Where do deleted files go across the network
Results 1 to 6 of 6

Thread: Where do deleted files go across the network

  1. #1
    Registered User
    Join Date
    Jul 2001
    Posts
    3

    Where do deleted files go across the network

    This is a sad story. I have a client whose files were deleted from his computer
    on the LAN by another user by accident. How? I don't know.
    We checked both recycle bins and nothing was there.
    We used some forensic utilties to see if anything was there
    and there was nothing.
    Does anyone know where deleted files go over a LAN?
    Please advise.
    Thanks,
    Roland

  2. #2
    Registered User Gollo's Avatar
    Join Date
    Sep 2001
    Location
    Grand Rapids, Michigan US of A
    Posts
    2,383
    Into the great beyond. There is no "network recycle bin". The only way to try and salvage some of the files is running some type of recovery program on the physical system that had the files on it. Also tell the user to NOT use the computer until you try and salvage the files or he could overwrite the empty space with something else and they would be gone for good.

    Check out this tool. Mileage may vary.

    Also since the files are gone I don't really have to put a disclaimer so I'm not going to but just and FYI you are doing this at your own risk.
    "I feel like one of those mass murderers on death row. I never understood how the hell they got more chicks than I did. Now I know. They sold crap on eBay." -- Anonymous ebayer

    "I figured out what's wrong with life: it's other people." -- Dilbert

  3. #3
    Registered User
    Join Date
    Jul 2001
    Posts
    3
    Thanks for the help.



    Quote Originally Posted by Gollo
    Into the great beyond. There is no "network recycle bin". The only way to try and salvage some of the files is running some type of recovery program on the physical system that had the files on it. Also tell the user to NOT use the computer until you try and salvage the files or he could overwrite the empty space with something else and they would be gone for good.

    Check out this tool. Mileage may vary.

    Also since the files are gone I don't really have to put a disclaimer so I'm not going to but just and FYI you are doing this at your own risk.

  4. #4
    Registered User
    Join Date
    Aug 2002
    Location
    San Juan, PR
    Posts
    29
    I'm afraid that Gollo is right and your files stand a chance of having gone to the land where deleted files never return. You don't say wich operating system you are using but in the olden days there were utilities which you could use to restore the directory entry of the file name and hopefully the data portion of the file, provided the system hadn't reused the disk sector to write another file in. This is probably what Gollo's utility will attempt to do. Be careful you don't thrash data in any file residing in these "crosslinked" sector. Good luck!

  5. #5
    Registered User CeeBee's Avatar
    Join Date
    Nov 2002
    Location
    USA
    Posts
    2,480
    Hope it's a NT-based computer...
    Try the NT Undelete from Executive Software.
    You can get it here: http://www.executivesoftware.com/products/productsr.asp
    The one that I used some time ago was a 30-day trial and I had great success on a NT4 server.
    Protected by Glock. Don't mess with me!

  6. #6
    Registered User mongo69's Avatar
    Join Date
    Jul 2001
    Location
    Riverside Ca
    Posts
    93
    If this is a Novell network you are good to go. You should be able to find the files you are looking for with the use of the NetWare Utilities>Salvage files tools. I have no idea were you will find the files on a M$ Network. Oh one other place you will find the files for sure is YOUR BACK UP TAPES you do have a backup solution in place dont you??? what ever happened to permissions of directories?
    Growing up I've spent half of my money on Fast cars, fast women and Booze the other half I just wasted!

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •