[sleuthkit-users] Undelete files over vfat disk partition.

[<BRE...@te...>]

Hello, last night trying to delete a file I deleted all the files (large files) in a subdirectory on an VFAT file system mounted in my Fedora Core 4 installation (W-XP shared). I rebooted the system and the partition remounted for a while until I dismounted manually: this partition is only used as a repository so I would not expect all these blocks (around 15 GB) have been overwritten.
The obvious questions are :
how can I check is the files can be undeleted?
how can I undelete securely all these files?
I assume I should not mount it anymore.

Thanks in advance.







Prueba el Nuevo Correo Terra; Seguro, rápido, fiable.