Jump to content
Piriform Community Forums
BillSmith

Why are "unrecoverable" files recoverable?

Recommended Posts

I just installed Recuva and I must say it is is a powerful tool. But how can it recover files that have been overwritten and marked as unrecoverable? And this is after an Eraser "erase unused space" pass! My concern is that the files I want destroyed are still able to be recovered after a wipe. Can someone please help me with truly deleting my files?

 

Thanks in advance!

Share this post


Link to post
Share on other sites
But how can it recover files that have been overwritten and marked as unrecoverable?

 

For the most part it can't. Two things occuring here 1) file is listed as unrecoverable if you recover it 99.999999% of the time you will get nothing but junk 2)file is still listed in the Master File Table (MFT)

 

Wikipedia says

The Master File Table (MFT) contains metadata about every file, directory, and metafile on an NTFS volume. It includes filenames, locations, size, and permissions. Its structure supports algorithms which minimize disk fragmentation[citation needed]. A directory entry consists of a filename and a "file ID" which is the record number representing the file in the Master File Table. The file ID also contains a reuse count to detect stale references. While this strongly resembles the W_FID of Files-11, other NTFS structures radically differ.

 

 

If you really want too you can wipe the MFT with Wipefreespace on ccleaner

Share this post


Link to post
Share on other sites

Well, actually it did recover many files that it had marked as "unrecoverable". It did especially well with jpegs, to my surprise. I subsequently reran Eraser with the cluster tips setting and there much fewer files remaining. No files of user note at all, just some 0 byte files and filkes that were locked by Norton, as I ran it within Windows.

Share this post


Link to post
Share on other sites

Well, actually it did recover many files that it had marked as "unrecoverable". It did especially well with jpegs, to my surprise. I subsequently reran Eraser with the cluster tips setting and there much fewer files remaining. No files of user note at all, just some 0 byte files and filkes that were locked by Norton, as I ran it within Windows.

 

How did you manage to recover files that were unrecoverable???? did you try it with documents like word, or Open Office? please explain.

Share this post


Link to post
Share on other sites

Honestly, I don't know. It was my first time using Recuva and I may have done something incorrectly. I also believe that Eraser did not finish properly prior to use, however I did not have any Word docs or other files, just JPEGs and GIFs.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×