Page 2 of 2 FirstFirst 12
Results 11 to 16 of 16

Thread: Deleted files not really deleted, stored in "secret" folder...

  1. #11
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    I know that when a file is deleted... it isn't really deleted, rather the pointer to that file is just removed. In order to "delete" it, it must be written over several times.

    However, I was thinking...

    Does it work the same way when you cut a file and move it to a different filesystem/partition.

    Example:

    I "cut" a file from a NTFS partition on XP and paste to a ext3 partition via samba on a linux share.

    Does that delete the file, or just remove the pointer?
    Knowing the other way it works, I think* that it'll just remove the pointer and mark it as free space so the OS can write data to those sectors again.

    Should one just copy the and then use a utility to overwrite it several times?

    Another thing I was wondering... If you use an unerase program and find files that can be recovered, can you destroy those files from there?

    Better worded: Are there utilities that search the drive for recoverable files and give you the option to write over that space with random data several times so they would be no longer recoverable? Overwrite the free white space.

    Sorry for so many questions at once. I was just thinking about it before I passed out last night.

  2. #12
    Junior Member
    Join Date
    Mar 2003
    Posts
    29
    After reading this thread I researched it. I found it is not in I.E.6 or XP. Cannot remember at this point where I saw it, but I only take information from reliable sources, so rest assured XP and IE6 users don't worry.

  3. #13
    Senior Member
    Join Date
    Jan 2003
    Posts
    686
    Phish, I think it is the same for any file system, doing cuts/deletes/etc. I just had an A+ class a few months ago and when a file is deleted, as you said, the pointer is deleted. Which is the same as when you "cut" or "move" a file. It is first copied to the other drive (or network computer drive), then it is deleted from the local machine. It's kind of really copy/delete all put into one. It's really interesting if you break it down.

    I'm sorry I'm not the best at explaining it. But I would get ahold of an A+ certification book if you want the real/technical answer to the question
    [shadow]There is no right and wrong, only fun and boring...
    Formatting my server because someone hacked into it sounds pretty boring to me...
    That\'s why it\'s all about AntiOnline.com!
    [/shadow]

  4. #14
    Senior Member
    Join Date
    Feb 2003
    Location
    Memphis, TN
    Posts
    3,747
    Yeah what AciDriveHB is saying is correct. When a person deletes a file they deletes the pointer and the file will not show up under windows. However, The file can still be accesed but only through DOS. This is how a lot people who think that they have deleted everything get put in Jail. There are several programs out there that can recover deleted data, and can also delete data for you.

    ONe program for deleting the data on a HD goes over the disks as many times a s you specify making characters over all data on the first pass then doing the same process over again. which therefore makes the file unreadable.
    =

  5. #15
    Junior Member
    Join Date
    Mar 2003
    Posts
    13
    can i see tha files from linux?

  6. #16
    Senior Member
    Join Date
    Jan 2003
    Posts
    686
    Plus to add, I've seen the "recovery" programs for DOS and all the files actually have a ? character as the first character of their extention. Like if you deleted a word document (*.doc) using a recovery program it would have a file name of *.?oc.

    I just thought about it and thought I would throw that in also. Don't know how Linux does it though without having extentions. That would be interesting to figure out.
    [shadow]There is no right and wrong, only fun and boring...
    Formatting my server because someone hacked into it sounds pretty boring to me...
    That\'s why it\'s all about AntiOnline.com!
    [/shadow]

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •