QUOTE (Augeas @ Oct 16 2008, 04:09 PM)

1) CC will (if the option is chosen) overwrite files in the MFT and anywhere else, and rename them to ZZZ.ZZZ. This is because it can do the overwriting and renaming before deleting. Recuva cannot overwrite or rename already deleted files which are resident in the MFT because it is unable to modify deleted MFT entries. The files in the MFT are deleted from a normal Explorer point of view just as other deleted files are, but are never actually 'deleted' from the disk. Deleted files in the MFT can be recovered, overwritten or not.
2) Yes, in the majority of cases. If you have a file right at the furthest extension of the MFT, and there are plenty of available slots before that, then it may be some time before it it overwritten, if ever. If you have a particularly nasty file you want to be overwritten, just don't cleanup until it goes.
3) Small files can fit into the MFT in their entirety. The MFT does not separate file header info from data, so if it can fit into the MFT entry then it will (can't remember tech MFT details at the mo). Larger files will use sectors on the disk outside of the MFT zone.
4) No. If a file entry in the MFT is flagged as deleted it will be handled as deleted, i.e. ignored. Another cookie or whatever will be created, maybe even in the same MFT slot!
5) Yes and No. CC will, as mentioned in 1), rename, overwrite and delete any file, just as anyone can. Recuva can overwrite any non-MFT files, but it can't rename them because it can't modify the MFT entry. The actual data overwrite option is identical, that is zeroes or whatever option you chose.
Thank you for going to the trouble of answering all my questions. A few points I don't quite understand.
Re 1. "CC will (if the option is chosen) overwrite files in the MFT". Do you mean that I can somehow ask CC specifically to delete and overwrite files in the MFT. Or is is the case that such files are automatically deleted by CC if I clean the appropriate drive?
Re 2. "..just don't use cleanup until it goes". I am not sure what this means.
Re 5. This raises two questions that have been on my mind.
a) I use CC to delete and overwrite temporary internet files on my C drive in 3 pass mode. Sometimes I then use Recuva to check how the deletion went. Frequently I find that files that I thought were deleted and overwritten are marked "excellent" or "good" for recovery. And in many cases the name of the file is readable (ie it is not obscured by zeros or zzzzs) Does this suggest that CC is not doing a comprehensive job of overwriting, (although the deleted file will often subsequently be overwritten by normal computer use)? Or am I missing some important instruction to CCleaner?

when I use Recuva like this (ie to check files deleted by CC) is it necessary, or a good idea, to use the
Recuva delete function afterwards? I would imagine not since the mere fact of scanning my drive and bringing up the files should not alter their deleted status. But maybe you could confirm this.