the forensics utilities mentioned last week on this list.
- --
Rev. LeRoy D. Cressy mailto:leroy@lrcressy.com /\_/\
http://lrcressy.com ( o.o )
Phone: 215-535-4037 > ^ <
FAX: 215-535-4285
gpg fingerprint: 62DE 6CAB CEE1 B1B3 359A 81D8 3FEF E6DA 8501 AFEA
For info on enigmail: http://lrcressy.com/linux/mozilla.pdf
For info on gpg: http://www.gnupg.org/
Jesus saith unto him, I am the way, the truth, and the life:
no man cometh unto the Father, but by me. (John 14:6)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
iQIVAwUBQ2eciXlsxrSGsIsqAQoW/w//S/p/V05oZ01hMjLG4M1WHsFGX88HBw38
W1UjnYTfS7lIflvvyVn8zbO9yK9Q0JmY6aaEGEHWjq6qn88d6LphGY2HZydvGZeX
Ddy3s2fOPlc7wvRVWsgNQ/kvw4Fl2RbR2S6co9t+ha0xKsAyuXjt5k2DeEormQfN
NXN2EPbjCksM+1rJSs6gdZDqnnksgs7KJdeUrDrwvku38oOYoAzyEbeEUtpXVRlV
TzwLR1D7vsG8ce6WFhn96l/O1km77c17H8ppzo1knDph144e/hY6YzSHUEzFEKJA
CUROtNv5Ca8ZHNoeuvrbK8c5mEdmjm9klyJQ3RHOzERJ7BrImEqrM9SbMdWSC08Y
1j29m+XUdX1NNSt4Px77Zaix2JBW6dqHMJtrn0yNg/xxEK4gUufEvbA1/rPDgrmT
B6HGh4wyoWp/VT02JzSW7fHxubDl93B07fKQXNbqRALKuPxyRH2eFIEaomxRbKkm
tjoxDi6xxAcgTHQ2aKtjSXFmyBV2EobK4Ee0/sIDcTL899+aiQz6xYLjI21vw0L8
busJLl/Pn5RDxvX1llbJ19hNVUPTdjKECeQIe2lvn+7y+XR7pH1DS6o4aOagP4jO
md3bpVl+ygzaqgxm0x80IOG/y5Uge4G0r8z+hQm0b1FfHPz8yNGpnOSSuMwHqXEr
T/cevOF12Uk=
=XWkZ
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|