Storage Solutions Delete data : Can't be recoverable

Status
Not open for further replies.
B

bajaj151

Contributor
My friend is selling his hard disk and he wants to delete everything on it.

Which software can delete data, which can't be recoverable ?
 
those software like eraser is a pain to use. each pass takes hours to complete. imagine 7 passes.
elder.gif
 
Go to folder option check to Show hidden files and folder and unchecked to "Hide protected system files (Recommended)" it ask something just say yes then you can see Recycle and Volume information Folder in every drive delete them and after that tell me which recover software can recover those files
123.gif
 
Maya2009 said:
Go to folder option check to Show hidden files and folder and unchecked to "Hide protected system files (Recommended)" it ask something just say yes then you can see Recycle and Volume information Folder in every drive delete them and after that tell me which recover software can recover those files
123.gif
Click to expand...

SO MANY;

All you have done here is delete the metadata of filesystem; for example from MFT (if NTFS) you have marked all the entries as deleted; nothing else. The data is still their all I need to do is read the delete marked MFT entry and I will reach to the cluster number where actual data is.

When not sure; google it.
<


Read this http://en.wikipedia.org/wiki/Shred_(Unix)

6pack said:
those software like eraser is a pain to use. each pass takes hours to complete. imagine 7 passes.
elder.gif
Click to expand...

I agree to that but considering that they actually will write on each sector of disk; it will surly take time.

Does this software writes only single time? I think its more than one pass (considering what they mentioned on their homepage). So if it is around 3; I think 2-3 passes should do it for OP.
 
Not so many and i sure cause when u delete them you're already disturbed your indexing or MFT it require heavy recovery stuff softwares like O&O n all. also it takes 10-12 hours to fixing those index and if you're able to recovered those files there's 40% chance that can run successfully
123.gif
 
#[member='Maya2009'] Buddy, even if the disk is completely formatted, its possible to recover the data. Deleting these files wont do the job.

#[member='bajaj151'] 1TB will take too much time for overwrite. Instead, would advice to instead fill the drive with movies to the brim. This might be a better idea.
 
I did it to my 160 gb drive using eraser.3 passes.took 8-10 hours i think.overwrite with random data is the only way for those paranoid about data protection!

Sent from my LG-P500 using Tapatalk 2 Beta-5
 
vivek.krishnan said:
#[member='Maya2009'] Buddy, even if the disk is completely formatted, its possible to recover the data. Deleting these files wont do the job.
Click to expand...
Yep it can be recovered using Stellar Phoenix NTFS deep scanning method ( i recovered many drives using this software) but it depends on the file size and age so try that you'll knw
<
 
Maya2009 said:
Not so many and i sure cause when u delete them you're already disturbed your indexing or MFT it require heavy recovery stuff softwares like O&O n all. also it takes 10-12 hours to fixing those index and if you're able to recovered those files there's 40% chance that can run successfully
123.gif
Click to expand...

You really do not know anything about MFT do you?

What indexing have to do with file deletion? MFT is distributed in records, at least one record exist for each file on a particular partition. When you delete a file from disk, all NTFS.sys does is to mark that mft record as deleted. It does not delete that record; just marking. So all you need to do is to go to that record and fetch the cluster number and read data from it.

The only thing which is preventing you to recover the data is; if that data is being overwritten. Which means NTFS has reused the same cluster for another file.

If you want to go in more technical details, (but still in brief)

than it all starts at Master boot record;

which can have four partition records;

now these partition record will give you address of first cluster on the start of partition, to be precise "partition boot record",

Once you reach at PBR; you'll get cluster number of MFT start.

In MFT 5th record is of root directory, i.e. '.', and from here you can take what ever direction you want.

Programming wise this is what your recovery software does majorly.
 
Status
Not open for further replies.
Top Bottom