Discussion Locked

Retrieve Deleted Files

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Can a file be retrieved when deleted from a Windows-based program that does not utilize the Recycle Bin? Is the file actually gone from the hard drive or is it still sitting in memory somewhere? And, if so, how can I retrieve the file?

5 replies

by vagab0nd

Yes, in most cases you can. To do this obtain utility like Symantec Undelete or something similar.
That is possible because when you delete the file it is not actually erased from hard drive. File dissappears completely only when other file is written over it.
That's why when you need to recover deleted files you should minimize all work with HDD to avoid overwritting.

Hope it helps.

by eujay

As long as nothing else is written to the drive then you should be able to get your file back.

The file is not deleted from the drive. All that happens is the first letter of the file name is taken off of the entry in the File Allocation Table.

Dos Undelete, Norton utilities, symantec and what have will allow you access to all entries in the FAT and will show a list of fuly recoverable files. All of these will have a filename with a "?" as the first character. It will also show a list of potentially recoverable files. These too will have a "?" at the beginning.

When you select a file to recover it will ask you for the first letter. It writes that letter back to the FAT and you have your file back.

If there been any disk writes since the deletion then the space where the file is at may have been used or partially used so you might get none or some of the file back.

You can get away with this in Windows/DOS but not in UNIX which is very unforgiving of deleted files but thats another story.

Hope this helps. email me if you have any questions

This discussion is closed to new replies.