Jump to content

Fail to list deleted files


bellini

Recommended Posts

1) Delete file from C: drive

 

2) Delete from recycle bin

 

3) Scan C: drive with Recuva

 

4) Deleted file not listed

 

Have tried deleting from C, D & G drive.

 

Have tried scanning each drive in turn looking for file.

 

Have tried "find"

 

No joy ... cannot find file.

 

Other files deleted prior install of Recuva are listed, but not the ones I am testing with.

 

Other info ... C and D drives are partitions on drive 0.

I also have drive 1, which is configured in a raid o setup with drive 0.

Drive G is an external USB connected HD.

 

Comments/suggestions welcome.

 

Ciao

Link to comment
Share on other sites

Update ....

 

It would appear that the issue is with files deleted via the recyle bin

 

If I set deletion to delete directly and bypass the recycle bin,

Recuva can list and restore them. This applies to all drives.

 

I can find no application running on the system that does any

shredding of files deleted from recycle bin, nor see any reason why

the normal emtying of recycle bin should prevent Recuva seeing the

deleted file.

 

Comments/suggestions welcome.

 

Ciao

Link to comment
Share on other sites

Windows often renames files when you place them in the Recycle Bin, so, try scanning and filtering by 'Recycle'.

 

This will show you all the files that were in the Recycle bin. Then sort by file type and your files should almost certainly be there.

 

:)

MrRon

Link to comment
Share on other sites

  • 3 weeks later...

I agree 100%. Even looking in Recycle as one thread suggests it won't be there.

 

Somebody has to get the bugs out of this program for good because there are too many "recover deleted file " utilities out there to bother with this when you can't find that critical file you need.

 

thx

Link to comment
Share on other sites

Are you creating the test files and then deleting them immediately? If so then this is probably the reason you are unable to find them.

Windows is constanly creating new files (mostly temps files). When it creates a new file, it adds the file name to the MFT table and uses the space created by the most recently deleted file. So if you create a file and then immediately delete it, the chance of it being recovered are smaller than if you have waited a few minutes. Effectively, the longer a file has existed, the greater the chance of recovering its name. On the other hand, the longer it has been deleted, the greater the chance it has been over written.

 

:)

MrRon

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.