Jump to content
CCleaner Community Forums

Augeas

Moderators
  • Content Count

    4,345
  • Joined

Everything posted by Augeas

  1. Do you mean a deep scan? If so then only the first extent would be recovered, and that can't be fixed, or guessed.
  2. SSD? If so they have gone forever.
  3. Augeas

    MPG Recovery

    Assuming that it's NTFS then files 4gb and larger have their cluster addresses and some other fields in the MFT set to zero on deletion by MTFS. The file is effectively unrecoverable. Files less than 4gb can also have cluster addresses set to zero if they are, or were, heavily fragmented.
  4. It's common in new installation to see very many deleted files from the install. Non-deleted files will have Non-Deleted (or whatever the description is) as their status. To stop showing non-deleted files uncheck the box in Advanced mode/Options/Actions. Free and Pro versions act the same.
  5. There is an option in Advanced Mode to select non-deleted (live) files. This is unchcked by default.
  6. I don't think he cares, as he asked the question nine months ago.
  7. Well, you could stop asking irrelevant questions under multiple userids.
  8. It appears that the deleted file is called sandvich.png somewhere in c:\users. The overwriting file is also called sandvich.png in c:\users. If you follow the path of the overwriting file you will find a live copy of sandvich.png. As the deleted file and the overwriting file are both the same image then when you recover the deleted file you will get the live file's contents. This has caused the confusion. I don't know if you want to get rid of sandvich, but if you do then delete the live copy. You will then be able to overwrite your deleted file. This may have been caused by sandvich being deleted and then recreated more or less immediately afterwards. The new allocation has used a different record in the Master File Table to write the file name etc, but the same clusters have been used to hold the new file. Thus the live file and the deleted file entries in the MFT point to the same clusters, and co-incidentally it is the same image as before.
  9. That could well be true, but as I have disabled recent files I don't see them. You could try disabling your recent files, as it is unlikely to appear in CC soon, if ever.
  10. The entry for the deleted file in the Master File Table contains the addresses of the clusters it used. If these clusters have been reused then another live file is using them - they have been overwritten. The cluster addresses in both the deleted file and the live file point to the same clusters If you recover an overwritten file you will be recovering (copying) what's in the live file. the data from the deleted file has gone forever. You cannot secure overwrite the deleted file's clusters because they are being used by the live file. Recuva is working fine, this is how NTFS works.
  11. I thought the idea of Veracrypt and its parent Truecrypt was that their files could not be identfied as such. What part of VC do you want to clean?
  12. Files with a name as you have described are found with a deep scan, which only retrieves the first fragment of a file. From Someone in the other thread.
  13. Recuva is working fine. Overwritten by another file means that the deleted file's clusters have been reused by another live file. You can 'recover' the original file as a recovery is simply copying what's in the file's clusters. What you will get however is the data from the overwriting file, the original data has gone forever. You cannot overwrite an overwritten file as you would be overwriting the data from the new file, which is not what you want to do.
  14. Perhaps, like many threads, we will never know.
  15. You didn't answer my implied question.
  16. I have to disagree Nukecad, shift/del is not, and has never been, a secure delete. The file's content is unchanged. It's true that small files can be, and probably are, held in their MFT record. In some cases, long file names etc, there is not enough room for even a small file and a separate cluster is used to hold the data. Why is the O/P seeing 00's? I guess he or she's using an SSD. In which case kiss goodbye to recovering any of that data.
  17. Unlimited? No, but the FBI has 36,000 employes and a $9.6 billion budget (and the NSA slightly more), which is a bit more than we can stretch to. You're quite free to try though.
  18. Outwit the FBI and NSA? Perhaps you need to speak to that nice Mr Putin. For those with rather less lofty aspirations, format the SSD then reinstall Windows, if you want to.
  19. If you have an SSD with TRIM enabled on both the device and the O/S - which I assume you have - then file recovery is with a few exceptions impossible. The TRIM'd data has gone forever and nothing that Recuva or anything else can do can retrieve it. Small files (under 700 bytes) will lbe stored in the MFT so they will be recoverable.
  20. Is the c drive an SSD? How were the files deleted, recycler or shift/del? What is in the header on the Info pane in Recuva? How large are the bad files?
  21. After an Analyse or Clean double click on the Internet Explorer items and a detailed list of the files cleaned will be shown. Don't ask me what relevance they have, use Google.
  22. Just run a scan, switch to Advanced Mode, and then type all or part of the file/folder name in the Filename or Path box.
  23. Augeas

    RECUVA

    There are no limits to the number of files recovered nor their size in Recuva free and professi9onal.
  24. That contravenes the licence agreement not to 'reverse engineer, disassemble, decompile, translate, reconstruct, transform or extract any Solution'. The link to the builds page has not been available through CC/Piriform's website for years (I've no idea why), so it can't be called official.
×
×
  • Create New...