Manual

C O N T E N T S
Preface.............................................................................................................................. 6
1. User Registration and Support ................................................................................. 6
1.1. User Registration....................................................................................................... 6
1.2. How to Register......................................................................................................... 6
1.3. Technical Support Options ........................................................................................ 6
2. Introduction to FinalData.......................................................................................... 7
2.1. How FinalData Works ............................................................................................... 7
2.2. FinalData Features .................................................................................................... 7
User-Friendly ............................................................................................................ 7
Data recovery after virus infection............................................................................ 7
Fast and easy ............................................................................................................. 7
FinalData is Windows XP compatible....................................................................... 7
FinalData is reliable .................................................................................................. 8
Data Recovery after emptying the Recycle Bin ........................................................ 8
Keeps your information private ................................................................................ 8
Data recovery from CD-ROM drives and removable drives..................................... 8
3. Install/Uninstall .......................................................................................................... 9
3.1. Before Installing FinalData ....................................................................................... 9
3.2. System Environments................................................................................................ 9
3.3. FinalData Installation .............................................................................................. 10
Installing FinalData................................................................................................. 10
Uninstalling FinalData ............................................................................................ 16
4. General Data Recovery Procedure of FinalData Premium 2.0 ............................ 17
4.1. Launching FinalData ............................................................................................... 17
4.2. Open ........................................................................................................................ 18
Logical Drive Search .............................................................................................. 20
Physical Drive Search ............................................................................................. 21
4.3. Directory Scan......................................................................................................... 22
4.4. Cluster Scanning ..................................................................................................... 25
USER MANUAL
FinalData 2.0 Premium EDITION
User Manual
C O N T E N T S
continued
4.5. Searching for Specific Files.....................................................................................29

File Name Search ....................................................................................................30
Cluster Search .........................................................................................................31
Search by Date ........................................................................................................32
4.6. Recovery .................................................................................................................34
Saving to a Local Drive...........................................................................................34
Saving to a Network Drive ......................................................................................36
Saving to a CD-ROM Drive ....................................................................................37
5. Other Useful Features ..............................................................................................38
5.1. Preference Settings..................................................................................................38
Column ....................................................................................................................39
File List....................................................................................................................40
5.2. File Preview ............................................................................................................42
5.3. File Viewer..............................................................................................................43
Find Text String from File Viewer ...........................................................................44
File Viewer Edit Feature ..........................................................................................47
5.4. Find Starting Cluster of a File .................................................................................49
5.5. MPEG File Recovery ..............................................................................................53
5.6. Oracle Export File Recovery...................................................................................55
5.7. Save File System Information .................................................................................56
5.8. Save Sectors ............................................................................................................63
5.9. Read Saved Sectors File..........................................................................................65
5.10. Disk Viewer...........................................................................................................66
Find Text String from Disk Viewer..........................................................................68
5.11. Drive Management (Windows NT/2000/XP only) ................................................72
File Delete Manager ................................................................................................72
Folder Protection .....................................................................................................77
Storage Exceptions ..................................................................................................84
Log File Management..............................................................................................90
Start/Stop Drive Manager ........................................................................................92
2
USER MANUAL
C O N T E N T S
continued
6. How to Recover Data in Various Cases ..................................................................93

6.1. Emptied Recycle Bin (Windows 95/98/ME) ...........................................................93
6.2. Formatted Hard Disk (or Emptied Recycle Bin in Windows NT/2000/XP) ...........94
6.3. Altered File Size due to Virus..................................................................................95
6.4. Hard Disk Formatted with Another File System .....................................................95
6.5. Unrecognized Drive ................................................................................................98
6.6. System Not Bootable.............................................................................................102
7. Professional Data Recovery Procedures ...............................................................103
7.1. Damaged Office File Repair..................................................................................103
8. Email Recovery.......................................................................................................109
8.1. Recover Deleted Email..........................................................................................109
9. Terminate Data .......................................................................................................122
9.1. How Terminate Works...........................................................................................122
9.2. Wipe History .........................................................................................................123
9.3. Wipe File(s)...........................................................................................................126
9.4. Wipe Free Clusters ................................................................................................127
9.5. Wipe Options.........................................................................................................128
9.6. Terminate Cautions ...............................................................................................131
10. FAQ .......................................................................................................................132
10.1. Can I recover data from a formatted disk? ..........................................................132
10.2. Can I recover a hard disk that is not recognized?................................................133
10.3. Can I recover my data after performing FDISK? ............................................... 133
10.4. Is FinalData compatible with Windows XP?...................................................... 133
10.5. How long will it take to recover data? ............................................................... 133
10.6. Can I recover data on CD-ROM, DVD-ROM, MO, etc.? .................................. 134
10.7. What are damaged files, fragmented files and continuous files? ....................... 134
Damaged File ....................................................................................................... 134
Fragmented File.................................................................................................... 134
Continuous File .................................................................................................... 134
10.8. What kinds of viruses are protected against the FinalData counter measures? .. 135
USER MANUAL
User Manual
C O N T E N T S co n tin u ed
10.9. I have recovered a file, but I cannot open it. ...................................................... 135
Damaged File ....................................................................................................... 135
Fragmented File.................................................................................................... 136
10.10. I have accidentally overwritten my partition while using Ghost. ..................... 136
10.11. Can I recover deleted partitions? ...................................................................... 136
10.12. Can I recover data with one hard disk? ............................................................ 136
10.13. Can I recover files deleted from a floppy disk? ............................................... 137
10.14. Can FinalData recover files over a network? ................................................... 137
11. FinalData Error Messages .................................................................................. 138
11.1. Incorrect Registration Number ........................................................................... 138
11.2. Cannot save in current drive............................................................................... 138
11.3. Insufficient Disk Space....................................................................................... 138
11.4. I opened the recovered file and some characters were missing. ......................... 138
11.5. Cannot view the content of a recovered file. ...................................................... 139
11.6. Cannot create socket........................................................................................... 139
11.7. Cannot read ***(Number) sector ....................................................................... 139
11.8. Cannot read sector 0 ........................................................................................... 139
You select a drive other than the hard drive. ........................................................ 139
MBR is damaged .................................................................................................. 139
11.9. File format not supported .................................................................................. 141
11.10. Cannot Run INFDRV.DLL. ............................................................................... 142
11.11. Apply old drive data to new information? ......................................................... 142
11.12. I ran FinalData but nothing is displayed............................................................ 142
12. FAT File System................................................................................................... 143
12.1. FAT Features ...................................................................................................... 143
12.2. FAT Disk Structure............................................................................................. 143
12.3. MBR (Master Boot Record) ............................................................................... 145
12.4. Boot.................................................................................................................... 145
12.5. FSINFO (File System Information) ................................................................... 148
12.6. FAT (File Allocation Table)................................................................................ 149
4
USER MANUAL
C O N T E N T S c o n tinued
12.7. Directory Table.................................................................................................... 149
Root Directory...................................................................................................... 149
Sub-Directory ....................................................................................................... 149
Directory Entry..................................................................................................... 149
13. Glossary................................................................................................................ 151
USER MANUAL
User Manual
Pre f a ce
The FinalData Premium Edition (including program, document file and manual) is protected by copyright laws and
international copyright treaties, as well as other intellectual property laws and treaties. The FinalData Premium
Edition is licensed, not sold. Please read the License Agreement in the box. End-user conditions are set forth in the
License Agreement. You may not disassemble, reverse-engineer, decompile, resell, re-program or document any of
the FinalData Premium Edition.
The source code of the FinalData program is copyrighted by FINAL DATA INC. All the document file of
FinalData Premium Edition are copyrighted by AlphaOmega Soft, Inc. and FINAL DATA INC. All other
trademarks used herein are registered trademarks of their respective companies.
1.
User Registration and Support
1.1.
User Registration
User registration allows you to receive technical support, product updates and other benefits.
The following is a list of services available after registration.
Technical support via email.
Downloadable product updates (http://www.finaldata2.com).
Serial number tracking (we will maintain a record of your registered serial number in the situation
that it has been lost or misplaced).
Special promotional offers via email (opt-in only).
1.2.
How to Register
1.3.
Internet Registration
To register online, visit our website (http://www.finaldata2.com) and follow the registration links to
complete registration. Please fill in all necessary fields including serial number and user information.
Convenient User Information Update.
When you change your address or phone number, please email the updated information to
support@finaldata2.com
Technical Support Options

You can contact FinalData technical support at the following email.
Email Response Support : support@finaldata2.com
USER MANUAL
2.
Introduction to FinalData
2.1.
How FinalData Works
Microsoft Windows provides a Recycle Bin (

