14-03-2005, 02:27 PM
|
#1 (permalink)
|
|
Alpha Geek
Join Date: Feb 2005
Location: Bombay
Posts: 879
|
Interesting !
Recently I recovered my data after shift deleting it .
After that I started thinking that how is it posible to recover the data from your hard disk even after you have deleted it and recovered your space.
For example,
I had deleted a folder containing many pictures in it and the memory space that the folder was using on my disk was about 65 MB .
After deleting it I noticed that I had recovered my space .
Now can anybody tell me that after the file is deleted the space has been recovered how do these "magical blessings" - softwares recover the data .
Please do enlighten me .
Thanks
__________________
From the body of one guilty deed a thousand ghostly fears and haunting thoughts proceed !
Visit (http://www.meebo.com)
|
|
|
|
Advertisements. Register and be a member of the community to get rid of them.
|
|
Advertisement
|
|
14-03-2005, 03:58 PM
|
#2 (permalink)
|
|
In The Zone
Join Date: Feb 2005
Posts: 278
|
When u delete data ,even though it looks like as if it's deleted ,it is not.Its becoz theoretically ,the data is deleted,physically it is not. i.e all pointers referencing to that file/folder are deleted.so even though ,the files r gone ,and the os adjusts the free size accordingly,the files physically still remain on the drive.these "magical blessings " recovery softwares as u call them ,analyze the hard disk -sector by sector looking for such files and recover them.so as long as the files are present on the hdd,they can be retrieved..also in case of files of huge sizes,it may not be possible to retrieved whole file,so only fragments are retreived.But if u delete a 100mb file a week or a month back,and u do a lot of data write to that disk,it is possible ur files were overwritten and it may not be possibe to retrieve them again.Finally the amount of data retrieved,depends on the quality of software u r using .
do hope this "enlightens" u
__________________
C2D@ 2.4Ghz,Asus P5B Dlx,2X1GB Kingston@677 Mhz,Viewsonic 20",Sparkle 7200 GS ,SB Live Audigy on Creative Inspire T7900,Leadtek WinFast XP TV Tuner,Storage :Seagate 320GB + WD My Notebook 1TB
|
|
|
14-03-2005, 10:31 PM
|
#3 (permalink)
|
|
Right Off the Assembly Line
Join Date: Mar 2005
Posts: 8
|
dunno abt him. but i'm enlightened
__________________
GHEUN TAAK
|
|
|
14-03-2005, 11:19 PM
|
#4 (permalink)
|
|
Technoholik !!
Join Date: Oct 2004
Location: Bangalore
Posts: 1,308
|
What blacklight has said is true and correct. The reference to the file is deleted when we actually permanently delete files by pressing Shift+DEL, and the actual file still remains on the hdd. So, we can recover them using good recovery softwares. But there is a catch in it. If u perform a big file write operation immediately after deleting a file chances are that it will get over-written, so no software will be able to actually recover the deleted file in this case.
__________________
[Desktop]
[CPU] Intel C2D 2.4Ghz || [RAM] 2GB DDR2 || [VDU] Samsung P2370MS 23”|| [HDD] 500GB Seagate 7200RPM SATA || [OS] Mac OS X (Hackintosh)
[Laptop]
Dell Studio 15 Full HD || [OS] Now with Mac OS X LION :-D
|
|
|
15-03-2005, 02:57 AM
|
#5 (permalink)
|
|
In The Zone
Join Date: Sep 2004
Location: .::OnLine::.
Posts: 388
|
ya ... the data is on the harddisk..it removes the pointer to its starting address...& add its size to free space...when more data is copied to HDD...old one is over-writed...
thats the truth ...
some soft recovers that pointers & addresses...this much only..
basics
__________________
www.techlads.com
Paarth.
|
|
|
15-03-2005, 10:07 AM
|
#6 (permalink)
|
|
Alpha Geek
Join Date: Sep 2004
Location: Old trafford
Posts: 860
|
after shift+del deleting a file, and doing defragmentation, will it be possible to recover the files ???
