In movies and criminal tv shows and series, when dealing with investigations in which they search the suspects' computers, sometimes we see that the computer specialist was able to restore deleted files. How is this possible ?
Lets say I save my word files and pictures for example in 'my documents' folder or on my desktop. When I delete them and empty my "trash" the files are deleted from 'my documents' or my desktop. And if I open my computer, then my 'C' folder/drive and 'my documents' from there, the files aren't there either.
The same with programs that are installed in the 'program files' folder. When I uninstall a program its files are deleted. Of course some programs leave a few files sometimes, but if you delete them they're supposed to be... well, deleted right ?
Is every file or program incoded in my comuter and saved in my 'windows' or 'system32' folders as well and THAT'S where computer experts find them after altering them to readable files ?
2007-08-23
20:13:38
·
10 answers
·
asked by
Anonymous
in
Computers & Internet
➔ Software
I recieved many great answers. Thank you all :) I do have one more question though regarding what many users answered. Can I write over files that weren't completely deleted without using special programs ?
2007-08-23
21:01:52 ·
update #1
I mean, how do I make my files are deleted ? Doesn't my comuter save files in random memory "cells" ? How do I make sure it writes over the files I want deleted without using special programs to do that for me ?
2007-08-23
21:05:04 ·
update #2
Even though you have deleted those files, their footprint is still on your hard drive, electronically and magnetically. And there's lot of recovery software that can pull the delete information off your hard drive and back to life.
That's why it's important to have a very good hard drive cleaning utility that will erase your deleted files and clean, or wipe, empty hard drive space (where information was once before) repeatedly, wiping and re-wiping the deleted items so it's next to impossible to retrieve again.
You can visit Download.com and look at their privacy software and cleaning programs. I grabbed the link for you. Look for any highly rated free programs: http://www.download.com/Privacy-Software/3150-2144_4-0.html?tag=dlbc
I personally enjoy using Tracks Erase Pro by Acesoft. It erases everything that can possibly be erased, safely, and allows you to shred and customize other places on your computer to permanently delete thngs. Check them out here: http://www.acesoft.net
I hope this helps.
2007-08-23 20:24:50
·
answer #1
·
answered by desertcities 7
·
1⤊
0⤋
First of all, when a file is deleted on a computer it may or may not still be on the hard drive. When files are written to the hard drive, the data is written there as well as a record where the file is located. Think of when you go to an office in a big building. You know the person's name but you have no idea what floor or office number, so you look it up in the building directory to find out. Computer files on the hard drive and how to find them is in a directory (Master File Table, for example). Now when you delete a file, it's taken out of the MFT, but data is still there with no pointers to it. So, it's there but not there. Sophiscated programs can scan the hard drive without using the MFT and find data that hasn't been overwriten by another program. See, when the pointers were deleted, the space where your file was is available, and the next saved data will probably overwrite (reuse) that space. Also, programs that create content (Word, picture progs, etc) leave tracks all over the place on your computer, that an expert can probably find.
2007-08-23 20:33:39
·
answer #2
·
answered by Froggie 2
·
1⤊
0⤋
Wow that's a very technical question.
What happens to the best of my knowledge. Is that when you delete a file. Is that the file is not really deleted. It just frees up that space for other files. So untill some other file overrights that space the file is still there. Thus unless you run a program that will wipe those areas of data yes the files are still there. You just cant see them.
2007-08-23 20:30:16
·
answer #3
·
answered by astronusa 4
·
1⤊
0⤋
when you delete a file, only the reference to the file is deleted, which means the computer is saying that this part of the hard disk (where the file sits) is ready to accept data. The previous data itself is not erased, to save processor time.
When you save another file, and the system saves it on that part of the hard disk, then your previous file will be permanently erased.
But as long as that part of the hard disk is not overwritten, experts will find a way to 'resurrect' it.
...
"write over the files without special program?"
hmm... many commercial security software could do that. but if you mean only windows apps, perhaps defragmenting the hard disk could do the trick, but you wouldn't know if it were successful
2007-08-23 20:28:18
·
answer #4
·
answered by bitoy 5
·
1⤊
0⤋
Files are truly gone from the hard disc, only when new data is written over the old. This eventually occurs, but until then, the data is recoverable.
So if you delete a file and walk away, the data is still on the disc even though your PC is "fooled" into "thinking" it is gone.
Re-formatting destroys everything on disc.
2007-08-23 20:29:03
·
answer #5
·
answered by ed 7
·
1⤊
0⤋
The deleted files aren't truly deleted unless you overwrite them b using a file shredding program
http://www.webopedia.com/DidYouKnow/Hardware_Software/2002/Erasing_Deleted_Files.asp
Webopedia: Are Deleted Files Completely Erased?
2007-08-23 20:23:05
·
answer #6
·
answered by Pyria 6
·
0⤊
0⤋
To add to the answerer above me^ , CCleaner has a "secure delete" function where you can place the file or folder and it gets over-written up to 7 times.
http://ccleaner.com/
2007-08-23 20:27:29
·
answer #7
·
answered by heebus_jeebus 7
·
1⤊
0⤋
i have no idea. i guess they use some kind of special computer program to restore files. basically, it's difficult to restore files when you permanently delete them.
2007-08-23 20:19:41
·
answer #8
·
answered by Anonymous
·
0⤊
0⤋
its very easy my dear... just use the "recover my files" software.. you can find it on www. phazeddl . com ..
2007-08-23 20:19:33
·
answer #9
·
answered by KeithRocks 2
·
0⤊
0⤋
um. i also have no idea. needo if ever someone gave you the best answer share it to us also. ;)
2007-08-23 20:47:19
·
answer #10
·
answered by Anonymous
·
1⤊
0⤋