Augeas
-
Posts
4,542 -
Joined
Posts posted by Augeas
-
-
Not really. Have you downloaded any huge files recently, films etc?
-
You cannot buy Recuva, only make a voluntary donation. Make sure you have downloaded a copy from fiilehippo or piriform.com.
I don't think that Win98 supports secure overwrite, but I don't think that you even get the option to do it. There are reasons why individual files can't be securely deleted, but it would be very rare for them to apply to all files.
Are you trying to overwrite live files? (Don't have Show Non-Deleted Files checked)
Are the files greater than 0 bytes?
Are the files greater than 1k and not in the MFT?
Have the files been overwritten by another file?
-
Copying live files, or folders, will just copy what's live. No deleted files will be copied.
Deleted files that aren't overwritten aren't necessarily a problem. In normal use the deleted files on the disk will be eventually overwritten, and if they aren't super-sensitive then why worry whether they are overwritten or not? But perhaps as they were in a password protected part of the disk you may have your reasons. You could copy what you want to keep, format the disk, then run CC's wipe free space. That should clear the lot. Then copy your data back.
-
That's a relief. Ninety-thousand files is almost a disappointment, I have almost as many on my small drive - possibly that's the count of non-deleted files? I would put your recovered files somewhere very safe.
The non-deleted files should be at the top of the list, and you could recover just those. I don't know why the directory structure isn't being maintained, perhaps the data damage is too great for this.
If you're happy with your recovery then you won't need to try the normal scan with scan for non-deleted files checked. Presumably you're being forced to restore to a separate drive as the old drive is not functioning correctly? This is just what you should be doing.
-
When running Recuva against a disk with possible damage the first option to try is Scan for Non-Deleted Files, and not check deep Scan. Deep Scan, if it ever finishes, will give you a list of tens, or (on a 1tb drive) hundreds, of thousands of files which may be impossible to sort. Furthermore it will not show files that have not been deleted, which I guess is the opposite of what you want.
I realise the reluctance to cancel an application that has been running for several weeks. To be brutal I can't see that it's going anywhere. Even on a 1tb disk it should have finished its scan by now. On a 1tb drive there are 250,000 x 4k clusters, if my maths is correct. Even at a snail's pace of 10 secs a cluster it should be finished in under three days.
I should cancel the job, uncheck Deep Scan, check Scan for Non-Deleted Files, and try again.
(I'm not Piriform and this is not an 'official' answer.)
-
The View New Content list appears to be double spaced this morning - it was OK last night but then I have rebooted since. It's several days since the loss of service so the two aren't directly connected.
And all those funny icons at the end of each thread, are they for children?
And fast edit seems to have gone.
-
I think I see what you are doing now. Unfortunately I don't know why you are getting the Not Overwritten message, and I am not familiar with the interaction between CC and encrypted or password protected files. Perhaps someone who is will respond. Can you remove the password protection temporarily?
Have a look at the Info panel in Recuva for these files. Does it say that 'This file is overwritten with etc...'? If so you will not be able to overwrite them for reasons given in my previous post. The only flaw in this is that you should not be able to see the original thumbnail.
As Nergal says, recovering and securely deleting files is completely pointless. Recovery is a copy and paste operation, the files will remain in their original position and condition.
-
-
I want to erase them but they all say "not overwritten".
The common reasons for Recuva not overwriting files are that
The file is under 1k and is entirely within the MFT
The file is zero bytes long
The file has been overwritten by another live file
The file has been overwritten by another file which has itself been deleted
It would be unusual for these reasons to apply to all of your files. As I have never encrypted a file in my life I have no idea what Recuva does with them.
The files were originally on an encrypted drive. Unfortunately I dont remember whether I deleted them directly from the open encrypted drive or moved them to another location or the recycle bin before deleting.Where are these files? You must know where they are as you are trying to overwrite them. On the encrypted drive? Somewhere else?
They show up as recovered files: I want to overwrite them, but cannot.Recuva does not show any files as 'Recovered' (apart from when files are in the process of being recovered). I am not actually sure what is being attempted here.
-
You can't remove file names from the MFT with Recuva. If you're a CCleaner user, use the Wipe MFT option in Options/Settings. If not, it's as easy to download and use as any alternative software. Using a hex editor on the MFT would be suicide. For your pc, that is.
-
The only difference between Recuva and CC deletions is that CC offers a 'Normal' deletion, just the same as if you'd done a shift/del, or emptied the recycler. As Recuva is dealing with already deleted files, it only offers secure overwriting. Both CC and Recuva secure overwriting are identical.
Any data on a disk is recoverable, in as much as you can read it by some means or other. However a singe overwrite of any data will render it useless to anyone wanting to extract the original underlying data.
Neither Recuva, nor any known software, can 'undo' overwriting, whether the data has been overwritten by CC, Recuva, or by just writing a new file on top of the old.
If you wish to make the files that CC removes 'unrecoverable' then use secure deletion, one overwrite. However CC will do just what you ask it to. It will not overwrite, or even know about, any copies of the files left behind by edits, defrags, whatever Windows does, etc. That's when Recuva can help.
-
You can filter on any part of the file name or path by using the File/Path box on the top r/h. Recuva will still scan everything first though. You can sort the columns in the usual way by clicking on the column header.
-
Not that I'm aware of. However Recuva takes several hours on a deep scan on my 160 gb disk (with little data - does Recuva look at every sector whether its used or not? I guess it must do) so 2 tb could take well over 24 hrs to run. There may be problems building a huge dynamic list of files found.
I'm no raid expert but you said you ran Recuva on both disks. Were they not configured as one logical disk? Does not Recuva see them as one logical disk? If they were one, and you're scanning indivdually, then that's not logical, as someone else said.
