Hallo and greetings,
I'm attempting to use Recuva to reveal and / or recover files which have been wiped or over-written.
I first mounted a TrueCrypt volume and wiped multiple unencrypted files using the PGP Wipe function.
I then used BCWipe to overwrite file slack and free space on the entire volume with 35 passes of Peter
Guttman's algorithm. I then opened Recuva to view what remained.
I'll attach a screenshot of what was displayed. Note the 'Comment' column. All files shown ( partial ) were
wiped at the same time.
Should I expect or assume that those files _could_ be recovered by those _other_ than the 3-letter folks ?
Or is it some type of misinterpretation(s) of data by Recuva ?
I'd really appreciate any and all comments / solutions or suggestions.
--
Amalthea