Even when you empty the Recycle Bin, a file that you delete remains on your hard drive and isn’t truly destroy. This enables you to recover deleted files for yourself and other users.
If you’re not careful, even if you think you’ve deleted your private files, others will be able to recover them. This is a crucial issue to consider while getting rid of a computer or hard drive.
Each file and folder on your hard drive has a pointer that tells Windows where the file’s data begins and ends. Windows (and other operating systems) keep track of where files are on a hard drive through “pointers.”
Windows removes the pointer and marks the sectors containing the file’s data as accessible when you delete a file. The file is no longer visible to the file system, and the sectors on your hard drive that once held it are now view as free space.
The file is still recoverable, though, until Windows actually overwrites the sectors holding the contents of the file with new data. These deleted files can be find on a hard drive by a file recovery program, which can then recover them. The file recovery tool can only recover a portion of the data if the file has been partially overwrite.
Note that solid-state drives (SSDs) are an exception to this rule; the reason is explainer below.
It’s actually quite simple to understand why your computer doesn’t simply delete files when you delete them. The process of erasing a file’s reference and designating its available space is incredibly quick. The process of truly deleting a file by overwriting its data requires much more time. For instance, removing a 10 GB file would take almost no time at all. It can take several minutes to really delete the file’s contents, which is about how long it would take to write 10 gigabytes of data to your hard disk.
Windows and other operating systems don’t remove a file’s contents when it’s erase in order to speed up performance and reduce processing time. When a file is erased, you can use a “file-shredding” program to remove its contents; more details are provide in the next section.
None of this is relevant to solid state drives because they operate differently (SSDs). A TRIM-enabled SSD (all current SSDs support TRIM) removes erase files right away and prevents their recovery. In essence, information cannot be overwrite onto flash cells. Instea, it must be wipe before new information can be add. Your operating system erases files quickly to speed up write performance in the future. If it didn’t erase the file data immediately, the flash memory would first have to be erase before being write to in the future. Writing to an SSD would become slower as a result over time.
If you’ve accidentally deleted a file and need to get it back, there are some things you should bear in mind:
Although Windows doesn’t come with a built-in tool for this, there are several third-party apps available that can search your hard drive for deleted items. The creators of CCleaner also created Recuva, which is a good choice. You can search a hard disk for deleted files and recover them using Recuva and other tools.
You could be concerned that someone could recover your erased files if you have sensitive information or confidential papers on your computer, such as bank paperwork. You should use caution while selling or otherwise getting rid of a computer or hard disk.
By writing new data over the available space on your hard disk, you can use a tool to automatically wipe the vacant space, wiping out all deleted information. For instance, the Drive Wiper tool built into CCleaner can accomplish this.
You can destroy a file using a “file-shredding” program like Eraser to ensure that it cannot be recovered. When a file is delete or destroye. Its data is completely overwrite. Making it impossible for anybody else to recover it. This may not always safeguard you, though, as another deleted copy of the file may still be lingering on your hard drive if you made a copy of it and later deleted the original.
It’s important to keep in mind that this process takes longer than simply deleting a file, thus it’s not recommend to do it for every file; only confidential ones should require it.
A disk-wiping program, like DBAN (Darik’s Boot and Nuke), can be used to completely prevent someone from recovering any of your data. Burn DBAN to a CD, boot from it, and it will completely erase everything from your hard drive, including your operating system and all of your personal files, overwriting them with useless data. This is incredibly helpful for ensuring that all of your personal data is delete when getting rid of a computer.
Even while some people believe that files can still be recovere after being overwrite. the evidence suggests that a single wipe is sufficient.
You should now understand why deleted files can be recovered and when they can’t. Remember this when getting rid of a computer or hard drive – your confidential files may still be present on your hard drive if you haven’t properly erased them.
ManilaShaker is a tech media producing insightful and helpful content for our local and growing international audience. Our goal is to create a premier Philippine digital consumer electronics resource that provides the most objective reviews and comparisons globally.
