Jump to content

Augeas

Moderators
  • Posts

    4,542
  • Joined

Posts posted by Augeas

  1. What's the point? Why not disable system restore? I don't think that Windows will allow the most recent restore point to be removed, unless you disable sys restore entirely.

     

    Thinking of deleting restore points, I read that the points are chained so that for any given point to restore successfully all subsequent points must be intact, which is why Windows doesn't provide a selective removal tool. Now I don't know why anyone would want to remove a restore point from the middle of the list, but if CC allows this then people will do it. Maybe CC's restore point removal should chop the selected restore point and all previous restore points.

  2. I don't think that the original post was about any missing free space, just that new files were being located in the already populated area of the disk. I guess, as Roger implies, for speed NTFS places the file as close to the current head position as possible, which is usually over other data. It would make sense for an area of free space to be found that is large enough to accept the new file size at the time of allocation, but I don't know enough of NTFS internals to say that this is true and don't really feel like looking it up at the moment.

     

    NTFS itself is claimed to reduce the need for defragging. My spouse's XP Home SP1 laptop of some year's antiquity always said that the disk didn't need defragging when I ran the analysis stage, and it has all manner of rubbish on it. But I eventually defragged, after a number of years had passed.

     

    PS Yes, Vista has an auto defragger, and I think it's on by default. It appears to schedule a low-priority defrag at every fourth pc boot. Seems a little like overkill, as I boot daily. Once a month should be plenty.

  3. I don't think that sys restore will restore the recycler, it restores system critical files, lots of dlls etc.

     

    If you use CC secure deletion then there's little hope of recovering your lost data.

     

    In any data recovery the first aim is to reduce the chance of overwriting the deleted data, which is of course now free space. That means doing the least amount of work on the pc. System restore - I imagine - would be very careful about restoring system files, so it probably backs up the existing files before restoring the old, and there are a lot of files in sys restore. Sys restore of course writes a whole lot more files when it does its daily checkpoint.

     

    I would first clear your internet temp files from your browser - don't use CC. The theory is that this might give some free space that will act as a buffer whenever any activity takes place on your pc, but I'm open to constructive crticism here.

     

    Secondly download Recuva to another pc or partition, and then to a flash drive. Plug in the flash, and run Recuva.exe from whatever folder it's in on the flash drive. You may find some of your data: recover to the flash drive.

     

    If you have no luck then try a Recuva deep scan. This will take longer and list thousands of files. Plough through them, and recover as you find anything to the flash drive. You can sort on name, path etc, and filter the results as well (you can do many filters on one scan). You may find copies of the data previously created when you edited, or moved data etc.

     

    Data deleted from the recycler may be renamed by Windows. I've not seen any consistency here but it's worth a try. In XP data is renamed to Dcnn.extension, and in Vista to $Innnn.extension and $Rnnnn.extension. Good luck.

  4. It's unlikely, and as you would possibly be running Fix all Issues it may well introduce more problems. CC reg clean removes unused and invalid registry entries and is not really a problem fixer.

     

    Your problem could be anything, maybe certain web pages try to run Java or some other code that your pc doesn't like. You need more diagnostics, there are others here more experienced in that than me.

  5. Ahh, got the little devil.

     

    If you open Real Player, Tools/Preferences, Automatic Services/Message Center, Configure Message Center, untick Check for New Messages, then that annoying realsched.exe will no longer appear in your startup. I think you have to be on Real 10 or later.

  6. Did you delete to the recycler? If so you will not get any space freed until the recycler is emptied. Program uninstall should have given you considerably more free space, if you ran the program's own uninstaller or uninstalled from CC.

     

    CC will remove program and system temp files, logs, etc. An analysis will show how much is about to be removed. CC won't clean up after program uninstalls, etc, except for what is held in those temporary folders.

     

    I would advise against running the registry clean section of CC until you have cleaned up the rest of your system, and then only clean the registry stuff you know isn't needed by your pc.

  7. Have you tried including the root directory in the Options/Include section of CC? Your post reads as if you have. If it is, then include it, and select Settings/Secure File Deletion (single pass). Then go back to the Ccleaner page and right click on Advanced/Custom Files and Folders, and select Analyse. This will show you what you are about to destroy forever. If all looks OK then right click again and select Clean Custom etc. Just be careful what you're zapping, it's your pc not mine.

