Jump to content
CCleaner Community Forums

Augeas

Moderators
  • Content Count

    4,270
  • Joined

Everything posted by Augeas

  1. I think you may be confusing the two processes, which are entirely separate. Unchecking the Wipe MFT box in Options/Settings only applies when you run Wipe Free Space from Cleaner/Windows/Advanced. Using Drive Wiper will wipe the MFT whatever is in the Options/Settings box. If you don't want the MFT to be wiped then use WFS from Cleaner/Windows/Advanced.
  2. You said you were using Drive Wiper. Wipe Free Space in Cleaner/Widows/Advanced does not wipe the MFT unless that option is checked in Options/Settings.
  3. They're all system files that would be expected when an NTFS volume is formatted. They are essential for Windows to access the drive.
  4. Furthermore the folder you're recovering to, Camera Roll, contains sub-folders DCIM and 104_PANA. These seem to have disappearded asfter the recovery. Are you sure the folder you selected and the folder you are looking in is the same place?
  5. No. The free and paid for versions have the same recovery capabilities. I can't help on the disappearing recovered file as I've never experienced it. Recuva seems to have done something, I should look around your pc to see if the file is elsewhere.
  6. Sys restore should be off by default on Win 10 systems.
  7. All you can do is try a larger drive. Are you trying to recover system files, some of which are sparse files with a nominal size of the disk? Usually with an SSD it is impossible to recover any file after a format, as that runs a universal TRIM. If Recuva is listing files than perhaps TRIM isn't working across the USB connection. Try a recovery and see what you get. Oh yes, you can restore the folder structure (as much as you can) by going into Advanced Mode, selecting Options/Actions, and checking Restore Folder Structure.
  8. It's not something I've ever experienced, so I can't be much help.
  9. Does the space used on the 8tb drive increase when the recovery is completed, or remain the same?
  10. My money's on whatever is on the drive has been put there by the user, in one way or another. I don't buy this testing story even a tiniest bit.
  11. Ahh, I missed the bit about it being an SSD. Your chances of recovering file data from and SSD are close to zero. Cancel stage 2 as soon as stage 1 ends. Forget the $I file, the $R holds the data. Whatever you've found look at the header data in the Info pane in Advanced mode.It's likley to be all zeroes. It is almost impossible to recover data from a modern SSD.
  12. Cancel stage 2. You will still get the results displayed and you can recover anythng found.
  13. Augeas

    Reformat

    Well I don't know everything. Consider that 6.6 gb is only 0.0066 of a terabyte, so it could just be rounding (e.g 1.814 less 0.006 = 1.808 rounded to 1.81). Using properties on the drive will give a more accurate figure.
  14. Augeas

    Reformat

    Possibly because drives are specified in terabytes (1k = 1,000 bytes) and Explorer uses tebibytes where 1k = 1024 bytes. So your 2tb disk says 2 terabytes on the label and 1.8 tebibytes when examined by Explorer. It's actually 10 to the power of 12. You will have some relatively small system files on there after formatting, but who knows what your 'some files' means.
  15. Augeas

    No files listed

    Recuva is a file recovery program so yes, it lists deleted files as a default. Presumably you are trying to recover files deleted from the ronald folder?
  16. Augeas

    No files listed

    I guess there's a message under the pics. The first pic quite simply says that none of the files found matches the search criterion. No file having that (what looks like a) folder name was found. Running a deep scan as seemingly recommended is futile, as files found with a deep scan have no file or folder names associated with them, as they are held in the MFT and a deep scan does not look at the MFT so cannot use anything in the search box. If the search criterion is correct then unfortunately there's nothing to be found.
  17. Augeas

    date when deleted

    I don't think that that information is held in the MFT record. There is a file created and file modified date field, and a MFT modified date field, but I don't know if the latter is updated on file deletion. Whether or not Recuva doesn't show it.
  18. I don't think that Windows allows FAT32 partitions greater than 32 gb, how large was the partition on the 1 tb disk? How did you get Recuva to recognise the remaining part of the disk? Recuva requires a drive letter to function. But the crux is that without a file system Recuva won't be able to do anything. Don't let that stop you trying the various options, scan for non-deleted files etc. You might be lucky, and it's something to do on Christmas Day when the TV is rubbish.
  19. Perhaps after more than twelve years nobody in this thread cares any more. If you have a problem please create a new thread.
  20. Recuva will list all the deleted file records in the Master File Table. If they're not listed then they're most likely not there. Deleted file records are reused generally in the lowest-numbered record found order, which is why files created and deleted on the same day are likely to be the first to have their MFT records overwritten. Nobody knows what user and system activity is going on on your pc. If the file names aren't in the MFT then they won't be found elsewhere. Unless your packet capture files are in some common format (doc etc) then a deep scan won't find them, and is pointless. I don't use the recycler, so I can't answer your question.
  21. I've only had experience with relatively small drives, 500 gb and under, and a deep scan takes about 45 mins at the most. Some people do experience very long scan times, and yours seems exceptionally long. I have no idea what the cause is, or what Recuva is trying to do. I usually cancel at stage two and I have never found any detrimental effect, the files found are still displayed. You may wish to try that. I also have Truecrypt containers and they do not slow processing down. To Recuva they are files with a name and a cluster allocation, just like any other file. There is no indication to anyone that they are encrypted. USB access will probably slow things down a little, but a month is ridiculous.
  22. Files sent to the recycler are renamed to $Irandom.ext and $Rrandom.ext. The $R files are the data, the $I files hold the file name etc. As you have created and deleted the files on the same day it is very likely that the MFT records have been overwritten by later activity, as they are reused on a first available record basis. Deep scan looks for a specific set of file headers. You describe the files as packet captures: I don't know what they are but unless they fit into the list scanned by Recuva (look at the drop-dpwn list in the File/Path box) themn a deep scan will not find them.
  23. Augeas

    File Recovery Help

    If you're looking at shadow copies you could try right clicking on the folder and selecting Restore Previous Version.
  24. You won't find any folders as Recuva does not recover folders explicitly. Deleted directories contain names of files that don't necessarily exist, and index array offsets that are clearly invalid. I don't know why you can't find any files, I can't either. A scan of my disk reveals about 20 files from the documents folder, none of any use. Perhaps Win 10 behaves differntly from its predecessors.
×
×
  • Create New...