Jump to content

Augeas

Moderators
  • Posts

    4,542
  • Joined

Posts posted by Augeas

  1. OK. Do you have 'Run Cleaner when the computer starts' in settings ticked? If so untick it. Reboot. Open CC and in Cleaner/Windows right-click Index.dat files, and select Analyse. What is shown?

     

    I seem to remember that once CC has been run in a session, and the index.dat files have been flagged for deletion at reboot, further analyses/runs will not show these files as being flagged, as they already are in that state. Having CC run at startup would possibly not show any Index.data files in subsequent analysis or runs. A reboot of course will delete and create the Index.data files ready for the next CC session.

     

    If my previous guess/theory is correct then including Index.dat files in cleaner.ini would be ineffective, but some confirmation is needed from a cleaner.ini user.

  2. Well, that's not really a representative test. Files that are created and then deleted quite often have their MFT entry and data overwritten immediately, what with the numerous background tasks Windows is performing for you. Also files deleted to the recycler are renamed by Windows, so you would not necessarily find them under their original names.

  3. I can see that some users would wish to overwrite free space and entries in the MFT from time to time, to ensure some perceived level of security. I just can't see why the order - MFT first or last - is important. But as Piriform changed the order, from MFT last to first, there must be some reason that I don't get.

     

    Having the ability to overwrite the MFT without overwriting free space shows that the process is not the same as that used by popular space overwriters, i.e. fill all the available free space so that the MFT can't expand, then create zero length files until the disk, and the MFT, is filled, then delete the lot. Without filling free space this method of clearing the MFT isn't available. I wonder if CC does a count of the total/used entries in the MFT, takes one from t'other, creates sufficient zero length files to fill the unused entries, then deletes them?

     

    Later edit: I thought that overwriting the MFT could be run independently, but from looking at the docs I'm not sure. Is it only valid if you have the overwrite free space option ticked as well? I guess it must be, as otherwise CC wouldn't know which drive to run Wipe MFT on.

  4. It would be better to install Recuva on a different drive/partition from the one that holds the deleted files, or install the portable version on a flash drive. This is because installing Recuva (or doing anything, even starting up your pc, on the drive/partition in question) will create temp and other files that will overwrite deleted files, reducing the chance of recovery. For that reason you should also recover any files to a different drive/partition/flash drive.

  5. It looks as if you have lost some system files on your G drive that prevents Windows from showing your data, thus Recuva needs to be run with the Scan for Non-Deleted Files option. I assume from this that you installed Recuva on the C drive.

     

    Where did you try to recover the files to? You should be recovering to a folder on the C drive. The path of ? is I believe because Recuva can't determine the original folder name, and is not to be worried about. You can sort folders out after you have recovered the files. Don't attempt to format the drive until you have given up hope of recovering anything.

  6. The Write Free Space function writes one pass of zeroes. The Secure Delete function applies to files, not to WFS (in any event all of the secure delete options end with a pass of zeroes). Incidentally it is not possible to delete a file on an SSD securely by overwriting, due to the wear levelling process.

     

    I understand that the wear levelling process on an SSD will distribute files across the drive until all space has been 'used' at least once. Then for subsequent writes the performance will drop as the SSD has to go into a read-erase-modify-write cycle, as it doesn't know which of the previously written blocks are still in use.

     

    Possibly Lawrence would like to use CC to set all unused blocks to ones to indicate that the blocks are free. It's also possible that as CC's WFS process writes a number of large files to the device until all used space is taken up, and then deletes them, this will have the same effect as normal file write and deletion. In other words even if CC could WFS with ones it would be not be the same to the SSD as an empty unwritten block, and have no advantage at all.

     

    It would be better to investigate a specialised TRIM utilty, if write performance is untenable. I believe that it's now incorporated in Win7. Even then TRIM will only operate on file deletions, not on file edit/saves.

     

    (The usual caveat, que sais-je?)

  7. DJ, your chances of recovering anything deleted a 'few months ago' are somewhere around zero. The constant activity of creating and deleting files and folders (as in your description above) will very likely have overwritten part if not all of your pics.

     

    If you deleted the original files via the recycler then they will be renamed in XP to Dcxx.ext and probably lose their original path too. The Piriform docs also will tell you that files recently created and deleted, as in your experiment, can be overwritten very quickly.

     

    You can recover files to any directory you please, bearing in mind that it is safer to recover to a different partition or drive.

  8. As for sigs, where else would it happen, Intel? Do you mean love, or death, and do you really need three 'it's? And Ident, shouldn't you be using an adverb instead of a preposition, or am I missing your irony? You certainly don't get this in Eastenders, so I've been told. I think my brain goes funny after midnight, it's all this d**mn curling.

  9. 1) Writes blocks of zeroes on all unallocated space on the disk. How thoroughly it does this - bad sectors, short blocks, etc. - I don't know, but I suspect it doesn't seek out every last byte.

    2) Down to opinion, but if you're getting rid of your pc and you're leaving the op sys on then it would be a basic level of protection in securing your old data. Other users will probably have a different view.

    3) Only when you're running it. It will make no difference afterwards.

  10. Normal and Deep Scan will be looking for deleted files - I think there's a flag in the file header that show's that it's deleted. As you aren't looking for deleted files then I should tick the Non-Deleted option as I indicated above. It will be fairly fast as well (with Normal Scan). You are not doing any harm to the files on the disk at the moment so you can try a few non-invasive attempts at recovery. Good luck, I'm off to bed.

  11. I don't think that you'll get universal sympathy here, ic. How could an application download only the language you want without knowing what language you want? Have 40+ versions?

     

    You have the tidy-up info (which I use). The files do not add up to a large amount of space: just a few k is less than peanuts and wouldn't even worry the XT in my garage if I dusted it off and plugged it in. Just add the includes and be done with it.

  12. There's never been any published details about how CC works, not that I've seen anyway. I would say that CC writes 4k (or whatever) blocks of zeroes as it goes along its merry way until all the free space is consumed. I don't know whether CC overwrites the MFT in the same way as other wipers or not. I get the impression that CC, by it's relatively small size, is not as sophisticated a free-space wiper as a specialist program such as Eraser.

     

    I don't know much about SSDs. A hd wouldn't write blocks sequentially, but in a first available space pattern. But as the entire disk is being filled then the order of writes doesn't really matter.

     

    There have been concerns raised elsewhere about the suitability of wiping free space on SSDs. You'd have to search Google for this.

  13. CC doesn't delete emails of any sort, either singly or the entire email folder - unless you've put the email folder in a temp directory, which you could say is pushing your luck a little.

     

    Do as little on your pc as possible, download Recuva onto a flash or different partition, and run from there. I can't remember all the email folder extensions, I think OE is .dbx, so that's what you'll be looking for in OE, others will use different extensions.

  14. There's always zamzar.com. I pushed the same Word document though doPDF and zamzar, and couldn't tell the difference between the two resultant files, except that doPDF was 19k and zamzar 67k. doPDF is the easier to use though, as it's on your pc.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.