__________________
Incompatible message format
|
|
|
15-03-2005, 10:14 AM
|
#7 (permalink)
|
|
In The Zone
Join Date: Feb 2005
Posts: 278
|
@vysakh
Although i havnt tried ,but i guess recovery is possible becoz defragmentation only rearranges whatever data is present in the hard disk,it doesnt alter data.
__________________
C2D@ 2.4Ghz,Asus P5B Dlx,2X1GB Kingston@677 Mhz,Viewsonic 20",Sparkle 7200 GS ,SB Live Audigy on Creative Inspire T7900,Leadtek WinFast XP TV Tuner,Storage :Seagate 320GB + WD My Notebook 1TB
|
|
|
15-03-2005, 05:23 PM
|
#8 (permalink)
|
|
Wise Old Owl
Join Date: Oct 2004
Location: Parked diagonally in a parallel universe
Posts: 1,304
|
Well, defragmentation physically moves files so that the used ones are accessed faster, etc. so it DOES rearrange files, so it most probably will wipe out all your data, since Windows will report it as free space. The rule is that, if you have deleted something important, every extra second you have the computer even switched on reduces your chance of getting all your data back intact.
__________________
Face it, kid! Provoking a reaction isn't the same thing as saying something significant - Calvin
A64 3000+@2.4G/Asus A8V-DLX/1G DDR400/BBA X800 XT PE/320G HGST SATA2
Playing FEAR XP/LSW2
|
|
|
15-03-2005, 09:36 PM
|
#9 (permalink)
|
|
In The Zone
Join Date: Dec 2004
Location: Mumbai
Posts: 327
|
yup all said above is true but take care dat when u delete the data dont write in dat sector again written once is cool but if the sector is written many times the magical blessing will be of no use
__________________
If electricty comes from electrons, does morality come from morons?
Flying is simple. You just throw yourself at the ground and miss
|
|
|
16-03-2005, 09:32 AM
|
#10 (permalink)
|
|
In The Zone
Join Date: Feb 2005
Posts: 278
|
@enoonmai
hi ! are u sure defragmentation wipes free space? or it could simply rearrange deleted data to another part of the disk .
@hackexpert
Quote:
|
Originally Posted by hack expert
but take care dat when u delete the data dont write in dat sector again
|
easier said than done!actually the platters are spinning so fast that u cant even guess which sector is being written !
__________________
C2D@ 2.4Ghz,Asus P5B Dlx,2X1GB Kingston@677 Mhz,Viewsonic 20",Sparkle 7200 GS ,SB Live Audigy on Creative Inspire T7900,Leadtek WinFast XP TV Tuner,Storage :Seagate 320GB + WD My Notebook 1TB
|
|
|
16-03-2005, 08:11 PM
|
#11 (permalink)
|
|
Right Off the Assembly Line
Join Date: Jan 2005
Location: mangalore
Posts: 42
|
nothing after defrag....
__________________
Stay cool always!!!
|
|
|
17-03-2005, 12:07 AM
|
#12 (permalink)
|
|
In The Zone
Join Date: Nov 2004
Posts: 257
|
can anybody name the best recovery softwre,which u hav used urself
|
|
|
17-03-2005, 06:30 PM
|
#13 (permalink)
|
|
Wise Old Owl
Join Date: Oct 2004
Location: Parked diagonally in a parallel universe
Posts: 1,304
|
Quote:
|
Originally Posted by blacklight
hi ! are u sure defragmentation wipes free space? or it could simply rearrange deleted data to another part of the disk .
|
Well, think about it. When you shift-Del a file/folder, while its still there PHYSICALLY, its address is whats wiped from the file table, like you said. This is reported to Windows as free space that it can use for any applications that demand it. When you run a defrag, Windows still thinks that space is free for it to use, and while its "rearranging" data on the disk, it uses others sectors marked as free to temporarily hold data while it moves/juggles the chunks around. So its using disk space marked as free even during the process of defragging (which is why you cant defrag a critically-low disk space partition. There's got to be some free space on it for it to move the data about) So, if you do a defrag, you totally lose all your data since its probably totally overwritten by the time it completes. The best way to make sure you recover your data completely intact is to switch the computer off immediately. Pull the plug if you have to.  Even saving the settings at shutdown can overwrite it.