     

    If it's not possible to do this then I'm sure someone will come along with some magic command line parameter.

  8. You need to get a grip on your pc John.

     

    Long ago I alrady tried the disconnected start-up without Zone, and it was fast...

     

    That's one area of attack for a start, as many have suggested. Either you want to run Zone Alarm - slowly - or you use another and speed up. I would say that the Windows firewall, which I assume you are already running, is fine for the average user. That's not an insult, I'm average and I run Win Firewall.

     

    Next sort those programs out. I don't know why Real Player (for instance) constantly reloads itself, but I have RP under the default settings and it sleeps quietly until I Start/Programs/Open it. Go to Tools/Preferences and try unticking everything under Automatic Services. Work at it, rebooting, until it learns to shut up.

     

    You can tell what the program names that are running are (except svchost). Google the exe names. Most are named after the program anyway, such as Realplay.exe and Realsched.exe. Track them down and shut them up. They may be using zero cpu but go to Task Manager, Processes, View, Columns and tick Memory and Page Faults and see what they are really using up.

     

    It's just a matter of slogging your way though the list. Or do a fresh Win install from your installation disc. That's the best way to clean up all the dross.

  9. Me too. Two, that is. As all your entries (but two) are disabled then you are not missing them running. I don't think it would make much difference if you deleted the entries, but it would make the list a lot cleaner. I don't know if you can get them back without reinstalling the relevant program, but if you're managing without them I wouldn't worry about that. Personally I prefer launching progs when needed, to having them autostarted, which is what the manufacturer wants you to do. Just about any of these programs can be started from the Start/Programs list.

     

    I would take the advice and stop Zone Alarm and see how you get on. I use the XP firewall set to no exceptions, and the routers firewall set to whatever its default is.

     

    How many processes do you have running? I have 23, but that is admittedly lean. You can Google the entries (except syshost) to find out where they came from. Go to your Services page (Ctl Panel etc) and set to manual those that you don't want. There will be some that obviously need stopping (from 3rd party applications) and other XP stuff that you don't need. As an example I have stopped and set to manual:

     

    Ati Hotkey Poller

    Automatic Updates – (Revert to Auto/Started when doing updates)

    Computer Browser – (Should not be running, change to Manual)

    Error reporting Services

    Help and Support

    Secondary Logon

    Server– (Should not be running, change to Manual)

    TCP/IP NetBios Helper

    Web Client – (Do not attempt to stop, will stop at next boot)

    Windows Audio

    Windows Time

    Windows Zero Configuration (required for wireless connection)

    Workstation

     

    There may well be others to stop, and stopping some of these may make no noticable difference.

     

    Many of these things apply to how you want to run your pc, so there is no set of rules that will apply to everyone. Do a little experimenting, a step at a time and rebooting, and see how you get on. I don't network devices, play games, download music stuff, or message anyone, so your needs will be different.

  10. Trying to find out who does what to the MFT in whatever version of NTFS makes my head hurt.

     

    At a guess, what's happening with Diskeeper (trying to keep what it's showing in line with what M/S says NTFS does) is that it's reporting on the current size usage of the MFT, as (in Juke Box) 1200 entries and 92% full. In XP 12.5% of the disk space is 'allocated' as the MFT zone for use by the MFT, which would be 1.2 gb. The initial allocation of the MFT however is far smaller than that, in this case just over 1 mb.

     

    In normal use the MFT will simply expand by allocating an additional contiguous area in the MFT zone. Although the MFT now has 3 fragments (first 16 records, first allocation, second allocation) it is not fragmented in the sense of having separate elements dispersed across the disk, and defragging would neither affect or enhance it.

     

    Perhaps Diskeeper is simply allocating and deleting a number of small files to expand the MFT to the parameter specified. This will just do exactly the same thing as NTFS would do in normal use. The only advantage I can see of preallocating MFT entries is if the disk is likely to be filled to capacity with large files, thus forcing files into the MFT zone and causing the MFT to fragment when it is subsequently extended.

     

    It's interesting that Diskeeper allows the MFT to be 'padded' to approx 25% of the volume size, which is twice the default MFT zone size.

     

    Now my head does hurt.

