Augeas
-
Posts
4,542 -
Joined
Posts posted by Augeas
-
-
Whilst I try to advocate that anyone can do what they like to their own kit, I would suggest that you consider what you are doing. For a start, do you really want to securely delete very large files? What would be the risk if you just deleted them?
Secondly, the mechanics of a Gutmann overwrite are horrendous. I don't know whether CC bypasses the normal transaction logging used when updating data, but in any event you will be writing hundreds of gigs of data to overwrite one 5 gb file using the Gutmann method. This is just going to kill your hd, apart from your life.
I don't know what's causing your problem (or really understand it): I would go for a more simple approach to deletion.
-
This has been raised before, and I experienced it once on a flash drive, but there doesn't seem to be an absolute reason or cure. I don't think that this is a Recuva generated message, but a problem with trying to access the drive. If the problem persists after a correct dismount/reboot/mount then I'd run a chkdsk against it.
My odd problem just went away. That's the sort of problem I like.
-
Yes, that file should be part of the standard cleaning. In the meantime add it to your includes.
-
That was my first thought. But then wfs writes a file, or files, large enough to fill the volume, as I understand it. As far as I know there's no selective mechanism not to overwrite some clusters. If there were it wouldn't be a drive wipe. I'll go for it being a builder's estimate.
-
My modest advice is the same as in any problem, Google it and see what others have experienced. For instance;
'JKDefrag does not remove Restore Points, Windows does. As the disk fills up, like when defragmenting/moving a very large file (it is first copied to the new location and then remoed from the old), Windows frees up some space occupied by the Restore Points. If the free space on the drive falls below 200MB, System Restore is suspended, effectively removing ALL remaining Restore Points.'
and
'I have just had to reformat and re-install Vista Home Premium defragmenting the drive removes all restore points anyone know how to fix this. I also tried Diskeeper same result.'
and from Microsoft itself;
'When you run Disk Defragmenter on a volume with shadow copies activated, all or some of your shadow copies may be lost, starting with the oldest shadow copies.'
and
'The System Shadow Copy provider uses a copy-on-write mechanism that operates at a 16-KB block level. This is independent of the file system's cluster allocation unit size. If the file system's cluster size is smaller than 16 KB, the System Shadow Copy provider cannot easily determine that disk defragmentation I/O is different from typical write I/O, and performs a copy-on-write operation. This might cause the Shadow Copy storage area to grow very quickly. If the storage area reaches its user-defined limit, the oldest shadow copies are deleted first.'
and....
'If the file system's cluster size is 16 KB or larger, the provider can recognize disk defragmentation I/O and handle it correctly. Microsoft recommends that you use a 16-KB or larger cluster allocation unit size when you format the volume if you plan to defragment volumes that are used for shadow copies of shared folders.'
I don't know the specifics of your pc but this is something to get you started.
-
Wipe Entire Drive does not run on the system drive. What message you get I don't know as I'm not going to try it.
-
I did once, didn't use it much after the first few days.
-
I can't look at it in Explorer, nor does the index.dat file in there show when I search the c drive for index.dat files.
I look at it by copying the temp int files folder and contents to a flash drive, then opening it. After running CC the TIF is empty except for the Content.IE5 folder and the index.dat file.
Or, run Analyse on Temp Internet Files. Right click and select View detailed Results. Right click on any file such as C:\Documents and Settings\Me\Local Settings\Temporary Internet Files\Content.IE5\9X9XNG3B and select Open Containing Folder, go up one level to take you to Content.IE5, and there you are.
-
OK. Ran CC in full with browsers closed. Before the run there were zero bytes to delete in both History and Index files. Afetr the run the index file as above remained at 224 kb but was emptied. I don't know what CC setting clears this out.
-
No they're not. CC has never cleaned all index.dat files, so I'm concentrating on C:\Documents and Settings\Me\Local Settings\TIF\Content.IE5\Index.dat, the most used index file. This is 224 kb and unchanged after cleaning cookies and index.dat files with CC. Whether it will be cleaned when I run CC en masse is another matter. I'll let you know shortly.
-
I've just tried cleaning Index.dat files, then cleaning Cookies. There is no difference in the number, size or last accessed date of my index.dat files. I've no idea what's happening here. Nothing, I think.
-
Well, there's always CC's wipe free space/wipe MFT.
-
You can securely overwrite all the files that Recuva foundk, whether you are in normal or deep scan. I imagine that it would take some time.
Whether it would be what you want is another matter. After securely deleting everything Recuva will still show the same list of files, the file data however would be overwritten with zeroes.
If you're looking for particular files to overwrite then you can sort on name, date, path, extension etc. which will cut down the list to be overwritten.
-
I think that PW means that any old language dlls are not removed from the lang folder in subsequent installs, so obsolete entries can remain.
I have this folder in my include list, so I don't get this problem. Perhaps the lang files haven't changed much in recent years. I'm not sure whether it's worth writing code to wipe this folder on installs.
-
I believe that this is because the DAT files are no longer removed but, instead, vaccumed as other products do
Hmm, if so it is very subtle.
