oops!I deleted something and it's not in the recycle bin

Discussion in 'Highly Technical' started by bwanaaa, Jan 30, 2013.

  1. bwanaaa

    bwanaaa Senior member

    Joined:
    Dec 26, 2002
    Messages:
    729
    Likes Received:
    0
    I navigated to my server's desktop from a client XP machine. There was a .txt file there that I thought I no longer needed. I gave myself admin rights to the server desktop. I deleted the file from within windows explorer on the client machine. I restored user privs to what they were before and logged off the client. Neither recycle bin was emptied. There are no 'safe erase' utilities running.

    Later, I decided I wanted to look at the text file but it wasn t in the recycle bin. Where do I look?

    This reminds me of the situation when you navigate to a NAS. Anything deleted from the NAS is gone forever (unless I use a forensic app)
     
  2. JustMe21

    JustMe21 Senior member

    Joined:
    Sep 8, 2011
    Messages:
    211
    Likes Received:
    0
    When you delete something from a network share, it is gone except under certain circumstances. If you have a Windows 2003 or newer server, you would also have to have the Volume Shadow Copy service configured and enabled. This would take scheduled snapshots and let you go back up to a certain number of days/weeks/months, depending on how much space you allocated for VSS. Then, you would also need to install the client on your Windows computer, then you can right-click the folder, go to Properties, click the Previous Versions tab, then restore the folder or open it and copy the file back.
     
  3. DominionSeraph

    DominionSeraph Diamond Member

    Joined:
    Jul 22, 2009
    Messages:
    8,275
    Likes Received:
    1
  4. imagoon

    imagoon Diamond Member

    Joined:
    Feb 19, 2003
    Messages:
    5,199
    Likes Received:
    0
    You go to your backups. VSS / Tape / Disk etc.
     
  5. HeXen

    HeXen Diamond Member

    Joined:
    Dec 13, 2009
    Messages:
    7,520
    Likes Received:
    1
    i second this. works really well
     
  6. bwanaaa

    bwanaaa Senior member

    Joined:
    Dec 26, 2002
    Messages:
    729
    Likes Received:
    0
    tnx fellas but recuva does not work on network shares.

    even mounting the share as a remote drive does not allow recuva to search it.
     
  7. sm625

    sm625 Diamond Member

    Joined:
    May 6, 2011
    Messages:
    7,702
    Likes Received:
    6
    Use a program like winhex. Open the network disk and do a text search for a word you know is in that deleted file, but is not a common word. When you find your magic word, you can copy the entire block of text and paste it into a new .txt file. I'm sure this has to be done on the host.
     
  8. imagoon

    imagoon Diamond Member

    Joined:
    Feb 19, 2003
    Messages:
    5,199
    Likes Received:
    0
    Being a server, the amount of time the deleted file sticks around is going to plummet as time goes on. Since it has been about 2 weeks, odds are high that it is gone.
     
  9. bwanaaa

    bwanaaa Senior member

    Joined:
    Dec 26, 2002
    Messages:
    729
    Likes Received:
    0
    really,? This is a nas which doesnt get a lot of writes- just occasionally. The nas is usually just for shared material.
     
  10. imagoon

    imagoon Diamond Member

    Joined:
    Feb 19, 2003
    Messages:
    5,199
    Likes Received:
    0
    Any writes lower the odds that a file can be recovered.

    Since you are 3-4 weeks out, I would expect the odds to be pretty diminished. A "few" writes add up. The NAS OS is typically writing logs, might be doing clean ups etc. When you lose something important, #2 thing is take the system offline. #1 is restore from your backups.
     
  11. mindless1

    mindless1 Platinum Member

    Joined:
    Aug 11, 2001
    Messages:
    2,902
    Likes Received:
    0
    Is it just me or is the highly technical subforum now populated with posts that don't belong there.
     
  12. Puppies04

    Puppies04 Diamond Member

    Joined:
    Apr 25, 2011
    Messages:
    5,897
    Likes Received:
    1
    You mean like your one....and this one.
     
  13. mindless1

    mindless1 Platinum Member

    Joined:
    Aug 11, 2001
    Messages:
    2,902
    Likes Received:
    0
    ^ posts topics