computerguy Posted October 28, 2008 Share Posted October 28, 2008 Hi, I'm wondering if there is a way to determine the date/time of deletion of a file using Recuva. I've checked in the places I think it would be, but maybe I'm just missing it, or it's simply not there. Can someone tell me if this is possible? Regards, Dusty Link to comment Share on other sites More sharing options...
Moderators Augeas Posted October 28, 2008 Moderators Share Posted October 28, 2008 I just picked an innocent file with a date modified of 12/05/08 (I didn't look at its properties at all) and shift/del'd it. In Recuva/Info the date and time last accessed is today/now. So I guess a deletion acts as an access. I haven't tried all the other delete permutations but I should also guess that they count as an access too. PS File recovered fine, ta. Link to comment Share on other sites More sharing options...
computerguy Posted October 28, 2008 Author Share Posted October 28, 2008 Thanks... that's what I was hoping... but was the "last accessed" time the time of the recover, or the time of when you deleted it? Thanks again! Link to comment Share on other sites More sharing options...
Moderators Augeas Posted October 28, 2008 Moderators Share Posted October 28, 2008 Deleted, as I looked at it in its deleted state using Recuva. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now