I reinstalled 3.0 and analysed Index.dat files, and it listed one, Doc and Set/Me/Local Set/Temp Int Files/Content.IE5/Index.dat. Using Recuva with show undeleted files, I found and copied this to a place of safety. I then reinstalled CC 3.1 and the Index.dat analysis returned nothing. I then 'cleaned' the Index.dat files, even though it said there was nothing to clean, and recopied the index.dat file. It was unchanged.
I know that this will be vacuumed up when I run clean temp int files, but at the moment I can not see the way to clean the index.dat files independently.
Oh yes, I analysed History and in both 3.0 and 3.1 the list of index.dat files was the same.
-
That only includes the history index.dat files. I have noticed that there are no files listed for deletion under Index.dat - I've no idea why.
-
This question has been asked - and answered - many times. So, once more..
I can find no evidence or claim from law authorities, disk manufacturers, data recovery establishments, etc. that any data can be recovered after being overwritten just once.
However if you phrased the question 'Can data from a file be reconstructed after it has been overwritten?' the answer changes to quite likely. Although the last version of the data is lost forever, there are almost certainly traces left in the pagefile, hiberfile, logfile, prefetch defrags, user defrags, edit copies, cluster tails, bad sectors, sector rewrites, etc. Some of this is easily obtainable, some more difficult. And of course your ISP has a log of every web page you've looked at which has to be kept for a year in the UK I think. By the way you can't securely overwrite data on an SSD.
-
That's how disk wiping works. CC will create one or more large files to fill the disk completely, then delete them. Did you let the wfs process complete? If you still have the large files in the root directory they can be deleted. They have some long gibberish (sorry, Piriform) file names.
-
Windows XP reserves 12.5% of the disk as the MFT Zone, space for the MFT to expand into (with larger disks this became wastefully large, so the process was changed in Vista). As the disk becomes full this reserved space can be used to hold files, which is probably why you didn't see it before you deleted the large ISO file.
I can't remember how much free space Defraggler recommends but I think it would be an advantage if you freed up the disk a little, to at least 50 gb.
Unfortunately I've not looked at boot-time defrag.
-
Ah, so wild guesses do work sometimes!
-
I should move, by copy/pasting if the folder isn't too large, the music folder to a completely different location, and rename it. Will that stop CC's recycler purge? I don't know, but it's a start. I would then delete your recycle bin if you can. If you're the only user then it will be the single folder called something like S-1-5-21-1993962763-162531612-1801674531-1004 in the Recycler folder. I don't know if simply right-clicking on this folder and selecting delete will work, as I'm not going to try it. If it does then Windows will generate another on the next bootup. First I would wait to see if anyone with experience in deleting the recycle bin comes along to confirm this.
-
The more I read about junction points the more I'm glad I don't have any.
From Wikipedia NTFS junction point:
Use NTFS ACLs to protect files and directories targeted by junction points from inadvertent deletion or other file system operations.
Never delete a junction point using Explorer, a del /s command, or other file system utilities that walk recursively into directory trees. These utilities will affect the target directory and all subdirectories. Instead, use the utilities described below to delete junction points.
If the junction point is sent to the Recycle Bin, the targeted files will look safe, but will be deleted when the Recycle Bin is emptied.
(In Vista/7) Deleting a junction point using Explorer is now safe.
Windows Vista supports a new symbolic link capability that replaces junction points.
And lots more. As you're on Win7 I guess that the Windows recycler deletion uses some more sophisticated way of treating junction points than CC.
When you say 'I don't know how to fix this.' do you mean recovering the lost files or CC's recycler deletion? You could try Recuva to recover the lost files, but after a defrag the chances are minimal that you will find anything useful. As for CC, just untick the Empty Recycler box and use Explorer instead. Who needs secure deletion anyway? As for using junction points, aaaarrrrgggghhh!
-
Yes, good to see some progress. I would still try the Windows repair and see if the recycler can be retained or reinstated. It would be far easier to use Windows to restore the files if you can. Good luck.
-
Sometimes the complete strangers that are trying to help you have some other aspect of their lives that drags them away from the screen for an hour or so. So please try not to rub them up the wrong way.
I assume that you can't see the recycler, or any files, using Explorer? So therefore you couldn't try to restore a deleted file from the recycler?
As I have no personal experience of this problem, and I suspect Alan doesn't either, we can only make suggestions how to fix it.
Can you access the recycler either with your other software or by using a command prompt window? Have you made a secure copy of the recycler? Rename it to avoid confusion.
Can you copy the recycler and its contents to another non-system drive that doesn't have a recycler already? Or has one that's not important, and can be overwritten? If you can, try to restore one or more files from the recycler. It may be that this will want to restore the files to the c drive, from whence they came. If so you know this will work and you can repair the c drive. If the repair has lost the recycler contents, restore all the files in this way.
I don't know whether a Windows reinstall/repair will leave the recycler alone. I've looked on Google but can't find the info.
That's about all I can think of at the moment, apart from investigating buying some repair software or sone data recovery assistance. I shan't post again until tomorrow morning.
Possible to schedule drive wiper like MFT deletion?
in CCleaner
Posted
I would have thought that any law firm that issues such a statement would be expected to show some kind of proof. CC is not a suitable application for this sort of work, in as much as it does not specify, certify or verify its deletion process. Anyway 'I'm securing your data with a freebie application downloaded from the internet' isn't really good practice, is it?