|
|
|
|
![]() ![]() |
Jun 24 2006, 07:27 AM
Post
#1
|
|
|
Premium Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 181 Joined: 22-February 06 Member No.: 19,007 |
now have you ever wondered what happens to a file when you delete it and empty the recycle bin ? surely it should not be in the computer by then ?? well i ahd a big sprise waiting for today morning when i turned on my computer , i will tell you waht happened , yesterday a colleague of mine put sum flash files on my desktop and when i went home i deleted them and emptied recycle bin assuming he should have made a copy and has taken to his computer , but when i turned on my office computer this morning the files i deleted were sitting right on my desktop again !! boy u'll bet i was suprised , so i asked him and he told me that he didnt make any copies and since it is hours of work he can't possibly redo it so he recovered the files from my hard drive again , but i told him i deleted them and emptied recycle bin and that was when i came to know that not only cats have nine lives but files you create in windows have three lives too,and he showed me the program he used and it was full of files i recently deleted !, so what happens is when you delete a file it goes to recycle bin ,but infact it is not moved to the recylce bin at all it remains in the same location only its complete path and name is removed and placed in a hidden folder called recycled and the file is then renamed , its original name and path been stored in a hidden index file called info2 located in the recycled folder , so when we click restore in the recylce bin the original path is read from the the info file and the file is again renamed and its directory entry restored , so what happens when we clicke empty recycle bin ? no the file dont get deleted even now ! windows just changes the files path and name to indicate the space it occupied is no longer needed and is available for use ,but any time the OS needs sspace for any other file it may be overwritten , untill the file gets overwritten by the OS it still exists on the hard disk and is fully recoverable by using programs which enable file recovery , pretty cool for geeks who make the repeated mistake of deleting an important file and again deleting it from recycle bin and then pull their hair for being such a nerd huh !
|
|
|
|
Jun 24 2006, 08:21 AM
Post
#2
|
|
|
Newbie [Level 3] ![]() ![]() ![]() Group: Members Posts: 49 Joined: 22-April 06 Member No.: 22,255 |
I wonder How the File Recovey softwares restore those old files. Some softwares even challenge the recovery of file after the file-system format! Really amazing!
|
|
|
|
Jun 24 2006, 08:53 AM
Post
#3
|
|
|
Newbie [Level 1] ![]() Group: Members Posts: 18 Joined: 24-June 06 Member No.: 25,594 |
Ok fine it goes to the recycle bin and then if deleted is not totally removied but just renamed and make permanently hidden......file recovering softwares jus look for the file extentions on the harddisk's hidden area and finds it.
|
|
|
|
Jun 24 2006, 10:44 AM
Post
#4
|
|
|
Super Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 326 Joined: 7-October 05 Member No.: 12,650 |
Yep, the file's don't get deleted properly, even if you try emptying the recycle bin and then trying to manually delete the content from the recycler file. I tried debugging a friend's computer once and found this out for myself.
This person had an infected file on their computer and I moved it to the recycle bin. I then clicked empty which worked fine, we thought the file had gone but we were wrong. When we restarted the computer, the virus program alerted us that there was this virus, the same one i removed, in a folder called recycler. Eventually, I managed to remove this in safe mode i think it was, although can't really remember. It was quite a long time ago. What i do remember though, is that I spent quite a while working out how to do it, as when I tried deleting, I was receiving access denied and unable to delete messages. |
|
|
|
Jun 24 2006, 03:43 PM
Post
#5
|
|
|
Trap Double Mocha Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: [HOSTED] Posts: 2,224 Joined: 5-November 05 From: That one place over there... Member No.: 13,830 |
Ya I have heard about the same thing but sort of forgot how it worked. I would like to try to buy one of those programs in case I ever do delete a file that I need later on in life. I though all you had to do was find that hidden folder but I guess not. It is really helpful I'm sure in a work environment when you delete something important on accident.
|
|
|
|
Jun 24 2006, 04:41 PM
Post
#6
|
|
|
Newbie [Level 1] ![]() Group: Members Posts: 23 Joined: 13-July 05 From: West Midlands, England, UK Member No.: 9,381 |
I use a program called eraser to permanently delete documents you can find it here http://www.tolvanen.com/eraser/ it overwrites the file 35 times so it cannot be recovered very easily.
|
|
|
|
Jun 24 2006, 09:28 PM
Post
#7
|
|
|
Mankie ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 762 Joined: 22-July 05 From: New Delhi, India Member No.: 9,746 |
well, the concept is this that when you delete a file and erase the recycle bin its traces are left on the "harddisk clusters" and those traces are used by recovery softwares to recover the files. Now, if some data get written on those clusters then the file recovery software can get the data for you however, it may not be hundred percent correct..it may be corrupt file too!
Things get more and more technical with file recovery and how data acts on the harddisk and the harddisk functioning and all...so, if you actually want to know it then I'll suggest you do Google it |
|
|
|
Jun 24 2006, 10:09 PM
Post
#8
|
|
|
Super Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 219 Joined: 30-October 05 Member No.: 13,574 |
Actually, nothing has changed since the old MSDOS time.
A file exists in a linking of clusters (at the end of a cluster there is a link to the next cluster). When deleting a file (you erase the first letter of the filename and mark the cluster as free). The link to next clusters remains but they also marked as no longer in use. So if you didn't write anything on your hard drive on the place of the clusters you can undelete the file from your harddrive. If you want to delete files so you they can't be recoverd you have to wipe the entire free space on the disk (wipe = overwrite it with a dummy value), this can also be used for Memory cards of a Photo cam. Even a format doesn't delete everything on the disk , with some programs you can recover the information on the drive. |
|
|
|
Jun 24 2006, 11:48 PM
Post
#9
|
|
|
Super Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 205 Joined: 14-March 06 From: Vermont or Boston (USA) Member No.: 20,077 |
Yeah, the fact that files don't get really "deleted" until they're over written about 4 times has saved my *arse* a few times. Having acidentilly deleted a number of files, it was great to be able to recover them.
The program i used is called rest###...i'll try to put up a link to it when i get back to my own computer. It also has a security shredder that'll make files impossible to recover (by over writting their sectors 5-25 times). |