) function to protect you from accidental data deletion. When a
file is deleted in Windows, it is first moved to the Recycle Bin and can be restored if needed. If, however, a file is
deleted from the hard disk without being stored in the Recycle Bin ([Shift]-[Delete]), or if the user has emptied the
Recycle Bin, it cannot be restored in Windows.
But when a file is deleted in Windows, only the file directory information is removed, which means the file data still
resides in data sectors on the hard disk drive. So, the file can be technically restored.
FinalData uses these principles to recover data, even after the Recycle Bin has been emptied. FinalData is able to
easily recover deleted files and hard disk information damaged by viruses or by accidental formatting. Even when
the directory structure is partially damaged, FinalData can recover the files as long as the data remains on the hard
disk.
2.2.
FinalData Features
User-Friendly
Its fast and easy! If you know how to use Windows Explorer, youre well on your way to recovering lost data in a
few simple steps.
Data recovery after virus infection
Traditional vaccine and firewall programs often do not provide security against new viruses and hacking schemes.
FinalData will completely restore your lost data caused by viruses or hackers attacking your system directory
structure or file tables.
Fast and easy
FinalDatas Find feature will allow you to search for your needed file from thousands of recoverable files (similar
to the Windows Explorer Search capability). FinalData will restore your valuable data quickly and conveniently.
FinalData is Windows XP compatible
FinalData is compatible with Windows XP, as well as Windows95/98/Me/NT/2000. Complicated DOS commands
are never required. Dont worry if you dont know the meaning of FAT (File Allocation Table), MBR (Master Boot
Record), or BPB (BIOS Parameter Block). With a few clicks of your mouse, FinalData can start recovering your
data.
USER MANUAL
User Manual
FinalData is reliable
FinalData is recognized as world-class and the #1 choice in aspects of simplicity, safety, speed and rate of recovery. It is the specialized recovery program that IT professionals utilize. In the May 2001 issue of CHIP, Singapores leading PC magazine, FinalData was awarded the CHIP Best Performance Prize in a global benchmarking
test of data recovery software products.
Data Recovery after emptying the Recycle Bin
FinalData can recover your files as long as the data has not been overwritten and the information still exists in
your storage device. FinalData has often recovered what data recovery laboratories have given up on. Many of the
worlds largest companies are already using FinalData.
Keeps your information private
If the data is so important that even a data recovery technician must not see it, you can recover the data yourself
and keep your information private.
Data recovery from CD-ROM drives and removable drives
FinalData is capable of recovering data stored on several types of storage devices including CD-ROM,
DVD-ROM, flash memory, memory stick, and MO/ZIP/Jaz drives.
USER MANUAL
3.
Install/Uninstall
3.1.
Before Installing FinalData
1.
FinalData installation requires the original CD and its serial number. Please keep them in a secure location.
2.
If you have an earlier version or a demo version of FinalData installed in your system, uninstall it before
installing FinalData Premium v2.0.
3.
Please keep in mind that when you install FinalData in the drive you wish to recover data from, the
installation process might overwrite your previously deleted data. Therefore, it is recommended that
FinalData be run from the CD-ROM drive. To run from the CD-ROM find the FinalData executable file.
This file is typically located in the following directory: D:\FinalData\FinalData.exe (D: representing your
CD-ROM drive). To launch the program, go to the Start button on the Windows task bar and select Run.
Then click Browse and find the executable file on the FinalData CD-ROM. Likewise, never save files to a
disk having data in need of recovery. After your data has been recovered you can safely install FinalData for
any future instances of data loss.
3.2.
System Environments
Please check the minimum system requirements before using FinalData:
O/S: Windows 95/98/Me/NT4.0 (workstation,SP4.0+)/2000 (Professional)/XP
Minimum 32MB of RAM (64MB or more recommended)
At least 10MB of free disk space (20MB or more recommended)
2x CD-ROM Drive or faster
256-color VGA resolution or higher
USER MANUAL
User Manual
3.3.
FinalData Installation
Installing FinalData
You can install FinalData Premium v2.0 for Windows as follows:
Start Windows.
Insert the FinalData Premium v2.0 CD into the CD-ROM drive. The setup program will launch automatically.
If the setup program does not launch automatically, please take the following steps:
Double-click the [My Computer] icon on the desktop.
Double-click [CD-ROM Drive].
Open the [Setup] folder.
Run Setup.exe.
Note: When Installation starts, a warning stating that you may overwrite recoverable data by software installation will
appear. If you wish not to install FinalData, Click No to install FinalData. You may still run FinalData from the CD-ROM
(Please refer to Chapter 3.1 Before Installing FinalData).
10
USER MANUAL
USER MANUAL
11
User Manual
Click [Yes] after reading the above Software License Agreement.
Please enter your name, your company name, and the product serial number. Click [Next].
12
USER MANUAL
The above dialog box allows you to choose the installation folder for FinalData. The default folder is
Program Files\FinalData\FinalData 2.0 Premium. To install to a different folder, click
[Browse] and select another folder.
Installing FinalData to the same drive where files or folders are in need of recovery may potentially overwrite
those files and folders. Please make sure that the drive where FinalData is to be installed has no data in need of
recovery. Click [Yes] to continue to install.
USER MANUAL
13
User Manual
(Windows NT/2000/XP only)
If you want FinalData to protect against future data loss, click [Yes] to install File Delete Manager.
However, if you are installing FinalData to restore your lost files, you may choose not to install File
Delete Manager at this point. Doing so may overwrite deleted data due to the creation of the File Delete
Manager log file.
When a file is deleted, File Delete Manager stores files up to a set size limit. If the file exceeds this limit,
only the file information (directory structure, FAT) will be stored in order to save time and disk space. The
default file size limit is 10 MB (Please refer to Chapter 5.11 - File Delete Manager).
14
USER MANUAL
A log file will be created to enable File Delete Manager. Depending on the size of the hard disk, this may take a
few minutes to several minutes (Please refer to Chapter 5.11- Log File Management).
USER MANUAL
15
User Manual
Uninstalling FinalData
Click the [Start] button and choose [Programs] - [FinalData] - [Uninstall FinalData 2.0 Premium]. FinalData will
be removed automatically.
If this item is not available, you can remove FinalData as follows:
Start Windows.
Select [Start] - [Settings] - [Control Panel].
Open the [Control Panel] and double-click [Add/Remove Programs].
Select [FinalData 2.0 Premium ] and click the [Add/Remove] button.
FinalData files and folders will be removed.
16
USER MANUAL
4.
General Data Recovery Procedure of

FinalData Premium 2.0
4.1.
Launching FinalData
Click [Start] and choose [Programs] [FinalData] [FinalData 2.0 Premium].
USER MANUAL
17
User Manual
The main screen will be displayed as follows.
4.2.
Open
Choose the drive where the file(s) have been lost. If a logical drive is not recognized because it has been formatted,
or if the partition information has been damaged, you should select the corresponding physical drive.
18
USER MANUAL
To find a drive, select [File] > [Open].
From [Select Drive], choose the drive you wish to recover files from.
USER MANUAL
19
User Manual
Logical Drive Search

From the [Logical Drive] tab, click the drive containing the data you wish to recover. Click [OK].
20
USER MANUAL
Physical Drive Search

If the drive you wish to recover data from is not recognized under the [Logical Drive] tab, select the physical
drive tab and choose the physical drive that contains the desired lost data. Logical drive information can be lost
when a drive is formatted, or its partition information has been damaged.
When selecting the [Physical Drive] tab, you will see a list of physical drives such as Hard Disk1 and Hard Disk2.
From the list, choose the physical disk containing the data you wish to recover. Click [OK].
FinalData will start scanning for lost data on the entire Hard Disk 1 hard drive. FinalData will examine all
directories and clusters to recover deleted files.
If FinalData is unable to automatically detect the file system associated with the lost partition(s), you must use the
[Find Format] button to perform a manual search. From the [Physical Drive] tab, click [Find Format]. FinalData
will then analyze and search the disk in cluster units in order to detect any file systems from lost partitions. If the
detected file system corresponds to the lost partition that contains the data to be recovered, click [Select Format]
and continue to scan the drive. Otherwise, click [Continue] to look for any other file systems that may contain
your lost data.
USER MANUAL
21
User Manual
Note: Concepts of logical and physical drives:
Hard Disk 1
Hard Disk 2
Here, a logical drive refers to C:, D:, E:, F:, and G: (C:~G:), whereas Hard Disk1 and Hard Disk2 refer to physical
drives. A physical drive can be partitioned into several logical drives such as C:, D:, E:, F:, and G:.
Therefore, if one of the logical drives (partitions C:, D:, etc.) is partially damaged and cannot be opened, you must
scan the physical drive that contains the damaged logical drive (and the lost data you wish to recover).
4.3
Directory Scan
When FinalData starts the directory scan on logical and physical drives, it analyzes the FAT/MFT and directory
entries of the corresponding drives (logical or physical).
When a file is deleted, what is actually deleted from the directory entry is the first character of the name of
the particular file or folder. FinalData finds these deleted files and folders by searching the contents of the
sub-directory entries in the root directory and the data area. After the search, FinalData makes a list of the
deleted files and folders.
22
USER MANUAL
File.DOC
( MS-DOS File Name)
Attribute
Date of
Modification
Date of
Modification
Lead
Number
File
Size
Date of
Modification
Lead
Number
File
Size
Delete
E5hile.DOC
( MS-DOS File Name)
Attribute
Date of
Modification
If you know the exact directory where the deleted file or folder exists, click the [Cancel] button after the directory
search, and find the file or folder to recover under the [Root Directory].
In some cases, the first character of the file and folder names are deleted and not shown. This is because the
file/folder name information is stored as the short form of the MS-DOS file name (8-character file names and 3character extensions). In Windows, if the file name has more than eight characters or has lowercase letters, the
long file-name information is stored. However, when the OS deletes a file or folder, only the first character of the
short file name is erased, and not the actual long file name information. Hence the first character of a file or folder
may be displayed as #. Files or folders with their long file name information can be restored to their original
names.
USER MANUAL
23
User Manual
When the directory scan is completed, seven items will be displayed on the left window pane and their directory
and file information on the right window pane as shown below.
Descriptions of the seven items are as follows:

[Root Directory]: Normal root directory.
[Deleted Directory(s)]: Collection of directories deleted from the root directory (available after a root
directory scan).
[Deleted Files]: Collection of Files that are deleted from the root directory (available after a root directory scan).
[Lost Directory(s)]: This is where directories are listed after they have been found during the cluster scan.
The normal root directory scan will not find these directories due to the fact that they have been partially overwritten or damaged. If the root directory is damaged due to formatting or virus attack, FinalData will find and recover
the desired information into the [Lost Directory(s)].
[Lost Files]: Severely damaged files can be recovered from [Lost Files] if their data content is intact. After a
directory scan, FinalData performs a cluster scan to find damaged files and lists them under the Lost Files directory.
24
USER MANUAL
If the directory information is damaged, the recovered file names and size information is not available, so FinalData will create a file name. The file is named with the datas starting cluster number and an extension is provided
corresponding to the data format. Moreover, a file size is assigned according to the default value specified in the
configuration menu. Once the cluster scan is complete, you can change the file name and size by going to File and
then Preferences. This approach is especially useful for restoring files damaged with the I-Explorer Worm Zip
Virus or the Love Virus, since these viruses usually corrupt the directory information, but not the actual data.
[Recently Deleted File(s)]: When FinalData is installed on a system, the File Delete Manager automatically registers deleted files to the [Recently Deleted File(s)] directory. Since FinalData stores these files in a specific hard disk location, most of them can be completely recovered (Windows NT/2000/XP only).
[Searched Files]: Allows you to search for a file according to its name, cluster, and date.
Note: Items in the [Deleted Directory(s)] or [Deleted Files] list can be recovered with a root directory scan, whereas those in [Lost Directory(s)] or
[Lost Files] list require a cluster scan.
4.4.
Cluster Scanning
boot
FAT1
FAT2
C: Partition
ROOT
User Data
boot
FAT1
FAT2
ROOT
User Data
D: Partition
MBR: Master Boot Record

