Hi,
Files that have been partially overwritten by other files are marked yellow in recuva. If I am recovering such files in normal recovery mode (that mode that uses mft an that keeps the filenames), are the clusters belonging to the other (newer) file included in the recovered file?
I know in deep scan carvin process this can be the case as the software probably cant distinguish between data belonging to the file and other files fragments within the amount of clusters to be rescued.
But using the normal recovery mode, is there any possibility that other files contents are within the rescued file? Or will recuva ignore these clusters which have been marked as overwritten and restore the requestet file just without them? (that would make more sens for me, eg also fore security/privacy reasons.
