Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.os.windows-10 > #179730

Re: How to recover deleted network files

Show all headers | View raw

On 23/10/2024 20:40, Paul wrote:
> On Wed, 10/23/2024 10:31 AM, Fokke Nauta wrote:
>> Hi all,
>>
>> We have 4 W10 pc's and 2 W11 laptops. We also have a W10 server with all of our files. We all work through the network to the server.
>> When I'm working on my pc and delete a file on the server, it won't show up in my recycle bin, and not in the recycle bin on the server.
>> Is there an application which should make it possible to recover such a deleted network file?
>>
>> Thanks for your answers.
>>
>> With regards,
>> Fokke Nauta
> 
> You need an "undelete" run locally on the server.
> 
> https://www.ccleaner.com/recuva
> 
> If the server is Windows based, that's going to be easier to do.
> A NAS for example, check the manual for suggestions.
> 
> How deleting works, is a single byte is flipped on a $MFT entry.
> If the $MFT entry is "re-used" by the file system, all chance of
> recovery is lost (then you are in PhotoRec territory, with poor
> odds of success).
> 
> The green button shown in the interface, is a measure of how
> many "clusters" for the file, are still present and have not
> been stomped upon. A green color is "perfection". Asking
> to recover the file, the file is 100% good.
> 
> As the disk drive receives writes (like a C: drive is pretty active
> because of system activity), this stomps on your materials.
> Gradually, a recoverable file, the indicator turns red, and the
> thing is "mostly shredded". If the file name is not seen at all,
> the $MFT entry (1KB long) has been overwritten and your file is
> truly gone.
> 
> While PhotoRec can scan for chunks of file, it helps if
> the drive was defragmented just before the incident. SSD drives
> are fragmented pretty bad (we only Trim them, not defrag them),
> so a PhotoRec scan is unlikely to be able to join all the pieces
> in a satisfactory way. Normally, a server would use a rotating drive,
> as you can get a bigger drive for the same money, if it is a
> rotating drive.
> 
> Normally the advice is to:
> 
> 1) Stop using the file system immediately.
> 2) Use Recuva to identify candidates. Slave up
>     the drive to some machine which is not going to
>     try to write it. If the file to be recovered is large,
>     write it to any drive which is NOT the drive you are
>     recovering from. Don't be stupid about selecting a destination.
>     If the lost file is on drive H:\ then don't "save as" from
>     Recuva to drive H:\ . Save to Drive D: instead.
> 
> The longer the drive has been running, since the incident,
> the more likely the indicator has turned red.
> 
>    Paul

Thanks, Paul.

I installed Recuva. It will work fine.

Fokke

Back to alt.comp.os.windows-10 | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

How to recover deleted network files Fokke Nauta <usenet@solfon.nl> - 2024-10-23 16:31 +0200
  Re: How to recover deleted network files Paul <nospam@needed.invalid> - 2024-10-23 14:40 -0400
    Re: How to recover deleted network files Fokke Nauta <fnauta@solfon.nl> - 2024-11-06 14:34 +0100
  Re: How to recover deleted network files Philip Herlihy <PhillipHerlihy@SlashDevNull.invalid> - 2024-10-24 12:41 +0100
    Re: How to recover deleted network files Fokke Nauta <usenet@solfon.nl> - 2024-10-24 19:04 +0200
      Re: How to recover deleted network files Char Jackson <none@none.invalid> - 2024-10-24 12:33 -0500
        Re: How to recover deleted network files Fokke Nauta <usenet@solfon.nl> - 2024-10-24 19:44 +0200
      Re: How to recover deleted network files Philip Herlihy <PhillipHerlihy@SlashDevNull.invalid> - 2024-10-25 18:24 +0100

csiph-web