The above figure displays the general structure of a hard disk. The above representative program has been partitioned into C: and D: drives.
If only the boot sector, FAT1, FAT2 and the root directory are damaged (in other words, if there has been no
damage to the data in the User Data area), FinalData can scan the User Data area (where the actual data exists) and
recover the file.
USER MANUAL
25
User Manual
If only FAT1 and FAT2 are damaged, FinalData can recover the deleted data from the [Deleted Directory(s)] or
[Deleted Files] folders by performing a root directory scan (see Section 4.3). However, if the root directory is
also damaged, a cluster scan must be performed, and the corresponding data can be recovered from the [Lost
Directory(s)] or [Lost Files] folders.
The cluster scanning procedure is as follows:
When the directory scan is completed, the following window is displayed. Specify the cluster range and click
[OK]. FinalData will then scan within the cluster range chosen. The default values are set at the partitions first
and last clusters.
FinalData finds the damaged directories and files within the scanned ranged, and lists them in [Lost Directory(s)]
and [Lost Files].
26
USER MANUAL
The directory information usually contains detailed data about file names, directory, date created, and file size.
Therefore, if such information is damaged, that data becomes unavailable. Thus, files found with the cluster scan
are assigned default values. FinalData names the files with the combination of # and the starting file cluster
number. The created date and file size are assigned according to the default preferences (January 1st, 1980 and
1024KB). (You can change the default file size of 1024KB by going to [File] [Preference] [File list] tab
[Default file size].)
For *.doc, and other file formats, FinalData can replace damaged file names with the initial characters in the
files content.
Note: The time required for a cluster scan varies according to system specifications. For an 8GB hard disk, the average cluster scan time is about
60 minutes. FinalDatas task speed is also dependent upon the CPU clock frequency and the amount of RAM.
USER MANUAL
27
User Manual
When the cluster search is complete, data will be registered in the [Lost Directory(s)] and [Lost Files] folders.
File and directory information for these files were not in the root directory, but were found by searching the
actual clusters.
Files in the [Lost Files] list are all named with their starting cluster numbers. Their file size and created date are
1.0MB and January 1st, 1980, respectively. Since the directory information containing the original data is damaged,
files are assigned default values by FinalData.
FinalData detects *.doc, *.xls, *.ppt, *.jpg, and *.bmp files and automatically calculates their size. If the file data is
damaged or fragmented, and the original file size cannot be analyzed, FinalData assigns the default value.
Although *.biff and other files in the [Lost Files] list are assigned the default values, you can restore the file size
information by opening the files in their respective application programs, and re-saving them. This process will
restore the file size information.
Note: *.biff is a file format used by Microsoft Office products.
28
USER MANUAL
4.5.
Searching for Specific Files
When you cannot locate a file after scanning your hard disk you can use the [Find] function. This is often useful
when there are thousands of recoverable files listed and you only need a few of them. Go to [File] > [Find] to
specify your search options.
USER MANUAL
29
User Manual
File Name Search
Select the [File Name] tab and enter the file name you wish to find. FinalData will search the current drive for
existing and deleted files.
You can use wildcard characters (*, ?) for the [File Name] to facilitate your search. (Ex: *.doc, a???.xls,
secret*.ppt)
30
USER MANUAL
Cluster Search
Select the [Cluster] tab and enter the cluster range (starting and ending cluster) you wish to search. FinalData will
search the entered range for existing files as well as deleted ones. (MFT number is used for searching through
an NTFS file system.)
USER MANUAL
31
User Manual
Search by Date
Select the [Date] tab and choose one of the following options from the drop-down menu: [Do not check date],
[Creation date], [Modified date] and [Access date]. Enter the date range you wish to search (start and end dates)
and FinalData will find all the deleted files as well as all existing ones matching the conditions provided.
32
USER MANUAL
The files found will be listed in the [Searched Files] folder in the left window pane.
USER MANUAL
33
User Manual
4.6.
Recovery
Files detected by FinalData are not fully recovered until saved to another drive. From the available lists, you must
select the files and directories you wish to recover. Then by right-clicking and selecting [Recover] you will be
given the option to save. If your mouse settings do not allow you to see right-click menus simply go to [File] >
[Recover] >[Save] and choose a directory where you wish to recover the file(s).
Saving to a Local Drive

From the [Select Folder to save] dialog box, select a drive other than the one just scanned or one that does not
contain files that have yet to be fully recovered. Since the data you have selected is not yet restored, saving the
files in the same drive might overwrite the original data and disable your recovery attempts. Therefore, you must
save files on another partition, hard disk, network drive, a removable drive, CD-R drive, etc.
34
USER MANUAL
The [FAT] setting is dependent upon the file system. FAT16/32 used by Windows 95/98/ME allows you to select
the FAT option. However, if youre using NTFS 4.0/5.0 for Windows NT/2000/XP, no FAT option is available.
You can choose from [No FAT] and [FAT1]. If [FAT1] is damaged, you must recover files using the [No
FAT] option.
USER MANUAL
35
User Manual
When saving files keep in mind that in addition to saving them on a different drive, you should not save them
in the root directory. When important data is accidentally deleted from the root directory, any other data in the
directory substantially decreases the chance of recovery. Data saved in subdirectories are much more likely to
be recovered than those in the root directory. It is recommended that you create a new directory for saving
recovered files.
After saving files, run Windows Explorer and open the file in its corresponding application to verify proper
recovery.
Saving to a Network Drive

If the hard disk you wish to recover only has a single partition and no other storage device is available, you can
save files to a network drive as follows (Please refer to your Windows manual for more information on mapping
network drives or sharing folders over a network.):
1. After right-clicking on the desired file you wish to recover, double-click on [Network].
2. Then select [Microsoft Windows Network].
3. From here you will be able to choose the workgroup and then the individual computer you wish to save files to.
4. Select the shared folder where you wish to recover your file and click [Save].
36
USER MANUAL
Saving to a CD-ROM Drive

If your hard disk has a single partition, but there is a CD-RW installed in your system, you may use a program such
as DirectCD to recognize the CD-RW drive as a local drive and save recoverable files as follows:
1. Install an application program like DirectCD.

2. Insert a blank CD-RW in the CD-RW drive.
3. Right-click on the desired recoverable file.
4. Choose the corresponding drive letter that represents the CD-RW and click [ Recover ].
USER MANUAL
37
User Manual
5.
Other Useful Features
5.1.
Preference Settings
You can change FinalData program settings by selecting [File] [Preference] or clicking the [Preference]
icon. The [Preference] menu consists of [Column] and [File list] tabs.
38
USER MANUAL
Column
The [Column] tab allows you to change the items displayed in columns when detailed view is selected. (To change
the folder view, select [Large Icons], [Small Icons], [List] or [Details] from the View menu or the toolbar.)
USER MANUAL
39
User Manual
File List
The [File list] tab allows you to configure the file display method and file recovery settings.
40
USER MANUAL
Deleted File Name

Designates the way the first character of the deleted short file name is displayed. Automatic applies to both
1 and 2 byte methods.
Default File Size

This sets the default file size for damaged directory entries when file size cannot be determined.
Use System Icons

When this option is selected, files will be displayed using default icons registered in Windows. You can
modify these icons by opening Windows Explorer and going to [Tools] > [Folder Option] > [File Types].
If you choose not to select this option, FinalData will display its own icons. Contiguous files will be marked
with a C. Damaged files will be marked with a D. Fragmented files will be marked with an F. All
other normal files will be represented by the icon with no mark.
Find Name for Damaged Files

When directory information for files registered in the [Lost Files] list is damaged and their names are not
available, FinalData names these files with a # and the files beginning cluster number. (Ex. #222203.txt).
Note: Microsoft Word facilitates to provide names using the first few words of the file data. With this option selected,
FinalData can provide names using the first few words of the file data instead of # and the cluster number.
Find Damaged File at all Clusters

When you select this option, FinalData will search the entire hard disk which includes the boot sector,
FAT, directory entries and the data area. This will enable you to find data from partitions that were
previously deleted. If this is not selected only the data area is searched. However, since activating this
option substantially decreases the search speed, it is better to disable it when recovering files that are simply
deleted.
Ignore BAD Sectors

When FinalData detects a damaged sector on the hard disk during a search, you will be asked whether you
want to ignore the sector. If you check the Ignore BAD Sectors, FinalData automatically bypasses damaged
sectors without prompting you with additional messages.
USER MANUAL
41
User Manual
5.2.
File Preview
File Preview allows you to view the file contents before recovery. This feature is useful for verifying contents
of a file whose name information is damaged, or checking the degree of damage of a file before determining
whether a recovery attempt is worthwhile.
Right-click the file you wish to preview and select [File Preview]. You can also select [Tools] > [File Preview]
or click the Preview icon.
You can preview *.jpg files, *.bmp files, other image files, text files, HTML files and some Office files. (Not
all images of an HTML file will be displayed and some script languages might not function properly since
downloading images and other files from a web page could overwrite the data you wish to recover).
Microsoft Office files can be previewed if their preview function has been configured in advance.
Note: Since FinalData loads files to the system memory for File Preview, nothing is written on your hard disk and there is no danger of
data being overwritten while previewing a recoverable file.
42
USER MANUAL
5.3.
File Viewer
File Viewer displays a file in hexadecimal code. This feature is useful for analyzing a file for its format
information.
Go to [Tools] > [File Viewer] or click the [File Viewer] icon. You can also right-click a file and select [File
Viewer].
File Viewer provides a convenient way to verify whether or not a files header information is damaged. It can also
be used to view portions of damaged document files (.doc, .txt, .rtf) that cannot be opened.
USER MANUAL
43
User Manual
Find Text String from File Viewer
You can search for desired text strings from File Viewer. This feature can be useful in many aspects.
44
Text: Input the text string you wish to search for.

Hex: Displays the hexadecimal values of the text string.
Find Opposite Condition: Finds locations that do not contain the text string provided.
Search at Specified Offset: Tells FinalData to search for the text string within the specified range.
Ignore Case: Select whether or not the upper/lower case should be distinguished.
ASCII Code / UNICODE / Combinational Code: These are various formats of displaying texts.
Add to Find List / Modify Find List / Delete: Adds/Modifies/Deletes conditions to/from the Find List.
USER MANUAL
You can search for a text string as follows:
1)
2)
3)
Input the text string you wish to search for in [Text]. The corresponding hexadecimal values will be displayed
in [Hex]. (Conversely, if you provide hexadecimal values, the corresponding text string will be displayed in
[Text].)
Set various conditions (Find Opposite Condition, Search at Specified Offset, Ignore Case, etc.) and click
[Add to Find List] to register the conditions in the Find List. (You can register multiple conditions and
apply them to a single search.)
Verify that the conditions in the Find List are correct. If not, click [Modify Find List] to make
modifications. Click [Delete] to delete conditions from the list.
USER MANUAL
45
User Manual
4) Select the search direction and click [Find Next]. Once the search commences, the [Find Next] button will
become inactive and the [Pause] button will become active. Click [Pause] to interrupt the search. If you wish to
terminate the search and return to the [File Viewer] window, click [Close].
During a search, the status bar will be displayed and the current search cluster will be indicated.
An interrupted status bar indicates that the text string has been found. The [Find Next] button now becomes active
and the [Pause] button inactive. Go to the [File Viewer] window to view the text string.
If the scan is completed without finding the required text, then the Cannot find text message will appear.
46
USER MANUAL
File Viewer Edit Feature

