Hello
Hope You will all fine. Actually, I m doing a project of Data Recovery from floppy drive formatted with FAT(FAT12) using C++ and Data Structures. I have trouble in finding the address of the deleted files. I know that when we delete file from the floppy then OS does two tasks.
1) OS will make all the entries of the cluster in the FAT to ZERO(available) which are allocated to that file.
2) OS will mark first character of the file as e5 (sigma) to show that it is deleted.

But How can we find the entries (Addresses of the Cluster allocated to the deleted file) of the FAT (wich becomes ZERO by OS). If any one knows any thing about deleted file except 2 described above then tell me plzzzzz.

Thanks in advance

I know very little about the underlying filesystem & how it operates, but I think file undelete programs usually scan the disk for those e5 markers, and see if what's after that's marked as erased could possibly be a file or not.

I don't think the FAT table holds any information of a file once it's deleted.

GF