Re: Deleted Files

Bruce Carter (bcarter@mentor.idbsu.edu)
Thu, 28 Mar 1996 11:06:18 EST

At 10:46 PM 3/27/96, Roger Martin wrote:
>A co-worked has asked for help with the following question. She had
>several files on an external hard drive connected to her Mac IIcx.
>Someone or somehow they have been deleted. She has used Norton
>Utilities to try and undelete them. This did not work. She said
>that Norton does not even pick up that there are deleted files.
>
>Her question - what is a good program to use to recover these files
>AND is it possible to determine what program was used to delete them
>and when they were deleted. (I guess that's three question :-) ).

I'm assuming she checked the trash can for the files.

If Norton's couldn't find them, it's unlikely that anything else will.
Central Point had a nice set of tools, but they were bought up and pretty
much merged into Norton's. It's the main tool for this sort of thing. For
it to find no trace of the files, the space that was allocated to them had
to be written over. That can easily happen in a variety of normal ways,
but it can also be done intentionally so that files cannot be recovered,
usually for security reasons.

There is no way that I am aware of to tell how a file was deleted without
some kind of security program running that tracks operations.

There is no way that I am aware of to tell when a file was deleted without
some kind of security program running that tracks operations.

--
Bruce Carter, Instructional Software Designer     (208)385-1851@voice
Boise State University, Boise, ID  83725          (208)385-1856@fax
http://mentor.idbsu.edu/BruceCarter/home.html     bcarter@mentor.idbsu.edu