This feature provides you the ability to edit hexadecimal values in a file prior to recovery. If a portion of a file is
corrupted, the File Viewer Edit Feature can be used to edit the hexadecimal value of a corrupted file in order to
correct the corruption prior to recovery.
USER MANUAL
47
User Manual
After editing the file click the [Save] button to save the corrected file.
48
USER MANUAL
5.4.
Find Starting Cluster of a File
When a file is deleted from Windows 2000/XP, a part of its address is erased (the initial cluster). Therefore, a file
recovered with FinalData might not open properly. If you are using Windows 2000/XP and the drive from which
the file was deleted uses FAT32, you can find the erased initial cluster with FinalData.
This information is generally displayed with 4-byte location data. When the file is deleted from Windows NT, the
first two of the four bytes are initialized. The following figure displays how the information for the starting cluster
of a file is changed from E1 13 to 00 13 after deletion.
Since FinalData searches for the deleted file based on the modified information (00 13), the incorrect start location
prevents the file from properly opening after recovery. In order to restore its initial cluster, the original data (E1
13) must be found for full recovery. [Find Start Cluster of a File] restores the modified two bytes of the starting
cluster to its original value.
USER MANUAL
49
User Manual
You can restore the original starting cluster of a file as follows:
1. Select a file with incorrect start cluster data.
50
USER MANUAL
2. Selecting [Tools] > [Find Start Cluster of a file]. This will restore the proper start cluster data.
USER MANUAL
51
User Manual
3. Go to [Tools] > [File Preview] to verify that the start cluster is properly restored and follow the general
recovery procedure of saving the file to a different drive (Please refer to Chapter 4.6 - Recovery).
** This feature applies only to files deleted from drives using FAT32 file system under Windows 2000/XP.
52
USER MANUAL
5.5.
MPEG File Recovery
MPEG files are multimedia files, if the file is partly damaged, replay may not be possible even after recovery.
When you use the [Recover MPEG1/MPEG2 File] option, an analysis of the MPEG file will be performed in order
to compile segmented portions of the file needed to make the file re-playable. It will extract the undamaged parts
of the file to formulate a new MPEG file.
Select the MPEG1/MPEG2 file to be recovered. Choose [Tools] > [Recover a File Partially Damaged] > [Recover
MPEG1/MPEG2 File]. You will then be prompted for the location to save the recovered file.
USER MANUAL
53
User Manual
After selecting the folder where the recovered file will be saved, Click the [Save] button and the file recovery will
begin.
54
USER MANUAL
5.6.
Oracle Export File Recovery
Oracle databases can be backed up utilizing Export/Import and image backup methods. The first method, Export/
Import, creates Oracle Binary type files from data in the Oracle databases and uses import Append to Databases or
Make New Ones.
However, these exported files can not be imported if they are partially damaged. By using [Tools] > [Recover a
File Partially Damaged] > [Recover Oracle Export File], normal tables can be recovered.
USER MANUAL
55
User Manual
5.7.
Save File System Informat ion
This option provides a backup file (.bup) for partition information, boot sector information, FAT, MFT, etc. Once
the file system information is saved it can be used later for recovery purposes. For example, if a backup file for a
selected [Logical Drive] was created, you will be able to recover data even when the drive is not recognized by
the operating system, due to damage to the partition information. If the logical drive consists of multiple physical
disks, you will not be able to use the [Save File System Information] option.
Note:
The [Save File System Information] option does not support NTFS compressed or encrypted files.
How to save File System Information

Click [File] > [Open]
56
USER MANUAL
Select a drive.
After selecting a drive and clicking [OK] a [Directory Scan] will begin. You must allow the Directory Scan to
finish in order to save File System information.
USER MANUAL
57
User Manual
After the [Directory Scan] has completed you will be prompted to perform a Cluster Scan. This is not required for
the [Save File System Information] option. This process can be cancelled.
From the menu select [Tools] > [Save Files System Information].
58
USER MANUAL
You will be prompted for a name and location where to save the file System information. Then click the [Save]
button.
USER MANUAL
59
User Manual
How to use the Saved File System Information
When MBR or partition information [File System Information] is damaged or deleted, You will be able to recover
data by using the saved File System Information.
Select [File] > [Open] from the menu
60
USER MANUAL
Once you select [File] > [Open] you will be prompted to select a drive. Instead of selecting a drive, click the [Open]
File System Information icon at the bottom of the Select Drive dialog box.
USER MANUAL
61
User Manual
Locate and select the saved File System Information file, it will display some of the File System Information that
was saved at the bottom of the [Open] dialog box. If this information is correct click [Open] and FinalData will
begin scanning the corresponding drive using this information.
62
USER MANUAL
5.8.
Save Sectors
This function saves your stored data sector by sector per logical drive. The entire logical drive including the
Partition Boot Record can be saved as a compressed file. Once the sectors have been saved you can open it later
even if the original disk becomes unavailable.
USER MANUAL
63
User Manual
File Name: Choose a name for the file that will contain the saved sectors.
Format: Binary will save the sectors in raw mode, ASCII will save the sectors as an ASCII text file.
Sector Range: The range of sectors you would like to save.
Insert position in sector list: Before cursor, After Cursor, Append to end.
64
USER MANUAL
5.9.
Read Saved Sectors File
This opens the file that was created using the [Save Sectors] option. Select the saved sectors file and click [Open]
to read the file.
USER MANUAL
65
User Manual
5.10.
Disk Viewer
This option views the entire physical drive by all of its sectors. This viewer can view the drive even if the drive is
not formatted.
66
USER MANUAL
USER MANUAL
67
User Manual
Find Text String from Disk Viewer
You can search for desired text strings from Disk Viewer using the find feature.
68
USER MANUAL
Text: Input the text string you wish to search for.

Hex: Displays the hexadecimal values of the text string.
Find Opposite Condition: Finds locations that do not contain the text string provided.
Search at Specified Offset: Tells FinalData to search for the text string within the specified range.
Ignore Case: Select whether or not the upper/lower case should be distinguished.
ASCII Code / UNICODE / Combinational Code: These are various formats of displaying texts.
Add to Find List / Modify Find List / Delete: Adds/Modifies/Deletes conditions to/from the Find List.
USER MANUAL
69
User Manual
You can search for a text string as follows:
1)
2)
3)
70
Input the text string you wish to search for in [Text]. The corresponding hexadecimal values will be displayed
in [Hex]. (Conversely, if you provide hexadecimal values, the corresponding text string will be displayed in
[Text].)
Set various conditions (Find Opposite Condition, Search at Specified Offset, Ignore Case, etc.) and click
[Add to Find List] to register the conditions in the Find List. (You can register multiple conditions and
apply them to a single search.)
Verify that the conditions in the Find List are correct. If not, click [Modify Find List] to make
modifications. Click [Delete] to delete conditions from the list.
USER MANUAL
4) Select the search direction and click [Find Next]. Once the search commences, the [Find Next] button will
become inactive and the [Pause] button will become active. Click [Pause] to interrupt the search. If you wish to
terminate the search and return to the [File Viewer] window, click [Close].
During a search, the status bar will be displayed and the current search cluster will be indicated.
An interrupted status bar indicates that the text string has been found. The [Find Next] button now becomes active
and the [Pause] button inactive. Go to the [File Viewer] window to view the text string.
USER MANUAL
71
User Manual
If the scan is completed without finding the required text, then the message Cannot find text will appear such as
below:
5.11.
Drive Management (Windows NT/2000/XP only)
FinalData is capable of recovering deleted files. If the files were deleted, overwritten or fragmented before
FinalData was installed, recovery may take a long time or might not even be possible. However, if FinalData is
installed in your system beforehand, you can recover files quickly and efficiently. You can also prevent important
files from being deleted altogether.
File Delete Manager

FinalDatas File Delete Manager allocates a part of the hard disk as a Log File for storing information about
files that have been deleted. This Log File keeps track of all the file system and directory information that is
modified when a file is deleted File Delete Manager enables you to control the Log File settings that manage
deleted file information.
72
USER MANUAL
Select [Drive Management] > [File Delete Manager] to open the File Delete Manager dialog box.
The default setting applies File Delete Manager to all folders ([Apply to All Folders]), which tells FinalData
to store information for every file deleted from every folder on your system. Since the size of the Log File
is limited, you can designate specific folders to utilize the Log File more efficiently. Since the Log File is
designed to contain the most essential information it does not require a large amount of disk space.
USER MANUAL
73
User Manual
By selecting [Apply to the Following Folders], File Delete Manager will store deleted information (in its Log
File) for the directories listed in the above window only. In the example shown above, information about files
deleted from, C:\Documents and Settings\Administrator\My Documents & C:\Documents
and Settings\Default User\My Documents will be stored in the Log File.
You can add and remove folders from the list by clicking [Add] and [Delete].
The File Delete Manager utility gives the advantage of a more accurate and faster recovery process should it be
needed. However, a slight slow down in system performance may occur as a result, since the Log file is being
accessed each time a file is deleted. To reduce this activity, FinalData will only record file information (name, size,
location, etc.) rather than the entire file data, when files above a certain size are deleted.
74
USER MANUAL
Click the [Advanced] button on the File Delete Manager dialog box to alter the file size limit settings. If a file is
smaller than the file size setting, the whole file will be stored. If the file size is larger, only the file information and
its directory information will be stored.
You may set the maximum file size limit by clicking [Advanced] on the File Delete Manager window. The
default maximum file size limit is 10MB. When a file bigger than 10MB is deleted, only file information will be
stored in the Log File instead of the whole file.
USER MANUAL
75
User Manual
When you check the Manage deleted file without considering file size option, the complete file will be stored
in the Log File when a file is deleted, regardless of the file size. Managing deleted files larger than 100MB, will
slow down the system; thus use this option only when necessary.
If available disk space is a concern, check the Save File Information Only box and this will save the file
information instead of the entire file in the Log File.
76
USER MANUAL
Folder Protection
Folder Protection protects files and folders from being deleted. Folders registered with Folder Protection will
be protected from the future deletions of files or subfolders within that folder.
To enable Folder Protection go to [Drive Management] on the menu bar and select [Folder Protection].
To use Folder Protection, a password should be assigned. When you first choose [Folder Protection], a window
will prompt you to enter a password.
USER MANUAL
77
User Manual
If a password has already been assigned for Folder Protection, you will be asked to enter the previously assigned
password.
If you choose to change the current password, click [Change Password]. A window to set a new password will
appear as shown below.
The Folder Protection dialog box appears after the new password has been accepted. A password will not be
accepted if the previous password is incorrect of if the new password was not typed identically in the New
Password and the Confirm new password fields.
78
USER MANUAL
Click Add from the [Folder Protection] dialog box.
USER MANUAL
79
User Manual
Select the folder(s) you wish to protect from the [Browse for Folder] dialog box and click [OK].
80
USER MANUAL
The folder will be added to the list of folders protected by Folder Protection.
Click [OK] to apply the new settings.
USER MANUAL
81
User Manual
When you attempt to delete files or subfolders from folders registered in Folder Protection, a message will be
displayed indicating that the file cannot be deleted.
82
USER MANUAL
You can exclude a folder from Folder Protection as follows:

Select the folder you wish to delete from the Folder Protection list (C:\Documents and Settings\All Users\
Desktop in the example below). Click Delete to remove the folder from the list.
USER MANUAL
83
User Manual
Storage Exceptions
You can prevent File Delete Manager from storing temporary (.tmp) and other unnecessary files in the Log File
by designating them as Exceptions. Exceptions consists of [Directory Exception] and [Extension Exception].
Directory Exception
Files deleted from folders and subfolders specified here are not stored in the Log File (see File Delete Manager
above). You can reduce the use of the allocated Log File space (the amount of disk space dedicated to storing
information for deleted files) by registering Windows temp folders, Internet cache and history files, and less
important directories here.
84
USER MANUAL
You can add/delete folders using the [Directory Exception] dialog box.
USER MANUAL
85
User Manual
Extension Exception
This will prevent specified files with certain extensions from being stored in the Log File.
You can add/delete extensions from the [Extension Exception] menu.

