Hi Experts,
I just had tested a code which deleted an entire folder of mine!!
(C:\Application)
and created two files under that folder
Any way to recover?
IT AdministrationSystem UtilitiesDisaster RecoveryMicrosoft AccessWindows OS
Last Comment
bfuchs
8/22/2022 - Mon
Alan
Hi Ben,
I take it that the folder is not in the recycle bin?
Assuming not, then do you have 'Previous Versions' available on that drive? Right-click the parent folder (C:\) and select properties, then 'Previous Versions' tab. If you have that turned on, you can restore from one of those.
Alan.
Alan
Hi Ben,
If neither of the above are possible, then you are into more serious recovery options such as Easus File Recovery (there are a lot of other similar options out there - I just happen to have used this one, but I cannot say it is better than something I have not tried):
Do you have a 'proper' computer - in other words, one that you can remove the HDD from?
If so, I would probably shutdown, and remove the HDD, then image that drive from OUTSIDE of the OS installed thereon, before doing anything else - that way you have a backstop worst case image you can return to.
If you aren't familar with imaging, now is a good time to start :-)
If you click on properties, then 'previous versions', you should see all the dates / times you can choose from.
bfuchs
ASKER
There are no previous versions..
So next step is what? Try that software you posted?
Thanks,
Ben
Alan
Hi Ben,
I think so. As I mentioned above, I would recommend you image the HDD first. That way, whatever you try in terms of recovery, if it does not work and does more harm than good (very possible), you can always return to exactly where you are when the computer was shutdown.
Are you familar with Linux and dd? If so, use that, either by pulling the HDD or by booting a live distro on your machine (I usually go for Ubuntu 16.04.3 LTS as it works on almost any hardware) and dd the entire internal drive to an external drive. It will take a while - count on hours.
That way, whatever you try in terms of recovery, if it does not work and does more harm than good (very possible)
This is what I'm concerned at the moment..
Are you familar with Linux and dd?
Not at all..
So I guess the safest would be I should call an IT guy and stop using for the time being..?
Any other suggestions?
BTW, I downloaded that software mentioned, and its middle of the scanning process (hope that's OK).
Thanks,
Ben
Alan
Hi Ben,
If you mean the Easus file recovery software, then if it were me, I would not use the machine at all, I would shut it down, and image it before doing anything else.
The reason is that, when that folder was deleted, the OS marked the disk area where it was (maybe still is) as 'free' and available for use. Anything that is running will likely create temporary files, and those temporary files might get put into the space where the folder was, obliterating it and making it impossible to ever recover.
Alan.
bfuchs
ASKER
Hi,
Too late, by now the scanning is over..
(So far dont see my lost folder listed there..)
So you recommend I shut down?
Any damage by leaving it open? (will only use for checking up emails)
I would still shut down and make an image (I would be of the mindset - why not?)
Every second Windows is running, it is doing stuff in the background, and any of that stuff might over-write that folder even if it is still recoverable (which seems from what you say above).
If you can make an image before the deleted folder is damaged, you could still recover it separately from the image (via a VM for example) then copy back to your machine later, but only if it has not been damaged.
If the machine has still been running these last few hours, then the chances are diminishing fast. You would ideally have needed to shutdown immediately after checking the recycle bin and 'previous versions',
Alan.
Gustav Brock
I've had some success with this from the Crap Cleaner people:
Probably best to restore from backup (hoping you have one).
Alan.
bfuchs
ASKER
Hi Alan,
Is there any way to get at least a list of files that were there (just the file names)?
Should I refrain from adding new stuff to that folder while its not recovered, or it has nothing to do?
Any other suggestion before giving up on full recovery?
I take it that the folder is not in the recycle bin?
Assuming not, then do you have 'Previous Versions' available on that drive? Right-click the parent folder (C:\) and select properties, then 'Previous Versions' tab. If you have that turned on, you can restore from one of those.
Alan.