Jump to content

Augeas

Moderators
  • Posts

    4,542
  • Joined

Posts posted by Augeas

  1. I wouldn't dream of using wfs unless I had a very good reason - and I haven't yet. I have old prefetch and user assist ticked with no problems. I don't have IIS ticked as I don't have any of these files.

  2. Well, as there is no "Delete files in new programs" switch to turn on (or off, for that matter) the files you want to keep must be being cleared by some other setting. You could, after you've installed some new software, open CC and right click on each setting in turn and select Analyse. You will then see which setting is removing the files you want to keep, or die of boredom. You could then disable that setting. Or just not run CC after an install until you're happy with it.

  3. Recuva secure deletion and CC wfs are not the same bowl of gruel. Without going too deep into it, CC's wfs writes blocks of data over the entire unused space on the drive, and Recuva sd overwrites individual files. I don't think that Recuva sd will overwrite any slack or free space where CC wfs should do so, or at least be better at it. CC wfs does not touch the file names in the MFT (but CC secure deletion does).

     

    All this is intuition and guesswork as I don't use either CC wfs or Eraser.

  4. Ha, you tarried too long at the pub, Dennis! I think that the file name is one of Piriform's own, and just means that there are some emails available to be recovered from whatever client you're using. I can't remember what clients are supported without looking at the docs again.

  5. There are some files that Recuva can't overwrite: those contained entirely in the MFT, those overwritten by subsequent file creation, etc. A specialist free space wiper (such as Eraser) may help if you want to overwrite those, you can't tweak CC's wfs to do this.

  6. From the Piriform docs:

     

    You cannot securely delete the ZIP file in Step 2 before you recover it. Recuva only creates the ZIP file when you choose to recover the emails.

     

    I guess that means that if you wanted to recover deleted emails then you would have to recover them all, and the zip file containing them would be created at the time if recovery. So the zip filemane that Recuva finds is a pseudo-name, and thus can't be securely deleted. It makes sense as there isn't a Outlook Express emails.zip file name in the MFT (not that I've ever seen), and the deleted emails presumably live in the mail client's data bases.

  7. I'm not quite sure of the difference between 'it just makes files unrecoverable' and secure deletion. In what way is unrecoverable less secure?

     

    To be pedantic the file data would still be recoverable, but as it has been overwritten all that will be returned is a string of zeroes. There's no way any application in the world can return what used to be written there.

     

    Recuva does have a secure delete option, run a scan, select your files, and right click to bring the option up. You even have a choice of overwrite methods should you be that way inclined.

  8. And also did you delete it to the recycler, and then empty the recycler? If so, Windows renames files sent to the recycler, so the file may not be found under its original name.

  9. Are you saying you cannot recover a file if you dont have Recuva opened and ready to go when you delete a file?

    Not at all. In the circumstances you describe, creating and then immediately deleting a file, it might be better not to open any applications before looking for the deleted file. So if you want to create a file, immediately delete it, and then look for it with Recuva it might help if you already have Recuva opened ready to run. In normal use you wouldn't have the luxury of opening Recuva before (presumably inadvertently) deleting a file, so this doesn't apply.

     

    Also I heard you should not do anything on the computer to cause the file to be overwritten, and I thought, if I tried recuva right away the file would not be overwritten?

    Yes, it is best to do as little as possible on your pc if you are trying to locate and recover a deleted file. Almost everything you do causes Windows to write some sort of file, so the less use the better.

     

    Just play with Recuva, you will soon find out what it can and can't do.

  10. Oddly enough files that have just been created and deleted are often the first to be overwritten. I should say that the entry in the MFT that points to the deleted file has been reused.

     

    If you kick off Recuva, or any application, there may well be entries created in the prefetch folder, log or error files, and other Windows stuff I can't think of at the moment. These will tend to use the most recently used available slot in the MFT, which held your poor defenceless deleted file. If you open Recuva and then do your file create/delete and a Recuva scan you should find your file.

  11. It depends what you mean by delete. Nothing can ever be deleted on a hd, just overwritten. You could select all files using the checkbox at the top l/h, then right click the mouse and select Secure Overwrite Checked Files. This will overwrite (i.e. 'delete') all files except those small enough to live entirely in the MFT. If you mean you want to get rid of the filenames then you can't. Read this http://forum.piriform.com/index.php?showtopic=14424&hl=

  12. There is no way you can achieve this. You may reduce it, or disguise it, but you can't eliminate it.

     

    Every file is given an entry in the MFT when it is created. When the file is deleted the entry is kept but flagged as deleted. The MFT never removes these entries. They are available for reuse, and are reused, whenever a new file is deleted. Recuva, in normal scan mode, is looking for those deleted entries in the MFT.

     

    You could create enough zero length files to overwrite all the 'spare' entries, and then set Recuva not to display zero-length files, and they would appear to be gone. I believe that this is what Eraser does (among many others). You could, as I do, manage your pc use so that you clean regularly and maintain a relatively small buffer of say three to four thousand deleted files, but this precludes extensive surfing or other heavy use.

     

    Or you could just live with it. Even if you managed, by some rare ocurrence (I think I once had a list of five entries after doing a Windows update) the first time you touch your pc the list will start growing again. It's just the way Windows, and NTFS, works.

  13. I've been using FF 3.0 for some time quite happily. In the last few months whenever I start up the FF browser window and click on Favourites, instead of getting the drop-down list a small box saying that this page has been bookmarked appears. Indeed my home page (a small holding page on my pc) has been bookmarked. I press esc and it goes away, and doesn't show itself again in that browser session. It's no great shakes, just an irritant. Any FF wiz have any clue? XPHSP3 if that's any help.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.