When [Ignore if file has no file extension] is selected, files with no extension will not be stored in the Log
File when deleted.
86
USER MANUAL
The [Extension Exception] dialog box contains [File] and [Ignore] columns. Files with extensions in the [Ignore]
column will not be stored in the Log File after deletion.
If you wish to add an extension to the [Ignore] column, click [Add New Extension] and provide the new extension.
You must type in *. followed by the extension. For example, if you wish to add the lnk extension, you should
type in *.lnk.
USER MANUAL
87
User Manual
When you wish to remove an extension from the [Ignore] column select the extension and click [Delete]. The
deleted extension will be moved to the File column.
88
USER MANUAL
An extension in the [File] column can be moved back to the [Ignore] column by selecting the file extension
and clicking [Add].
USER MANUAL
89
User Manual
Log File Management
After installation, FinalData analyzes your hard disk and allocates the Log File area for each drive. The default
size of the Log File is 10% of the drives free space. For example, if a drive has a total capacity of 10GB with 6GB
of free space, the Log File size is configured at 10% of 6GB, or 600MB.
You can reconfigure the Log File size according to your system environment. Enlarging the Log File size will
not delete the contents of the Log File. However, keep in mind that reducing the file size may result in data
loss according to the size differential.
Select [Drive Management] > [Disk Log Manager] to open the drive selection window as shown below. Select the
drive containing the Log File you wish to reconfigure.
90
USER MANUAL
The [Select Drive Information Size] window will appear upon clicking [OK]. FinalData will assign a single Log
File to the specified disk area. The default Log File size is 10% of the drives free space. You may adjust the
Log File size according to your preference.
Click [OK] to reconfigure the Log File size.
Note: The Log File is located in the System Volume Information folder under the root directory. Access to this folder is not permitted. This is to
prevent files in this directory from accidentally being deleted.
USER MANUAL
91
User Manual
Start/Stop Drive Manager
You can choose to start or stop the Drive Manager if desired. If Drive Manager is stopped, the File Delete
Manager service will be disabled. Files deleted after the File Delete Manager has been disabled will not be
stored in the Log File.
Start Drive Manager ([Drive Management] > [Start Drive Manager])
Stop Drive Manager ([Drive Management] > [Stop Drive Manager])
92
USER MANUAL
File Delete Manager Note:

1. How to check the status of File Delete Manager.
You can verify that File Delete Manager is running by going to your desktop and clicking [Start] > [Settings] >
[Control Panel] > [Maintenance Tools] > [Services]. The [Started] status indicates that File Delete Manager is
running.
2. How to completely remove File Delete Manager from your system.
Select Stop Drive Manager from FinalData and go to [Start] > [Settings] > [Control Panel] > [Maintenance
Tools] > [Services]. Right-click WDelMgr20 and select [Stop]. Then go to [Start] > [Run] and input
Ntfsldf20.exe u, and click [OK].
3. How to reinstall File Delete Manager.
Run WdelMgr20.exe from your FinalData setup disk.
6.
H o w t o R e c o v e r D a t a i n Va r i o u s C a s e s
6.1.
Emptied Recycle Bin (Windows 95/98/ME)
If you have emptied the Recycle Bin or deleted files by using [Shift] [Delete], the corresponding files will not
show in the Recycle Bin. Files deleted by a user accessing your system through a network will also not be stored
in the Recycle Bin. Windows does not have the capability of recovering these files.
If you have simply emptied the Recycle Bin, there is a great possibility that you will be able to recover your files.
If you are using Windows 95/98/ME, you can recover lost files with FinalDatas root directory scan. If you have
emptied the Recycle Bin from Windows NT/2000/XP, refer to the procedure explained in the Formatted Hard
Disk section below.
If you have simply emptied the Recycle Bin from Windows 95/98/ME, you can recover your files as follows :
Select [File] > [Open] and select the drive containing the lost files from the [Logical Drive] tab.
After the directory search, finish the search procedure without performing a cluster search. (Click [Cancel]
when prompted to specify the cluster search range.)
If File Delete Manager is installed, go to [Recently Deleted File(s)] where the deleted files are listed by date,
to find the lost file. If the file is not found there, look for it in [Deleted Directory(s)] or [Deleted Files].
Select the files you wish to recover and go to [File] > [Recover] to save them to another drive, or right-click
on the selected file(s) and choose [Recover].
USER MANUAL
93
User Manual
6.2.
Formatted Hard Disk (or Emptied Recycle Bin in Windows NT/2000/XP)
If you have emptied the Recycle Bin from Windows NT/2000/XP or formatted your hard disk with a quick or
standard format, you will not be able to find your files with a root directory scan alone. You must also perform a
cluster scan to recover these files (see Section 4.4).
Go to [File] > [Open] and select the logical drive you have formatted.
After directory and cluster searches are complete, find the folders and files you wish to recover in [Lost
Directory(s)] and [Lost Files] on the left window pane.
Select the desired file(s) from [Lost Directory(s)] and [Lost Files] and save them to a different drive.
In Windows NT/2000/XP, if File Delete Manager is enabled, go to [Recently Deleted File(s)]. Files here are
listed by date. If not found under [Recently Deleted File(s)] go to [Deleted Directory(s)] or [Deleted Files] to
find the file (This procedure does not apply to Windows 95/98/ME).
Note: FinalData can recover hard disks formatted with standard or quick formats. However, if a standard format is conducted on a floppy disk, the
entire data area is initialized, thus making it impossible to recover.
94
USER MANUAL
6.3.
Altered File Size due to Virus
Files contaminated with viruses such as WormExploreZIP are displayed in Windows Explorer, but their file sizes
have been altered to 0. Since the system cannot secure sufficient memory, these files cannot be opened. You can
recover these files using the following procedure:
Go to [File] > [Open] and select the drive.
After the directory search is complete, the cluster search will find damaged directories and files.
Select the file you wish to recover and select [Information Alt+F2] from the [File] menu.
Change the file size by inputting a number larger than the original file size in [Size].
Select a directory for saving the recovered file.

The initial size of the recovered file will be the random number you have provided. However, if you open the file
with the corresponding application program and re-save it, the original size will be restored.
FinalData analyzes *.doc, *.xls, *.ppt, *.jpg, and *.bmp files and calculates their sizes. But if the original file size
cannot be calculated because the data is damaged or fragmented, FinalData will assign the default file size.
6.4.
Hard Disk Formatted with Another File System
After a hard disk is formatted with a different file system or a partition is deleted and Run WdelMgr20.exe from
your FinalData setup disk.
Run WdelMgr20.exe from your FinalData setup disk.
Go to [File] > [Open] and select the desired hard disk from the [Physical Drive] tab.
Select [Find Format] and input the sector range.
USER MANUAL
95
User Manual
Specify the sector range to be searched and click [OK].
If a boot sector is found, the [Found a Boot Sector] screen will be displayed.
Click [Select Format] to go to the cluster search or [Continue] to continue the format search.
96
Even when the boot sector information is not found, FinalData analyzes the data and displays the file system
as FAT16 or FAT32.
USER MANUAL
If you are certain that the analysis result is incorrect, you can change the file system type manually.
If the format found is correct, confirm by choosing [Select Format]; the file(s) found will be listed under
[Lost Directory(s)] and [Lost Files].
USER MANUAL
97
User Manual
6.5.
After scanning is complete, find the files you wish to recover and save them to a different drive.
Unrecognized Drive
If a drive is not recognized because it has been contaminated with a virus or its partition information has been
deleted with FDISK, use the following procedure to recover the data:
Go to [File] > [Open].

Select the [Physical Drive] tab and choose the unrecognized drive. The [Logical Drive] tab will not display the
drive to be recovered.
98
USER MANUAL
Upon clicking [OK], FinalData will begin to search for the partition.
USER MANUAL
99
User Manual
Partition Found
After partitions are deleted with FDISK, and before new one(s) are created, data can be recovered from the
original partition(s) by using [Find Format]. Furthermore, if the disk has multiple partitions and the MBR
(Master Boot Record) has been damaged, data can be recovered provided that the partition information has not
been damaged.
Select the partition you wish to recover among the partitions found. It will be recognized as a normal drive.
Note: During the Find Partition process, a partition is not restored, but merely detected. FinalData is then able to start the recovery
of data on that partition.
Partition not found
Select the drive and click [Find Format].
Specify the sector range to be searched and click [OK].
100
USER MANUAL
If a boot sector is found, the [Found a Boot Sector] screen will be displayed.
Click [Select Format] to go to the cluster scan or [Continue] to continue the format search.
Even if the boot sector information is not found, FinalData can analyze the partition(s) and then display the
file system(s) as either FAT16 or FAT32.
If you are certain that the analysis result is incorrect, you can change the file system type.
USER MANUAL
101
User Manual
If the format found is correct, select the format, and the data stored in that file system format will be
registered in [Lost Directory(s)] and [Lost Files].
After the disk search is complete, find the files you wish to recover and save them to a different drive.
6.6.
System Not Bootable
If your computer has only one hard disk and cannot start Windows, data can be recovered by attaching that disk
as a slave to a separate system (master) with FinalData pre-installed. FinalData can only be run in a working
operating system.
If the hard disk is not recognized by the system BIOS the hard disk may have physical damage. Recovering data
from a physically damaged drive is beyond the capabilities of data recovery software.
102
USER MANUAL
7.
Professional Data Recovery Procedures
7.1.
Damaged Office File Repair
If an Office file is partially damaged, the file will not open, will not open properly, or the file content may be
unreadable. The [Office File Recovery] function will repair the damaged portions of the Office file, or extracts
undamaged portions from the file making it readable. The [Office File Recovery] function will work with Microsoft Word, Microsoft Excel, and Microsoft PowerPoint.
To repair a Office file, select the damaged file, choose the [Office File Recovery] option on the menu, then choose
the recovery option for that file.
USER MANUAL
103
User Manual
Once the selected repair option has been chosen the [Office File Repair] wizard begins.
The file information is only available if the information block of the file is not damaged. After confirming the file
to repair click the [Next] button.
104
USER MANUAL
This screen allows you to check the level of damage of the file to be repaired. Click the [Check Rate] option to
view the level of file damage.
USER MANUAL
105
User Manual
L0: The files contains no damage. An undamaged file should be recovered through the normal data recovery
methods of FinalData.
L1: Low damage rate. The file can be repaired in its current condition. (The contents of the file may contain some
damage)
L2: The file is less than 50% damage. The file can be repaired in its current condition. (The contents of the file
may contain significant damage)
L3: The file is greater than 50% damaged. Only the text is recoverable, all file formatting will be lost.
L4: The file is completely damaged. The file is not recoverable.
If you choose to continue with the file recovery process, choose [Next].
106
USER MANUAL
Select the location to recover the repaired Office file. Select [Start Recovery]
USER MANUAL
107
User Manual
Files that have been recovered using the [Office File Repair] option will create various folders and files in the
location chosen for the file recovery.
The Image folder contains the images that were part of the file recovered. The Object folder contains the objects
that were part of the file recovered.
108
USER MANUAL
8.
Email Recovery
8.1.
Recover Deleted Email
Most Email programs have a Deleted Items folder as a last chance recovery of deleted messages. When messages
are deleted they are moved to the [Deleted Items] folder where it can be restored if needed. However, this
folder can be emptied in several ways, upon exit of the program, as the folder reaches a size threshold where it
automatically empties the folder.
When messages are removed from the [Deleted Items] folder the are no longer retrievable by the email program.
However, the original file information still remains on the hard drive. FinalData Premium can detect and recover
deleted email messages . As long as the data still remains on the hard drive, FinalData can recover lost email
messages regardless of how they were lost.
How to Recover Email