@krisjr: The best I've seen is PCIFR. Plus its free.  Download it here:
http://www.pcinspector.de/file_recovery/UK/welcome.htm
__________________
Face it, kid! Provoking a reaction isn't the same thing as saying something significant - Calvin
A64 3000+@2.4G/Asus A8V-DLX/1G DDR400/BBA X800 XT PE/320G HGST SATA2
Playing FEAR XP/LSW2
|
|
|
17-03-2005, 07:06 PM
|
#14 (permalink)
|
|
In The Zone
Join Date: May 2004
Location: 00-1D-7D-5A-34-2E
Posts: 375
|
Hi
I agree to what enoonmai posted. It finally depend supon the place where the data is stored.
Regards,
Ramprasad
|
|
|
23-03-2005, 02:13 PM
|
#15 (permalink)
|
|
Right Off the Assembly Line
Join Date: Mar 2005
Location: Indore
Posts: 3
|
when you delete a file you will seee that the file was
deleted by the computer but it is actually not erased
from the harddisk. it gets erased when some other
program requires that space. to delete the data
permanentaly you will have to use some softwares
like "system mechanic 5 professional"
|
|
|
23-03-2005, 11:00 PM
|
#16 (permalink)
|
|
Broken In
Join Date: Oct 2004
Location: Nagpur
Posts: 149
|
i will rate stellar phoenix as the best recovery software, it detects even your deleted partitions if you dont create new ones
__________________
\"I was born INTELLIGENT
But EDUCATION ruined me!!!!\"
AMD 64 3200+(Winchester), MSI RS480M2-IL, 512*2 DDR400 Hynix, Segate 80 GB SATA, LG E700SH, i-benz with Intex PS (400 W)
|
|
|
24-03-2005, 02:20 AM
|
#17 (permalink)
|
|
In The Zone
Join Date: Oct 2004
Location: Pune
Posts: 326
|
dats rite ...
stellar phoenix rocks @!@!@!
there is one version for FAT one for NTFS and one for BOTH ...
http://www.stellarinfo.com/download.htm
1 query tho .... y do the files which u deleted stop appearing after some time .. as i had a folder but i didnt recover it in time and it got lost ...
__________________
AMD Athlon 3500+ 939
Asus A8N-E
HDD: 860GB = 250 x2 + 160 x 2 + 40
Nvidia XFX 7600GT
2GB DDR RAM 400Mhz Transcend
17" LCD Viewsonic
ASUS Sata DVD writer
Logitech MX 518 + Steelpad Qck+
|
|
|
24-03-2005, 09:00 AM
|
#18 (permalink)
|
|
Wise Old Owl
Join Date: Oct 2004
Location: Parked diagonally in a parallel universe
Posts: 1,304
|
Read through the entire thread and you will understand why.  Basically, its very simple. Windows marks the space as free space once you permanently delete a file, even though its not been wiped from the disk. So, when another application requests free space for its usage, it may just end up using the space your file is currently residing on and it would end up being overwritten. Which is why the first rule in data recovery is to switch the computer off immediately once you accidentally delete a file. Every passing second and every action you do on the computer lessens your chance of getting your data back intact.
__________________
Face it, kid! Provoking a reaction isn't the same thing as saying something significant - Calvin
A64 3000+@2.4G/Asus A8V-DLX/1G DDR400/BBA X800 XT PE/320G HGST SATA2
Playing FEAR XP/LSW2
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
| Display Modes |
Linear Mode
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
|
|
|