October 6th, 2003, 12:03 PM
Where do deleted files go across the network
This is a sad story. I have a client whose files were deleted from his computer
on the LAN by another user by accident. How? I don't know.
We checked both recycle bins and nothing was there.
We used some forensic utilties to see if anything was there
and there was nothing.
Does anyone know where deleted files go over a LAN?
October 6th, 2003, 12:28 PM
Into the great beyond. There is no "network recycle bin". The only way to try and salvage some of the files is running some type of recovery program on the physical system that had the files on it. Also tell the user to NOT use the computer until you try and salvage the files or he could overwrite the empty space with something else and they would be gone for good.
Check out this tool. Mileage may vary.
Also since the files are gone I don't really have to put a disclaimer so I'm not going to but just and FYI you are doing this at your own risk.
"I feel like one of those mass murderers on death row. I never understood how the hell they got more chicks than I did. Now I know. They sold crap on eBay." -- Anonymous ebayer
"I figured out what's wrong with life: it's other people." -- Dilbert
October 6th, 2003, 12:34 PM
Thanks for the help.
Originally Posted by Gollo
October 6th, 2003, 12:44 PM
I'm afraid that Gollo is right and your files stand a chance of having gone to the land where deleted files never return. You don't say wich operating system you are using but in the olden days there were utilities which you could use to restore the directory entry of the file name and hopefully the data portion of the file, provided the system hadn't reused the disk sector to write another file in. This is probably what Gollo's utility will attempt to do. Be careful you don't thrash data in any file residing in these "crosslinked" sector. Good luck!
October 7th, 2003, 08:00 AM
Hope it's a NT-based computer...
Try the NT Undelete from Executive Software.
You can get it here: http://www.executivesoftware.com/products/productsr.asp
The one that I used some time ago was a 30-day trial and I had great success on a NT4 server.
Protected by Glock. Don't mess with me!
October 7th, 2003, 10:05 AM
If this is a Novell network you are good to go. You should be able to find the files you are looking for with the use of the NetWare Utilities>Salvage files tools. I have no idea were you will find the files on a M$ Network. Oh one other place you will find the files for sure is YOUR BACK UP TAPES you do have a backup solution in place dont you??? what ever happened to permissions of directories?
Growing up I've spent half of my money on Fast cars, fast women and Booze the other half I just wasted!