Select [Email Recovery] > [Start Email Recovery]
USER MANUAL
109
User Manual
Select the drive where the Email files are located, or click the icon under the [Folder Name] section to search for
the Email files, or if you know the path you can type it in the Folder Name field.
110
USER MANUAL
Click [OK] after selecting a folder to be scanned.
USER MANUAL
111
User Manual
Note that the path to the selected folder will appear in the Folder Name field. If you are not sure where the Email
files are located, just select the drive and click [OK] to begin a full drive scan.
112
USER MANUAL
A [Root Directory] scan begins to locate all of the mailboxes on the selected drive.
After the mailbox scan has completed the [Find deleted email box] process will start on computers running Windows NT/2000/XP. On computers running Windows 95/98/ME a [Cluster Scan] will be started.
USER MANUAL
113
User Manual
114
USER MANUAL
If you are recovering deleted message files only, a Cluster Scan is not required and can be canceled. If the entire
mailbox has been deleted and is not located in a [Root Directory Scan] than a Cluster Scan is required.
USER MANUAL
115
User Manual
Upon completion of the Cluster Scan, the mailbox files are classified into folders according to the Email application.
The results will be displayed on the left window pane of FinalData. These folders are namely Outlook Express,
Outlook Express 4.x, "Netscape Mail" and "Eudora Mail". Mailbox files found for Outlook Express 5.0 and 6.0
will be listed under the Outlook Express folder. Mailbox files found for Outlook Express 4.0 or earlier versions
will be listed under the "Outlook Express 4.x" folder since the latter uses the .mbx file extension rather than the
.dbx used by Outlook Express 5.0 and later.
Outlook Express lets the user save individual email message as a separate file instead of requiring it to be saved
within a mailbox file. If saved separately these message files are saved with a .eml" file extension. These types
116
USER MANUAL
After the mailbox files are completely scanned, the mailbox file(s) can be saved by right clicking on the file(s) and
choosing [Recover Message(s)]. (You can also go to [Email Recovery] > [Recover Email] on the menu).
USER MANUAL
117
User Manual
1. Select Message: Choose which type of messages to display. If the [Normal Message] type is selected, only
undeleted messages will be displayed. If the [Deleted Message] type is selected, only the deleted messages will be
displayed. If the [All Messages] type is selected, all messages will be displayed.
2. Found Message List: All the messages in the [Mailbox File] are displayed.
3. Mailbox Name: Indicates the [Mailbox File] name that was scanned.
4. View Message: When clicked [View Message] displays the contents of the selected message.
5. Recovery: When the [Recover] button is clicked, the selected message will be recovered and saved. Several
messages can be recovered at the same time.
118
USER MANUAL
You can view the contents of a message with [View Message] option. When a message contains an attachment,
you are able to save the attached file separately. If you click [Attach File Save] in the [View Message] window,
only the file attachment will be saved, and not the message. Choosing [Recover] will save both the message and
the attachment in [Email Recovery]).
USER MANUAL
119
User Manual
To save an attachment separately, select a folder and click [Save]. Only the attachment will be saved.
Eudora Mail embeds the location of the attachments inside the message, rather than the entire file. Therefore
emails with attachments created in Eudora are not recoverable to its original state if the attached file is deleted
from the Eudora attachments folder.
120
USER MANUAL
Since attachments are usually contained within the email message, both the message and its attachment will be
recovered.
After selecting message(s) to be recovered, click [Recover]. Select the folder where the messages should be
recovered. Message(s) will be recovered to this folder.
USER MANUAL
121
User Manual
9.
Te r m i n a t e D a t a
9.1.
How Terminate works
The Terminate feature permanently deletes data. Terminate is designed to permanently prevent the recovery of
data you choose to eliminate. This process is achieved by completely initializing the data sector where the data
resides making the data unrecoverable. When deleting files in Windows 95/98/ME/NT/2000/XP, only the file
directory information (FAT, MFT, Filename and Size) are deleted, the actual file data and its contents remain in
the data sector. If the data sector is not overwritten with new data, the deleted files will remain on the hard drive.
Terminate will completely delete all software traces of a file.
Terminate functionality can be classified into three categories:
1. Terminate can initialize an entire hard drive. This function initializes a hard drive similar to a Low Level
Format. The data that existed prior to the termination will be completely unrecoverable.
2. Terminate also has the ability to permanently delete existing files and directories. When using terminate file
names, directory information, and the actual data will be permanently deleted. Terminate will wipe clean the
sectors where the data was stored.
3. Terminate deletes all traces of data. With normal deletion the filename or the contents can remain on the
hard drive (even after files have been emptied from the Recycle Bin). Terminate will empty and wipe clean the
unnecessary sectors as well as all of the traces of the files left on the hard drive.
122
USER MANUAL
9.2.
Wipe History
The Wipe History option permanently deletes Internet history, Internet Cache, Internet Cookies, list of recently
used files and list of recently opened files.
USER MANUAL
123
User Manual
Internet history:
Permanently deletes the Internet browsed history for Internet Explorer and Netscape Navigator.
Internet Cache:
Permanently deletes the Internet cache saved while browsing.
Internet Cookies:
Permanently deletes the Internet cookies saved. The cookie may contain such items as your name, address,
username, password, and email address.
124
USER MANUAL
AutoComplete form and passwords:

Permanently deletes the file which contains the Auto Complete form user ID and passwords.
Most recently used file list:
Permanently deletes the most recently used file list.
Note: The Wipe History function can not erase data that has been already deleted. The Wipe Free Clusters function
should be used for that task.
Using the History Clean option that is part of Internet Explorer deletes a recoverable history file.
Erasing Cookies may result in the loss of preferences or indentification information kept for certain web sites.
USER MANUAL
125
User Manual
9.3.
Wipe File(s)
This option permanently deletes the selected file(s) or folder(s). Select a normal file(s)/folder(s) and click Wipe
File(s), and the contents of the file(s)/folder(s) as well as the file/folder information will be permanently deleted.
If you select a deleted file(s)/folder(s) and click Wipe File(s), only the file(s)/folder(s) information will be
permanently deleted. To delete the contents and all traces of already deleted file(s)/folder(s), you must use the
Wipe Free Clusters option. This option will wipe clean the sectors not in use on the selected drive.
Caution
When you delete file(s)/folder(s) permanently using the Wipe File(s) option, the deleted file(s)/folder(s) can
never be recovered even using data recovery software such as FinalData Premium.
126
USER MANUAL
9.4.
Wipe Free Clusters
This option permanently deletes all traces of already deleted file(s)/folder(s). When you delete a file/folder
in Windows Explorer or at a DOS prompt, the data of the file/folder still remains in the data sector portion of
the hard disk, where it can be recovered at any time using data recovery software such as FinalData Premium.
Therefore, to permanently remove all traces of files/folders that have been deleted using Windows Explorer or
through the DOS prompt, you must use the [Wipe Free Clusters] option.
The [Wipe Free Clusters] option permanently deletes the contents of file(s)/folder(s) that were previously deleted
from a drive.
USER MANUAL
127
User Manual
9.5.
Wipe Options
The [Wipe Options] is classified into 6 different levels.
Level 1
128
USER MANUAL
Level 2
Level 3
USER MANUAL
129
User Manual
Level 4
Level 5
130
USER MANUAL
Level 6
9.6.
Terminate Cautions
If there is physical damage to the drive (e.g. bad sectors), data in those sectors can not be deleted. Data on a drive
that is not accessible will not be deleted. An example of this latter case would be a situation where the drive itself
is not recognized by the BIOS.
When using the [Wipe File(s)] option, if you select a normal file/folder both the filename and data are deleted. If
you select a deleted file, which is not recognized by Windows, only the filename is deleted. To delete the data of
deleted files you must use the [Wipe Free Clusters] option. If the file system is NTFS (Windows NT/2000/XP)
and the file is small enough to be included in the MFT both the filename and data will be deleted.
When using the [Wipe Free Clusters] option, it is possible for the names of the files not recognized by Windows to
be left behind. This is due to the fact that the filenames are saved in the directory entry which is not deleted even
if you delete the data sectors. To delete these filenames you must you the [Wipe File(s)] option.
When using the [Wipe Options] with low-level security, the machine that reads residual magnetism very precisely
can recover deleted data.
USER MANUAL
131
User Manual
10.
10.1.
FAQ
Can I recover data from a formatted disk?
A disk can be formatted in three different ways: Quick, Standard and Low-Level (physical) format.
Quick Format enables you to quickly format a disk, by simply initializing the directory entry information in the
root directory area and the FAT information. The data area during this type of formatting will remain intact and
can be recovered.
On the other hand, Standard Format examines the data area, and maps the bad sectors. Since each sector head
must be read to determine whether it is bad, the process takes a substantial amount of time. If a bad sector is
detected, clusters in that sector are marked in the FAT to prevent them from future usage. However, like quick
format, a Standard Format does not overwrite the data area, and the data content is preserved.
Finally, a Low-Level Format modifies the surface molecule arrangement, initializes the entire disk, and records
sector identifiers to each track (creating addresses to identify sectors within each track). All of the data contained
in the disk is initialized, preventing any future recovery attempts.
If file system information such as directory entries or FAT is lost, the file cannot be opened by the Windows
operating system. However, FinalData is capable of directly reading data from the data area to recover files after a
quick or standard format.
For hard disks, a quick or standard format is generally carried out as a high-level format, where data areas are not
overwritten. Therefore, even though the FAT or the root directory is initialized, FinalData can still recover the data
remaining in the data area.
On the other hand, for disk media that cannot be partitioned with FDISK, such as a floppy disk, a standard
format is comparable to a low-level (physical) format process, thus rendering the original data on the floppy
unrecoverable.
132
USER MANUAL
10.2.
Can I recover a hard disk that is not recognized?
You must first check whether the hard disk is physically damaged. If the disk is not recognized by the CMOS Setup
program or FDISK, there is a high possibility of physical damage. FinalData cannot recover a physically damaged
disk, and you should have it serviced by the disk manufacturer.
If a disk is not bootable, but not physically damaged, FinalData can recover its data. Please refer to the
Unrecognized Drive section in How to Recover Data in Various Cases.
10.3.
Can I recover my data after performing FDISK?
Even if your partitions have been deleted with FDISK, you can select a physical drive scan from FinalData and
recover the data from the lost partition. Furthermore, even if you have created new partitions after removing old
ones, you can still recover your data using the FinalData. Please refer to the Hard Disk Formatted with Another
File System section in How to Recover Data in Various Cases.
10.4.
Is FinalData compatible with Windows XP?
FinalData Premium is compatible with Windows 95/98/ME, Windows NT Workstation, Windows 2000
Professional, and Windows XP.
However, please note that FinalData Premium does not run on Windows server products (Windows NT Server,
Window 2000 Server or higher).
10.5.
How long will it take to recover data?
Although the exact recovery speed depends on the capacity of the disk to be recovered and the computer
specifications, the average time required for each task is as follows:
Data recovery from an emptied Recycle Bin: A few seconds (If you remember the location of the file, you can
recover the data instantly.)
Data recovery after FAT has been initialized with a quick format.
(For AMD-K6-2 300MHz CPU)

