Augeas
-
Posts
4,542 -
Joined
Posts posted by Augeas
-
-
It's doubtful, otherwise I'm sure this facility would be already available. Killdisk is a Dos program, so can access any part of the disk with relative impunity. Recuva is a Windows application, and although I believe it can access the MFT in Vista, if not XP, it would be a brave programmer who took on modifying the MFT on the fly. Windows disk washers generally work by filling the disk and MFT zone and MFT with harmless files with harmless filenames, and then deleting them. In other words asking Windows to do the work for them.
-
I think that the word 'undesirable' is far too judgemental. After all being told you are unwanted is one thing, but being told you are undesirable is just slanderous. These registry entries are better described, as indeed my boss described me once, as no longer needed.
I would only tamper with the registry entries that you can identify as not needed any more. In my case, with a Dell, anything with AOL or McAfee in the name, or file extensions that are obviously silly. And of course follow the good advice already given in this thread.
Regards, another old goat. (Coincidentally I'm off for a goat curry this evening, can't wait.)
-
Try the reverse, unticking all the advanced options. It's probably Window Size/Location Cache that's giving you the problem. You can put the Advanced options back one by one, if you think you want them, and test each one as you go.
-
I wondered when someone would spot that!
Only relevant to watchers of old b&w UK tv series
-
Now I see what you mean! The only thing I can suggest is to try a deep scan (if you haven't already under 'advanced search'). This will probably take the best part of half a day on a 500gb disk. When, and if, it's done then be very careful with the Recuva window, it's all too easy to close/lose that window and all 12 hrs work will have gone. You can sort the results by folder, filename, size etc so you can recover, with Recuva, what you want to say a flash drive or your primary drive. Good luck!
-
I'm not quite sure what you are saying. Are you saying that live (undeleted) files have suddenly changed to zero length? Which files have been deleted, if any? If they are not deleted, as you say, are you using Recuva to show undeleted files to get the header info? Does Recuva say the files are zero length? What did you recover with Recuva, a deleted or undeleted file?
The only help I can give at the mo is that If a deleted file has been overwritten then Recuva will recover the data that's overwriting it, so that you may get back contents that don't match the file name. Filesize going to zero? Beats me (but option 2 is where the money goes).
-
You won't be able to do much at all if your pc is running at 100% cpu. Can you do a Ctl/Alt/Del to bring up the Task Manager and then look in Processes to see what's using all this cpu? If it ain't important (i.e. anything except explorer.exe) then kill the process. Then try the reg restore.
Did you reboot after the reg clean?
-
Try recovering a 'red' file - sometimes Recuva is not too accurate in its state of the file readings.
-
I'm sure this question has been considered before, if not actually asked.
Assuming you mean that the files are actually unrecoverable, and not the Recuva just says that they are? And do you mean that the files are completely unrecoverable, or that most of the pic is recovered and a section is just fuzz?
I dunno. But I guess it's either that some parameter in the directory is altered so that the full or correct extents of the file can't be recovered, or that part of the data on the disk is altered when it's deleted (by writing a free space marker or something) so that the data can't be read properly, or that some field that Recuva is attempting to interpret returns the wrong info. Or that some temporary file is written or allocated on top of the data, but perhaps that is unlikely on a flash drive. Or that some file management software is automatically tweaking the data on the drive when files are deleted. I've run out of guesses now.
-
Well, this would be better in Recuva or software discussion, but never mind.
From your description your pc seems well and truly to have suffered the electronic equivalent of crash and burn. I'm not surprised that you can't run any programs. What were the two O/S's that your brother instralled (assuming you are still speaking to him)? Were they installed on top of the existing O/S, or was the disk formatted?
Can you do a system restore to some point before you brother touched the pc? This might get your pc back to some semblance of working properly. I would try that first.
If not then the best solution seems to be a disk format, fresh O/S install, and reinstall all of your programs. I appreciate that this might be difficult. I think that things have gone too far to recover a working system form the debris on your pc.
You could try to recover some of your files to a separate drive. A Recuva deep scan will produce thousands of files, as you no doubt have discovered, so selecting what to save could be a problem. It's really your own data you want to recover. When you get your pc back to working state you can then copy back your favourites, etc.
Recovering program files does not usually prove effective, there are too many other variables to consider. What do you recover, what dlls, etc. What's missing from the registry? Where does everything go?
I would then password protect your pc, or buy a large lock for your door, or keep a basball bat next to your pc. Good luck.
-
I think that many people would prefer to have smaller speedy applications that do what they do well. I don't use Defraggler, for instance, and being old school don't want bloaty stuff (AVG 6, 4mb. AVG 8, 50 mb). I know, what about Windows. But I have to use their stuff.