-
Me too. My Western Digital WDC WD1600JS-75NCB3 SATA 3.5" shows up as IDE 2.5". I hope for Piriform's sake that there's s better way of finding this info than trawling through WD's incomprehensible coding.
-
Mr Don, this is CCleaner Discussion, not Opera Bug Reporting.
-
I would think that the software, and possibly our knowledge, has improved in the two years since this topic was started.
CC will delete all the files you've asked it to, in whatever delete mode you've chosen. Run Analyse and expand the list to see what's being deleted.
In normal mode CC will just delete those files as if you'd done a shift/del: in secure delete mode it will overwrite the filename and data.
There may be other deleted copies of the files on the disk created by edits etc. CC will not touch these and they may be recoverable.
When CC securely deletes a file it renames it to ZZZ.ZZZ and overwrites the data with zeroes.
In Recuva check the box at the top l/h of the list to select all files. You need to be in list view to do this.
-
There's quite a lot we don't know here.
You searched for CCleaner on your target image and had no hits? Is CC installed on the target image? Do you have a c:/program files/ccleaner folder?
You imply that there's no registry entry for individual CC check boxes until the boxes are checked (something I didn't know). Is there any registry entry at all for CC or Piriform? If CC is installed and if the user did run it, then maybe he or she used the default settings.
What makes you think that the user ran CC? (Computer evidence, we don't want to know about the user.) Without the above info we don't know if CC is installed on the target image. As an aside, even if it were not installed, the user could have run the portable version from a flash drive.
You can look at the default settings on your W2k box by right-clicking on the group headings (Internet Explorer, Windows Explorer etc) and selecting Restore Default State (after making a note of your choices so you can put them back again). The options shown will reflect the particular system build, what appears on your w2k box would not necessarily appear on other boxes.
-
If you enter 'link opens two browsers' in Google there are approx 1.4 m hits, so you are not alone. I've never experienced this myself. Does IE open if you click the link with FF running? There are some clues here http://www.snarfware.com/forum/viewtopic.php?p=1600 but there are many posts to plough through. Does this happen if you click the link in Recuva or other Piriform software?
As I don't know the cause I don't know whether it can be resolved in CC or whether it is a pc setup problem.
-
I would have thought that the actual Recuva run would be identical in both modes, with Advanced Mode you don't have to go through all that palava ticking boxes.
To get from Advanced to 'simple' mode click Options - Show Wizard. Two clicks, I know, but life isn't easy.
The failure to find freshly deleted files is entirely due to the mechanics of the file system.
-
Yep. They'll use different algorithms for determing the level of fragmentation. And my poor old memory is telling me that the Vista onwards defragger doesn't class file extents of 64mb as fragments, or stops combining when an extent reaches 64 mb, so you will see fewer fragments. Mind you 64 mb is a huge file to me.
-
Do you mean that Recuva said that no files were overwritten, or that they were overwritten but the file names were still there?
You will still see the same number of deleted files after securely overwriting as before. Secure overwrite is just that: there is no way that any data can be deleted or removed from a disk.
When overwriting a file with Recuva the file name is not overwritten. Either the file name remains in the MFT, or in the case of a deep scan (where the file name is not in the MFT) the file name seems in the main to be retained in the file header (I an not running a deep scan to test this).
You could try running Wipe Free Space with Wipe MFT ticked. This will overwrite all of your spare disk space and all free entries in the MFT. You will still see file names with Recuva, but they will be meaningless.
-
Go to Options/Actions, and check the first three boxes - the last three boxes are usually unchecked.
That's an awful lot of ignored files. Are you sure that you have nothing entered in the Filename/Path box?
If you're running the Wizard then run it, then press the Switch to Advanced Mode button. Then do the above.
-
Don, my point about the life of SSD's was to remove any worry about using Win 7, which is the first M/S op system to support SSD's, or at least to acknowledge their existence.
You said 'But when it gets heavily defragged over time, then it isn't reading that slows, but the SSD has to use numerous write cycles to accomplish the job, increasing the time it takes to do the job by a considerable amount more than is necessary. These extra write cycles due to fragmentation as it attempts to fill in chunks where it can find unused spaces causes more stress on the wear leveling mechanisms in the drive.'
That should be heavily fragged I guess. I believe that the additional write cycles are not caused by fragmentation but by the SSD's need to erase existing data before performing a write. When the SSD is new this is infrequent, but when the SSD has had some use this is far more likely. The smallest structure an SSD can erase is a complete block (usually 512 kb) even if it's only writing a single 4k page. This causes the entire 512 kb block to be read into cache, the block on SSD erased, the contents of cache modifed, and the entire block rewritten to SSD.
Win 7 implements TRIM, a command that (I'm not quite sure how it does what it does) effectively erases data blocks on SSD as they are deleted. New writes to the block no longer need to go through the extended read/delete/write process described above. TRIM sounds to me to be equivalent to an SSD defragger. One consequence of using TRIM which will be of interest to CC'ers is that once TRIMmed data on SSD can't be recovered, not ever, no arguing. (As we all know, as an aside, that secure delete is not conceptually possible on SSD's.)
-
I use DoPDF for producing brochures for a small group I'm involved with. I used to send them out in Word but that was probably useless. Just about everyone has a PDF reader and you can be more or less sure that the formatting will remain constant.
I use the option to include the font, just in case someone's pc isn't on the same wavelength as mine. This does increase the PDF size considerably, but can't be helped. Overall a great piece of freeware.
Recuva does not overwrite
in Recuva
Posted
This could be the answer. Highlight one of the files and have a look at the Info panel. Does it say 'This file is overwritten with ... (the large file name)'?