  11. NTFS manages the MFT, and the idea of defragging the internals or reducing the size is so scary that even M/S doesn't try to do it. Non-contiguous allocations of the MFT can be made contiguous but the size is not reduced nor are empty slots removed.

     

    In XP the MFT will only have non-contiguous allocations if either the disk is around 90% full or if a very large number of files are being created (in excess of millions). In Vista it's different as non-contiguous mft allocations are how it's designed.

     

    What O/S are you on? I would be interested to know how Diskeeper extends MFT capacity.

  12. You can easily filter Recuva's search results by entering something in the File/Pathname box, before or after you've done a scan. Items deleted from the recycler may be renamed by Windows to Dcxx in XP and $I or $R in Vista (as far as my old memory tells me).

  13. Example: What exactly does a program do, which is called:

     

    C:\ windows\IME\imjp8_1\IMJPMIG.exe/Spoil/RemAdvDef/MIgration32

     

    This is just an example from the list. I am not intersted in that particular program, I am interested in what it does, why it is obviously impossible to find out what it is, and would happen if I delete from the autostart list, where it is deactivated anyway permanently.....

    Here I am, one o'clock in the morning, and typing IMJPMIG.exe/Spoil/RemAdvDef/MIgration32 into Google, which brings up 247,000 hits, of which the first (of many) tells you what it is. All this stuff is easily found with just a little effort. I'm off to bed.

  14. I don't think that anyone really knows how it works. To clarify the nomenclature, CCleaner Secure Deletion overwrites individual files, CC Wipe Free Space wipes free space, and Secure Erase (Ryk's topic) is HDD controller microcode. The OCZ forum is discussing CC Wipe Free Space as far as I can see.

     

    The opinion from users is that CC's WFS fills the unused space on an hdd with largish files that either contain zeroes or are subsequently written with zeroes until the disk is full, then the files are deleted. I don't think the MFT is touched as nobody seems willing to say so (I don't use WFS). So it is effectively a full write and delete operation on all free space. I would guess that there is no special consideration in CC for SS devices, perhaps the speed up/down is due to the disk having a uniform cell deleted/not deleted pattern over the entire disk after a WFS instead of a mixture one would find in normal use.

  15. Hi Scott and Ryk,

     

    There's a lot of interesting stuff (OK, to some...) here, but I have to say that most of the stuff on the OCZ forum went over my head. The 'Run CC and go faster' theory seems to have produced mixed results: I have no idea why any SSD performance difference either way should occur, but I'm sure the Piriform developers are looking with interest, if not amusement.

     

    There seems some confusion on the OCZ forum about levels of free space wipe. As far as I know (and I am not in the pay or confidence of Piriform) wipe free space and secure delete are separate entities. Wipe free space uses one pass of zeroes (which of course under prml is coded when written on the disk - does ssd employ prml too?), and the secure delete settings don't apply whatever you choose.

     

    CC certainly doesn't use the Secure Erase microcode. The papers Ryk refers to seem to show that wiping data properly is more a result of doing the job properly in the first place (hence EDT's shredder) than hammering the disk with umpteen overwrites. But this is no answer to Scott's original post.

  16. Yes, CC does have a wipe free space option. I've never bothered to use it, it takes too long and I don't need it. Recuva can find and overwrite index.data files in a few seconds, and I occasionally do that. If you're worried about what's on your disk then use wipe free space or some other disk wiper, it's really up to you. CC is not primarily a security program, more of a keep your pc tidy program.

  17. CC does delete index.data files (perhaps not all you have on your pc, but those that are predominately in use). As these files are locked by the O/S then CC has to set these files to be deleted at boot time (as shown in the analysis window). Windows will detect that they are missing and recreate them immediately, but empty and of default small size.

     

    Owing to the file locking CC cannot securely overwrite the internal data, so deleted index.dat files can be found and recovered using Recuva or other software, and the contents read. If this worries you then you can use recuva to overwrite the deleted files from time to time.

  18. I guess that you're saying that you can't see any entry in the path column for c:\users\MyName\Documents? If so, I don't know why the folder name isn't showing. Recuva does show a lot of file names with c:\?\ as the folder name, so it seems that it sometimes can't interpret the path correctly.

     

    It may well be that the majority of the files are found by Recuva, but without a folder name it will be difficult to find them to get them all back.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.