Floppy Disk (1.44MB): About one minute
Hard Disk (1GB / 10% of free space): About five minutes
USER MANUAL
133
User Manual
10.6.
Can I recover data on CD-ROM, DVD-ROM, MO, etc.?
FinalData can recover data from CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-R, MO Drive, Zip Drive, Jaz
Drive, Memory Stick, Flash Memory, and Smart Media.
If you cannot read data from your CD-ROM drive or incur other CD-ROM problems, then FinalData can assist
you in recovering the data. However, FinalData cannot recover data from a scratched CD-ROM (physical damage)
that is not recognized by the computer.
10.7.
What are damaged files, fragmented files and continuous files
Damaged File
If parts of the file you wish to recover are overwritten or severely fragmented, it is not likely that you will be
able to fully restore the file. Overwritten files and root directory files that have been damaged are indicated with a
D for Damaged File. Most of these damaged files cannot be fully recovered. FinalData can recover intact data
when only the root directory has been damaged.
Fragmented File
Fragmented files are indicated with an F for Fragmented File. Most of these files are damaged, and even if they
are recovered, they will not function properly or you will not be able to read them.
Contiguous Files
Files labeled as Continuous File are indicated with a C. This indicates that the data exists on the hard disk in a
sequential fashion in one general area. Most of these files can be recovered to their original status.
134
USER MANUAL
10.8.
What kinds of viruses are protected against the FinalData counter measures?
FinalData is effective against viruses such as CIH, which initializes the file system information including MBR
and FAT. Furthermore, FinalData can recover data attacked by viruses that alter the directory entry information
such as WormExploreZip. These powerful features are implemented in FinalDatas [Lost Files] category. The
WormExploreZip virus destroys the entire directory information and FAT, thus completely eliminating file information, extension, and file size data. Consequently, only the data area remains unaffected. Even in these extreme
cases, FinalData provides a high accuracy recovery result.
FinalData cannot recover data damaged by viruses that directly attack a files data area.
10.9.
I have recovered a file, but I cannot open it.
In some cases, files recovered by using FinalData cannot be opened properly. Microsoft Office (Excel, Word,
PowerPoint) files and large files such as MPEG files often run into this problem. Please consider the following
points:
Damaged File
After a file is deleted, it could be damaged by another file, overwriting, disk defragmentation, virus attack, or
hacking activity. (Microsoft Office files are especially susceptible.)
These files are marked as [Damaged Files] in the FinalData display. The degree of damage may vary according to
the file type. If only the file location information is damaged, you can restore the file using [Tools] [Find Start
Cluster of a File]. However, if the files data content is damaged, it will not be recoverable.
USER MANUAL
135
User Manual
Fragmented File
Some large files are saved in separated locations because they cannot secure contiguous hard disk space. When one
of these files is deleted, recovery is very difficult. Even though the files start location is available, the location
information of other fragments has usually been erased during the deletion.
Note: FinalData Professional Premium version features a Fragment Recovery function for restoring fragmented files.
10.10. I have accidentally overwritten my partition while using Ghost.

Symantec Ghost is a utility program for creating disk images for backup and cloning purposes.
However, since Ghost not only creates new partitions, but also copies the previous image to the hard disk, data
recovery afterward becomes impossible.
10.11.
Can I recover deleted partitions?
Hard disk partitions can be accidentally deleted with improper use of FDISK or virus attacks.
FinalData recovers deleted data but not the partition. You must save the data in the deleted partition to another
drive and adjust your disk partition.
10.12.
Can I recover data with one hard disk?
FinalData prevents users from saving data in the drive carrying out recovery tasks since saving data in the recovery
drive might overwrite other data yet to be recovered.
If you only have one hard disk with a single partition, recover your data as follows:
1.
2.
3.
4.
Save files to another computers drive over a network.

Save small files on a floppy disk.
Save files on large-capacity storage media such as ZIP or MO drive.
Save files on empty space of CD using a CD-RW.
136
USER MANUAL
10.13. Can I recover files deleted from a floppy disk?

Files deleted from a floppy disk can be recovered. Files saved in subfolders, rather than in the root directory,
have a higher recovery rate.
You can also recover files after formatting a floppy disk. However, you can only recover data if the floppy disk
is quick-formatted. Unlike a hard disk, data cannot be recovered after a standard format has been performed on
a floppy.
Files that were saved in sub-directories of a quick-formatted floppy disk can be recovered from [Lost Directories],
whereas ones in the root directory must be restored from [Lost Files].
10.14. Can FinalData recover files over a network?

Our patented FinalData Network Recovery, can recover files from remote location on the same network anywhere
in the world. (Network Recovery is only available on FinalData Network versions.)
USER MANUAL
137
User Manual
11.
11.1.
FinalData Error Messages

Incorrect Registration Number
Please verify your serial number and try typing it again. This message might also appear if you attempt to install
FinalData in a system that already has a previous version installed. The new and old serial numbers will cause a
conflict. Please note that you can only register one serial number for each computer.
11.2.
Cannot save in current drive
FinalData prevents users from saving data in the drive carrying out recovery tasks since saving data in the recovery
drive might overwrite other data that needs to be recovered. An error message will be displayed when you attempt
to save files to the recovery drive. You should save your data in another drive or if you have no other drive
available in your computer system, you could recover the data as follows:
Save files to another computers drive over a network.

Save small files in a floppy disk.
Save files in large-capacity storage media such as ZIP or MO drive.
11.3.
Insufficient Disk Space
The message indicates that there is not enough free disk space to save recovered files and/or folders. You should
secure more free space and try saving again or recover your files/folders to another disk with sufficient free space.
11.4.
I opened the recovered file and some characters were missing.
Possible causes for missing characters are as follows:
The recovered file is a temporary file.

Programs like Microsoft Word create temporary files while youre working in the programs. Since the temporary
file bears the same name as the original file, you may have mistakenly recovered the temporary file. In this case, it
is highly likely that the original file with the same name exists in the drive. Try recovering the original file. If the
original file is not found, the file may be damaged, or only the temporary file exists without the original file. In the
latter case, the file cannot be recovered properly.
The file is damaged.

Premium or higher versions of FinalData contain a function to recover some of the damaged files of certain file
formats. It is compatible with Word, Excel, PowerPoint, and MPEG files. It can also recover files damaged
during export from Oracle.
138
USER MANUAL
11.5.
Cannot view the content of a recovered file.
Some files contaminated with viruses such as WormExploreZIP and MiniZIP indicate that their file size is 0. When
you attempt to open these files, they are displayed as empty files. Since the system cannot secure the memory,
these files cannot be opened. In this case, select [File Information Alt+F2] from the [File] menu and modify the file
size to an appropriate value. If the original file size is larger than the assigned value, the file will not be displayed
properly. Therefore, if you do not know the exact file size, assign a sufficiently large value.
11.6.
Cannot create socket.
In FinalData Server version, when DOS-Slave or WinSlave communicates with FinalData, each verifies the other
and creates a socket. Then they exchange request and response data through the stream socket. This is similar
to securing a communication channel prior to a telephone conversation. WinSlave internally uses the TCP/IP
protocol. (DosSlave uses IPX/SPX). Just like file input/output, the senders data is the input/output of a series of
stream files, and they are processed as stream data. The receiver sends out queries according to the order of the
data sent. TCP/IP is a protocol that guarantees reliability. If the data does not arrive at the recipient, it is returned to
the sender, eliminating data loss, or redundancy.
The error message indicates that a socket cannot be created because the initial verification process is not
successfully carried out. In this case, reconfigure the programs at both ends, especially the one at the client, and try
connecting again. Also, verify that network connections are correct.
11.7.
Cannot read ***(Number) sector
If there are other disks that FinalData has searched before this message is displayed, select [Ignore], and continue
the search. But, if you select [Ignore All], FinalData may skip all the unreadable sectors automatically.
11.8.
Cannot read sector 0
In Sector 0, the important data required for the system start-up such as MBR are saved. If this error message is
displayed, please take actions according to following situations:
You select a drive other than the hard drive.
Verify if the selected drive is properly connected and inserted. If you select a drive other than hard disk, this error
message can be displayed.
MBR is damaged
If its not a drive selection problem mentioned above, the MBR may be damaged. The message can be displayed
if a storage medium contains the manufacturers unique MBR format. In this case, you can solve the problem by
initializing MBR with utility tools such as a disk editor.
USER MANUAL
139
User Manual
You can initialize the hard drive with FDISK or quick format, and the inserted medium such as floppy diskettes,
CD ROM, Zip drive, and MO with quick format. Sometimes, the full format is required. Unlike hard drives,
the full format of a floppy diskette deletes the data area as well as MBR and makes data recovery impossible.
Quick format is recommended if possible.
Or, if virus eradication software runs a vaccine program, which backs up the original MBR, the MBR is hidden in a
different location. You have to delete the MBR information with a disk editor.
140
USER MANUAL
11.9.
File format not supported.
FinalData Premium supports FAT12, FAT16, FAT32 and NTFS file systems. If you attempt to search a hard disk
formatted with any other file system, the File format not supported error message will be displayed.
The following table displays the file system used by each operating system.
<Operating and File Systems>
Operating System
File System
MS-DOS
FAT16
Windows 3.1
FAT16
Windows 95
FAT16
Windows 95 OSR2
FAT16/FAT32
Windows 98
FAT16/FAT32
Windows 98 SE
FAT16/FAT32
Windows NT 3,51
FAT16/HPFS/NTFS
Windows NT 4.0
FAT16/NTFS
Windows ME
FAT16/FAT32
Windows 2000
FAT16/FAT32/NTFS 5.0
Windows XP
FAT16/FAT32/NTFS 5.0
OS/2
FAT16/HPFS
Macintosh
HFS
UNIX
UFS/JFS/BFS, etc.
Linux
EXT2/EXT3
USER MANUAL
141
User Manual
11.10.
Cannot Run INFDRV.DLL.
INFDRV.DLL and INFTHK.DLL are DLL (Dynamic Link Library) files required for running FinalData on
Windows 95/98/ME. If you see the error message, check that these two files are in the Windows System folder. If
not, they can be copied from the FinalData CD-ROM.
11.11.
Apply old drive data to new information?
If you select [Drive Management] > [Log Management] from a drive that already has a Log File, you can assign
a new Log File size. However, this will create a new and independent Log File on your system. You then will be
prompted by a message that asks whether you want to copy the old Log File information to the new file. If you
select [Apply], all information in the old Log File is copied to the new file. If you click [Ignore], you will discard
the old Log File information and create a new Log File. Since the information regarding previously deleted files
will no longer be available, chances for their recovery are lessened.
If you assign a new Log File size that is smaller than the old one and click [Apply], you will lose some of the old
Log File information. In this case, FinalData will copy the latest information.
Ex)
Old Log File Size: 500MB
New Log File Size: 100MB
In this example, only 100MB of the latest information will be copied from the old Log File to the new one.
11.12.
I ran FinalData but nothing is displayed.
FinalData cannot recover data from a physically damaged hard disk drive. A physically damaged disk refers
to a wet or burned disk, a disk with damaged parts due to mechanical shock, or a disk with an electrically
malfunctioning motor due to electric shock.
For example, it is highly likely that disks with the following symptoms may be physically damaged (list is not
meant to be exhaustive):
142
Abnormal noise (metallic noise)

