Jump to content

Augeas

Moderators
  • Posts

    4,542
  • Joined

Posts posted by Augeas

  1. Leter edit: After reading Alan's post and re-reading Maurice's I don't know whether the recycler has been deleted or not. If not I would back them up as Alan suggested, then try to use Windows to restore the deleted items to their original folders. Then back them up with the data structure intact.

     

    This is what I originally posted in the belief that M was looking at deleted files:

     

    No, Recuva will create a path to the recycler, not to where they were before they were deleted.

     

    I don't think that copying them back to the recycler would work. In XP there is an index file in the recycler that keeps tabs on all the entries, and you won't be able to update that. In Vista/etc there is no index file but two entries for each deleted file, so you will be missing those as well. In any case I think you will have lost the original path info, so even if you could copy them to the recycler, and Windows updates the index file or second file for you, if you then try to restore them they will be restored to where you put the Recuva recoveries, if you see what I mean.

  2. You don't have to take any of my advice, but you don't seem to have read or understood my previous post: it answers most of your questions, including how to show all of Recuva's ignored files.

     

    Your file could quite easily have been overwritten in hours, let alone weeks. There's no guarantee that any file can be recovered.

     

    Windows XP, Vista and 7 rename files sent to the recycler, but should leave the correct extension. Have you looked for Dcxxx.rtf or $Rxxx.rtf? Those xxx's are some intermediate chars, don't take them literally. You could sort the Path column and look for entries in blah/blah/recycler.

  3. In Advanced mode, check Restore Folder Structure in Options/Actions. This will recreate the original file structure within the folder you're restoring to. Also a right click in the left-hand panel, select View Mode/Tree View will show you the folder structure before restoration.

     

    I don't think you have the slightest chance of recovering the Windows O/S, but after you've done all your recovering you could give it a try, you have nothing to lose.

  4. When running Rucuva I would always cancel stage 2. This seems to make little if any difference (and no difference to the list of files displayed) and cuts down the runtime considerably.

     

    If you use the Wizard then I would press the Switch to Advanced Mode button at the top r/h. You will then have a File/Path box displayed (top r/h). Clear this box to disply all files Recuva has found. I would recommend that you use Advanced mode for your recovery.

     

    Recuva scans the entire contents of the MFT (in normal scan) and the disk (in deep scan). There is no way to do a selective scan. However you can filter your results by entering any file name or path or part thereof in the File/Path box. Just clear the box and the original list will reappear. You can also sort the file list by name, size, path, and date by clicking on the column headers.

     

    In Options/Actions you can check the top three boxes which will show all files. You can't recover zero length files, so you it's up to you whether you include them.

  5. Do you mean purchased or bought the support package? CC is free, official support isn't.

     

    Why don't you search your disk on either date (today. or whenever you downloaded it) or name (ccsetup). The exe downloads to My Documents by default. Or download again without paying for anything from piriform.com or filehippo. Oh yes, make a note of where you put it.

  6. As we don't know what state the drives are in then we can only answer in general terms. Recuva will find deleted files in both normal and deep scan, but the condition of these files (whether the original data can be recovered) is unkmown.

     

    Are any files visible, can you open the drive successfully? Are the disks setup as RAID?

     

    Have you tried Recuva in normal scan? Have you tried Recuva in normal scan with Dcan for non-deleted files checked? Both of these will be relatively fast.

     

    The problem with very large drives is that scanning them, sorting the results and recovering data is a very long process involving hundreds of thousands of files. It's just how it is,

  7. Whenever you think you need to, if you're selling or otherwise getting rid of your pc or drives, or if you have any deleted files you'd rather not let any other user see. I've never run it, apart from playing with it on a small flash drive. And if you must, then one pass overwrite is quite sufficient.

  8. There is no way to save the list of files produced by Recuva, either in normal or deep scan.

     

    If you have done a deep scan using the Wizard then switch to Advanced mode. You will then see in the box at the top right-hand Pictures (or Music, etc depending on what option you chose in the wizard). You can then select all the files displayed by checking the top l/h box and recover them to disk one. Then press the red X in the top r/h box, and choose Video from the drop-down list. Check and recover these to disk two. Continue with other selections as you wish.

     

    There is no need to repeat the deep scan between recovering pictures, video, etc as the scan will have already selected all the files from the disk. It's just the filters that enable you to see pics only etc.

  9. There are thousands of hits for less space after defrag on Google. From looking at a few the cause seems to be Vista/7's shadow copies/sys restore/indexing/etc. The solution seems to be to go to Disk Cleanup and clear out what you don't want.

  10. Unfortunately it is too late. I wasn't aware that you had recovered (i.e. copied your recovered content) back onto the problem drive. This will have overwritten just about all the old content, and a further recovery to restore the directory structure isn't possible. I don't know any way in which the original directory information would have been kept.

     

    If you had recovered to another disk and left the original disk untouched then you could have run the recovery again. I guess all you have left now is a big project.

  11. You can repeat a recovery until you're blue in the face, unless you're recovering to the same device. So if you haven't written much, if anything, to the music file disk then just redo the recovery. I would hang on to the previous recovery if you can until you are happy with your results, just in case.

  12. I don't see why not. Why don't you just try it? I believe that the Drive Wiper formats the drive then wipes the free space: I don't know whether it remembers the format type or just goes for NTFS. Let us know.

  13. When a file is deleted its record in the MFT is flagged as deleted, and the file won't be shown or be accessible in Explorer or other applications. The file data, name, length, where it is on disk, etc. remains in the MFT record. The disk clusters the file occupied are flagged as free space in the cluster map. These clusters can be used by new file allocations.

     

    Recuva in normal mode reads the deleted records from the MFT and can retrieve the clusters the record originally pointed to on the disk. However what the data actually is in these clusters can't be guaranteed. Sometimes it's the deleted file, sometimes not. Sometimes it's a live file that's using the deleted file's clusters.

     

    Records in the MFT for deleted files are never removed, just flagged as deleted. They can be used for subsequent file allocations, when of course all the file data is updated.

     

    A deep scan will look at every free cluster on the disk and try to determine whether it holds data in a recognisable format. If so it will go in the list and can be recovered. I guess this is more 'accurate' than the normal scan, as the actual data is being interrogated. Deep scan can be handy at times but can take forever to run.

     

    I don't know much about encryption so I can't comment there.

  14. I guess it's due to the fact that Recuva is looking at free space on the disk that is available for any other file to use, and in some cases several files to use, be deleted and used again. So whilst in normal scan the file info is taken from the MFT record, the cluster(s) it's pointing to may well have been overwritten one or more times. In your example you would be recovering 10 mb of data, but the first 156k has been overwritten by a jpg, which is what you're seeing.

  15. To quote Raxco, makers of PerfectDisk (amongst other things) 'One would think that with multi-gigabyte drives finding contiguous free space would not be a problem. The MicroSoft file allocation algorithm is proprietary, but simple testing demonstrates that extreme file fragmentation can occur even when there is ample contiguous free space on the disk.'

     

    If the disk is only used for backups then fragmentation isn't really a problem, unless you're really tight for space. The additional time taken to read a backup when you need to is insignificant.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.