-
Don't take Recuva's classification of the file state as infallible. It's only software, and can only check such things as is the data overwritten according to the MFT, does the file size value match the actual file size, etc. It can't pass any judgement on the data in the file.
I have no knowledge of anything Yahooish. It does sound a little flakey. I don't know what you want to do with the recovered files, of course, but could you perhaps recover them to a separate folder/cdr, then if you need some particular piece of info search the files and then open the found files with wordpad or similar?
-
1) Never (well, once in three years is statistically never)
2) Twice a week, or whenever I have around 50 mb to clean
3) Every few months I poke around and remove the blindingly obvious errors and leave the rest alone
-
Hmmm. In XP2 Home/FF I don't have anything in these folders. Do you have Adobe Flash ticked in CC Applications?
-
Well, I guess you would set up a separate rubbish bin on each partition. As for why this option isn't included, I have no idea.
-
I agree that a right click secure deletion would be handy (and has been requested before). But as I understand it a cut and paste or a file drag, as one would do if moving a file from one folder to another, modifies only the directory info for the from/to folders, leaving the original file data where it was on the disk. So a move to a rubbish folder and then wiping this folder (by right clicking on Included Folders) would do the trick, if rather laboriously. On the other hand you can collect all your to-be-wiped files in one place and then kill all those birds with one stone, as it were.
-
I was pondering how this is so. The best I can come up with is that a new or very recent file will have used the first available entry in the MFT to store its filename info, with pointers to the sectors holding the data. Delete it, and the MFT entry becomes once again the first available entry to other filenames. Create another file, either explicitly or by using Windows or some application, and the entry in the MFT is overwritten with the new file details. So a normal scan with Recuva can't find the recently deleted file as it only looks in the MFT.
It might be possible to find the lost data by running Recuva in deep scan mode, but this will take some hours, depending on the size and speed of the disk. And there's an awful lot to look through afterwards. The results can be sorted in date, path, extension or name order, so that might help.
-
To answer your second post, sometimes you can run CC, move to another window and do some work, then go back and run CC again. It would be a pain to have to shut CC and then open it again. I think that sometimes 'Too clever' becomes 'Too annoying.' (That's the program, not you!) A greyed-out box, when there's no functional reason for it, can be a real pain.
-
Yes, but I don't think you will see edit versions unless you run Recuva in deep scan (the OP doesn't say what mode was chosen). Normal scans just plough through the MFT, I believe. We need more info from the OP.
-
If data is overwritten once, by CC or any other means, then it cannot be recovered, by Recuva or any other means. If you doubt this then just edit one word or character in a file, save it, then try to get back to the original. So if CC overwrites something and you can still see, or recover, that data then you are looking at something else. If you are looking at the original data, then CC did not run its secure delete against it.
I don't use CC on the recycler, so there may be some simple explanation for this, and CC is not performing the overwrite, which appears to be the most likely prognosis. It's strange that the recycler has been emptied. When you run an analysis does CC list the recycler or its entries as to be deleted? Does it say secure deletion at the top of the list of files?
I'll wait for someone to give recycler advice before going into more esoteric reasons for recovereing 'deleted' data.
-
And to confirm the applications will not be uninstalled, just the temp files associated with them removed. I have everything ticked except Saved Form Imformation in Firefox (I can't remember why, probably this removes saved passwords or some similar setting).
-
CC will not clean your e drive, and does not repair anything, just clears out old temp/log files etc. I guess the reason why it doesn't touch drives other than the c is that all folders holding temp/log/etc files normally reside on the c. There's no standard stuff on other drives to clean up. You can direct specific folders/files on the e drive to be cleaned (wiped completely) by including them in the Include section, but be careful, CC will wipe the entire contents of whatever you include.
I can't help with the OP's problem though.
-
I would think that a registry restore just reinstates the values held in the backup, so you shouldn't need to remove any keys. I'm not too sure about removing any more registry entry at the moment. However some more experienced registry-tweaker might know more. You certainly get the prize for persistence, Harry.
-
Well, you could try restoring the last one again, but this in clutching at straws land.
Partition/File Recovery
in Recuva
Posted
I would try running Recuva (install on the C drive or use the portable version on a flash drive) on the F drive with the Scan for non-deleted files option chosen in Options/Actions. If you find the pics then recover them to either the c or the flash drive. If you can't find the pics there then you could try a deep scan, but it will take hours and return zillions of files. This is assuming that Recuva can actually scan the drive. I've no knowledge of PC Inspector.