When a hard disk is dropped and resulted in physically damaged, the magnetic head may become bent or
loose and end up scratching the disk surface. It is very difficult to recover data from these disks.
Burning smell
There may be a problem with the hard disks electrical circuit. Possible causes include inadequate power
supply, a short circuit caused by liquid, improper power cable connection or a bad component such as a
capacitor.
Disk not spinning (no spinning sound)
The head and the disk may be stuck together making the disk unable to spin for some reason. When the
temperature falls, viscosity of the grease on the disks spinning axis may increase. In this case, you can solve
the problem by simply increasing the room temperature.
USER MANUAL
12.
12.1.
FAT F i l e S y s t e m
FAT Features
The FAT file system is categorized into FAT12, FAT16, and FAT32. FAT12 is the file system used for floppy disks.
MS-DOS, Windows 3.1 and Windows 95 use FAT16. Starting with Windows 95 OSR2, both FAT16 and FAT32 are
supported.
FAT is an index table indicating which data is contained in which cluster. As a safety measure, a duplicate is
also kept.
In the FAT file system, a file is assigned to a cluster. When there is a new file, its entry is first created and
the start cluster number is assigned. Next, the files final cluster (EOF) or the next cluster is recorded in the
corresponding entry.
12.2.
FAT Disk Structure
The floppy disk structure is as follows:
Floppy Disk Structure
BOOT Sector
FAT1
FAT2
Root Directory
Data Area
USER MANUAL
143
User Manual
On the other hand, a single hard disk is capable of having multiple logical drive partitions. The hard disk structure
is as follows:
Hard Disk Structure
MBR (Including Partition Table)

BOOT
FAT1
FAT2
Root Directory
Data Area
BOOT
FAT1
FAT2
Root Directory
Data Area
.
144
USER MANUAL
12.3.
MBR (Master Boot Record)
The MBR is located in the first sector of a hard drive and contains the code for the PC to start-up.
MBR contains partition information as well as the partition table as follows:
Partition Start Location
Partition Type (FAT12, FAT 16, FAT 32)
Partition End Location
Partition Size
12.4.
BOOT
BOOT is located in the first sector of each volume and contains information the file system needs to access
the partition.
Initialization Data
0000h 0002h: Jump Command
0003h 000Ah: OEM Name

BPB (BIOS Parameter Block) and Expanded BPB
FAT32 contains the BPB (BIOS Parameter Block) that includes the physical parameter information of the partition
of the first sectors offset address 00Bh~0033. In FAT16, Sector 0, 000Bh~001F is the BPB area; in FAT 12 the
corresponding address is different, after BPB, there is the 26-byte expanded BPB area.
Data stored in FAT32 file systems BPB is as follows:
000Bh - 000Ch
The number of bytes per sector: Usually 0200 (512) bytes.
000Dh
The number of sectors per cluster: The assigned value depends on the volume size and the file system.
USER MANUAL
145
User Manual
000Eh 000Fh
FAT1s start sector number: Usually starts at Sector 0020h (32).
0010h
The number of FATs prepared for a format: Usually 02h.
0011h - 0012h
The number of root directory entries: Since FAT32 does not use it, always 0h.
0013h 0014h
The number of total sectors: Since FAT32 does not use it, always 0h.
0015h
Type of medium: F8h for hard disks.
0016h 0017h
The number of sectors allocated for FAT: Not used in FAT.
0018h 0019h
The number of sectors per track
001Ah 001Bh
The number of drive heads
001Ch 001Fh
The number of hidden sectors
0020h 0023h
The number of total sectors: Used in FAT32
146
0024h 0027h
USER MANUAL
The number of sectors allocated for FAT: Only used in FAT32
0028h 0029h
FAT mirroring flag

Bit 7: Mirroring usage
Bit 3 0: Backup FAT
002Ah 002Bh
File system version.
002Ch 002Fh
Start cluster location for the root directory.
0030h 0031h
Start cluster of FSINFO
0032h 0033h
Start cluster location of the backup boot sector.
Others
End of sector character: 55 AA
USER MANUAL
147
User Manual
12.5.
FSINFO (File System Information)
The file system information sector is located in the second sector of each partition for storing file system
information.
FAT16 examines the entire FAT area when the system is powered up to calculate the available capacity. On the
other hand, FAT32 transfers the value stored in FSINFO to DPB.
Therefore, disk utilization can be assessed at the system power-up, enabling fast disk access. However, if the
system is rebooted while data is being transferred from DPD to FSINFO, the data is not returned, and it must
be recovered with a disk search.
0000h 0003h
FSINFO sector display. RraA.
01E4h 01E7h
FSINFO information start display. RrAa.
01E8h 01Ebh
The number of unused clusters.
01ECh 01Efh
Location of the end cluster being used.
01FEh 01FFh
End character. 55h Aah.

Note: DPB (Drive Parameter Block) is the structure that stores BPB and FSINFO information in memory.
148
USER MANUAL
12.6.
FAT (File Allocation Table)
FAT contains information indicating which data is stored in which cluster. Specific data types and values are
as follows.
00000000h: Unused clusters

00000002h 0FFFFFF7h: Next cluster number
0FFFFFFFh: End of file
12.7.
Directory Table
Contains the file/directory entry list.
Root Directory
During an FAT32 format, Cluster 1 is secured as the root directory area. However, when there is no available
space in the root directory, a new cluster is secured in the available hard disk area. The root directory area is
not fixed.
Sub-Directory
Files that do not exist in the root directory are referred to as sub-directories. Although root and sub directories have
an identical structure, [.] and [..] files are automatically created in sub-directories. [.] refers to the self directory
and [..] the parent directory.
Directory Entry
Directory entry is the area for storing information such as files, directories and volume labels. The length of an
entry is fixed as 32 bytes and its structure is as follows:
00h 07h
This represents the name excluding the file extension in DOS name convention (8 characters for file name and
3 characters for file extension). If the first byte is E5h, it is a deleted file. If the first byte is 2Eh, it represents
the current directory. If the next byte is 2Eh, it indicates the parent directory.
08h 0Ah: File extension.
USER MANUAL
149
User Manual
0Bh: File Attribute.
0Ch: Not used in FAT
0Dh: Created time (10ms)
0Eh 0Fh: Created time (min.)
10h 11h: Created date

12h 13h: Date the file was last used.
14h 15h: First 2 bytes of the FAT entry number.
16h 17h: Time of file creation, modification.
18h 19h: Date of file creation, modification.

1Ah 1Bh: Lower FAT entry numbers and order are 14h, 15h, 1Ah, 1Bh.
1Ch 1Fh: The number of bytes for file size.
150
USER MANUAL
13.
Glossary
File System
A file system is a structure for managing files on magnetic storage media (floppy disk, hard disk). It organizes files
and folders by actually corresponding them to the physical disk. A file system is managed with information such as
directory entries and FAT (file allocation table).
FAT
A file is configured in cluster units. Clusters of a single file are not always stored in adjacent physical locations of
a disk. FAT manages how clusters are linked to constitute a single file. Each entry in FAT has a 1:1 correspondence
with a cluster. A files start cluster is recorded in the directory entry, and FATs next entry points to the next cluster.
As the disk capacity becomes greater, the numbers of clusters and FAT entries increase. MS-DOS assigned 12
bits to FAT entries (maximum disk capacity of 128MB), and MS-DOS 3.x 16 bits. Since 16-bit FAT uses 16-bit
sector numbers, hard disks up to 2GB can be managed. Starting with Windows 95 OSR2, 32-bit FAT is supported,
which means it can control 2TB hard disks.
Directory Entry
Contains file name, extension, file size, MS-DOS file name, modified date/time and the files start cluster. For files
and directories saved in the root directory, the directory entries are saved in the root directory area. However,
directory entries of files saved in lower directories are stored in the data area. Therefore, if the data area is intact,
the directory structure can be recovered from a lower directory.
Long File Name

Refers to the file system used by Windows NT and Windows 95 platforms. The Long File Name FAT has
an identical physical structure as DOS, but it uses multiple directory entries to utilize file names that are 255
characters long. If the sum of the original file path name and the preserving path name is greater than 256
characters, FinalData displays an error.
Sector
Magnetic storage media (hard disks, floppy disks) are divided into regions for efficient data identification. The
minimum unit of the region is referred to as a sector. A sector generally consists of 512 bytes. A disk track is
partitioned into several sectors for management.
Bad Sector
A sector that cannot be read properly due to damage or error.
Cluster
One or more sectors form a cluster for recording data. For example, saving a document consisting of a single
character as a file requires one cluster.
Root Directory
Refers to the highest directory in the drives directory structure. Sub-directories are created under the root
directory.
USER MANUAL
151

Manual

Caricato da

Informazioni sul documento

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

Manual

Caricato da

Copyright:

Formati disponibili

C O N T E N T S

FinalData 2.0 Premium EDITION

4.5. Searching for Specific Files.....................................................................................29

FinalData 2.0 Premium EDITION

6. How to Recover Data in Various Cases ..................................................................93

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

User Registration and Support

Technical Support Options

Email Response Support : support@finaldata2.com

FinalData 2.0 Premium EDITION

How FinalData Works

Microsoft Windows provides a Recycle Bin (

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

Before Installing FinalData

Please check the minimum system requirements before using FinalData:

O/S: Windows 95/98/Me/NT4.0 (workstation,SP4.0+)/2000 (Professional)/XP

Minimum 32MB of RAM (64MB or more recommended)

At least 10MB of free disk space (20MB or more recommended)

2x CD-ROM Drive or faster

256-color VGA resolution or higher

FinalData 2.0 Premium EDITION

Double-click the [My Computer] icon on the desktop.

Double-click [CD-ROM Drive].

Open the [Setup] folder.

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

Click [Yes] after reading the above Software License Agreement.

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

If this item is not available, you can remove FinalData as follows:

Select [Start] - [Settings] - [Control Panel].

Open the [Control Panel] and double-click [Add/Remove Programs].

Select [FinalData 2.0 Premium ] and click the [Add/Remove] button.

FinalData files and folders will be removed.

FinalData 2.0 Premium EDITION

General Data Recovery Procedure of

Click [Start] and choose [Programs] [FinalData] [FinalData 2.0 Premium].

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

To find a drive, select [File] > [Open].

FinalData 2.0 Premium EDITION

Logical Drive Search

FinalData 2.0 Premium EDITION

Physical Drive Search

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

Descriptions of the seven items are as follows:

FinalData 2.0 Premium EDITION

MBR: Master Boot Record

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

Searching for Specific Files

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION

FinalData 2.0 Premium EDITION