Table of contents · How to use

File Panel

File panel displays virtual directory structure and allows browsing through directories and selecting items to recover or to open them in the Disk Editor. You should open a volume to access the file panel.

Open virtual directory [All Found / Virtual FS] to virtually reconstruct file system and display all found and removed files and directories. The results of Full Scan are used for reconstruction.

To recover files marked as "found" or "deleted" (see icon description below) the corresponding options must be selected in the data recovery dialog box.

Directory structure is virtual and may differ from the one that can be found directly on the disk or in the standard browser. Virtual names are enclosed in square brackets or begin with the sign $ and are usually placed in the topmost level of the directory structure. Virtual directory $Root generally corresponds to a root directory of a volume in the standard browser.

Press [F2]/[Shift+F9]/[Shift+F10] or right click the item for a context menu.
Press [Enter] key or double click to open the directory, or open the file in the Disk Editor or for preview.
Press [Ctrl+Enter] to open the item in the Disk Editor.
Press [Insert] key or [Space Bar] or click the checkbox to toggle marking the item for recovery.

File Attributes

E/C/s: encrypted/compressed/sparce (NTFS)
D: directory
R/H/S/A: hidden/read only/system/archive
x/f: "deleted"/"found"

File Icons

 GUIConsole Icon Description
yellow dir
[.] normal directory containing files
light yellow dir
[ ] directory not containing files
yellow dir red dot
[x] directory containing deleted files
yellow dir cyan dot
[f] directory containing "found" files
yellow dir cyan dot red dot
[x} directory containing deleted and "found" files
yellow dir trash mark
(x) deleted directory
yellow dir cyan dot trash mark
(f) deleted directory containing "found" files
yellow dir trash mark in brackets
(.] deleted directory containing not deleted files (some kind of FS error)
yellow dir cyan dot trash mark
(f] deleted directory containing normal and "found" files (FS error)
cyan dir
{f} "found" directory (FS block number in square brackets follows name)
cyan dir yellow dot
{.} "found" directory containing normal files
cyan dir brown dot
{x} "found" directory containing deleted files
cyan dir yellow dot red dot
{.) "found" directory containing normal and deleted files
cyan dir trash mark
(x} "found" deleted directory
cyan dir yellow dot trash mark
(r} "found" deleted directory containing deleted files
cyan dir trash mark
(f} "found" deleted directory containing not deleted files
cyan dir trash mark
(.} "found" deleted directory containing not deleted and normal files
file
 .  normal file (within the base file system structures)
file top left green bottom red
+.  [normal] FS file also found by signatures (if Raw-search was performed)
file top left green bottom red
-.  [normal] FS file not found by signatures at the corresponding disk location, maybe damaged file / wrong type / not recognized
cyan file
 f  "found" file (within additionally found FS fragment, fragment number is in square brackets, [J] indicates FS journal)
file trash mark
 x  deleted file
cyan file trash mark
 xf "found" deleted file
file top left green
+.  file found by signature (Raw)
file top left bottom right green
+.+ file found by signature, end file signature (EOF) is found
file top left green bottom right red
+.- file found by signature, end signature not found
file top left green bottom red
+.~ file by signature, size detected, probably fragmented or partially overwritten
file top left green bottom red
 .+ file found by end signature
yellow dir cyan triangle
[>] directory which content is not completely known
file seam
|.| virtual directory containing several FS records belonging to a single file
blue dir
[.] $MetaData - virtual directory containing special FS files
blue dir
[.] $NonameFiles: contains files whose names and parents are lost
cyan dir
{f} $Raw: contains files found by signatures
file
 .  FileName:StreamName - NTFS alternate data stream (displayed after FS reconstruction)