Directory Snoop 5

Frequently Asked Questions


  1. Will Directory Snoop run under Windows Vista?
  2. When I undeleted a JPG file, only part of the image was recovered when I tried to view it. What went wrong?
  3. Does Directory Snoop support writeable CD drives?
  4. Why does Directory Snoop not show all files in the "Windows/Temporary Internet Files" folder?
  5. Why do I get a "Cannot read boot sector" message when selecting a drive?
  6. Can Directory Snoop fix a corrupted drive or partition?

  1. Will Directory Snoop run under Windows Vista?

    Beginning with version 5.03, Directory Snoop will run under Windows Vista but with limited functionality. Unlike XP and previous versions of Windows, Vista does not allow "user-mode" programs like Directory Snoop to write to raw disk sectors unless the drive volume is locked. Drives can only be locked if there are no open files on them so this excludes the boot drive. It may also exclude other partitions if Windows or some other program has any files open there also. If Directory Snoop is unable to lock a volume, you will see this message: "Unable to lock volume. Windows Vista does not allow direct cluster writes on drives with open files". This limitation affects the File|Purge, Cluster|Wipe, and Attribute|Wipe_deleted commands. All other functions, including File|Undelete should work normally under Vista.

  2. When I undeleted a JPG file, only part of the image was recovered when I tried to view it. What went wrong?

    With the FAT file system, Directory Snoop has to make a best guess as to which clusters to copy to the recovered file. Only the first cluster number is saved when a file is deleted and the rest of the list is cleared by Windows from the file allocation table. A partial recovery means that either some of the clusters have already been overwritten by newer files (making a full recovery impossible) or the file was fragmented and the original cluster chain was not sequential. In that case, the only hope of recovery is to do it manually by trial and error. Use the Cluster/Copy function to manually select clusters from the drive and copy them to the end of your target file. File fragmentation is not an issue with the NTFS file system because the Master File Table retains the entire list of clusters numbers when a file is deleted, not just the first one.

  3. Does Directory Snoop support writeable CD drives?

    No, only noncompressed FAT and NTFS-formatted (floppy, hard, Zip, etc.) disks are supported. CDs use a different file system.

  4. Why does Directory Snoop not show all files in the "Windows/Temporary Internet Files" folder?

    That's a special directory that Windows Explorer plays tricks with in conjunction with the Internet Explorer browser. Directory Snoop shows the true contents of the directory but IE has stored bookmarks and cached files into index files. Windows Explorer pulls that data and displays them on separate lines as if they were separate files. You can empty that data from the menu inside IE.

  5. Why do I get a "Cannot read boot sector" message when selecting a drive?

    The two most commons reasons are: (1) You are running Directory Snoop in Win 9x compatibility mode on Win XP or (2) You have an anti-virus program or some other low level utility running that is blocking direct disk access. To fix the compatibility mode, right-click on the shortcut icon for Directory Snoop, select properties, and uncheck the compatibility option. To stop the disk access interference, simply shut down the offending program before starting Directory Snoop.

  6. Can Directory Snoop fix a corrupted drive or partition?

    No, Directory Snoop is not a drive/partition recovery utility. It can only access valid drive volumes that have been assigned a drive letter by Windows.