file forensics: any way to recover moved file?


  1. Posts : 35
    Windows 10 Pro for Workstations
       #1

    file forensics: any way to recover moved file?


    Last night I moved--not copied--a file from my Dell Latitude Win 10 laptop's SSD to a thumb drive.

    To be precise, I think that I clicked on the file in Windows Explorer in the laptop, then cut it via ctrl-x, and then pasted it onto the flash drive with ctrl-v.

    I then safely ejected the thumb drive (I always do this), took it to my desktop, and to my horror found that the file was not on the thumb drive.

    Because I moved, not copied, the file, it was no longer in its original location on the laptop. It also is not in the laptop's Recycle Bin.

    My question: is the file still in some other location on the laptop, from which I can recover it?

    Or, when you move a file like this, does Windows immediately permanently delete it?

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Some more details follow, if you are interested.

    The thumb drive is a Visiontek PRO 256 GB USB 3 drive.

    I do NOT have this problem with this thumb drive on my Dell T1700 Win 7 workstation.

    However, this is the second Dell laptop that I have seen this drive have this same problem with. My original laptop, a Dell Precision Win 7 machine would sometimes do this; that one got stolen in Rotterdam a month ago. The current laptop is a Dell Latitude Win 10 box.

    For some reason, there is a bad interaction between Dell laptops and this particular thumb drive. I tested another, cheaper, thumb drive on the Dell laptop and it worked fine.
      My Computer


  2. Posts : 31,666
    10 Home x64 (22H2) (10 Pro on 2nd pc)
       #2

    @up2trix, if at all possible do not use the Dell laptop for now.

    When a file is deleted permanently the space is marked as being free, but it is not overwritten until Windows uses that space for another file. While the data still exists it may be possible to restore the file. See this thread for some suggestions.

    Software to bring back lost files


    There are many similar threads, so search the forums for 'restore deleted file' to find more suggestions...
    https://www.tenforums.com/gtsearch.p...&sa.x=0&sa.y=0

    The important thing is to use the laptop as little as possible (if at all) to reduce the risk of the data being overwritten. Especially, do NOT defragment the drive (either manually or by letting Windows automatically do so). See Step 6 in this tutorial to turn off scheduled defragmentation.

    Change Optimize Drives Schedule Settings in Windows 10
      My Computers


  3. Posts : 9,790
    Mac OS Catalina
       #3

    There are Linux tools that can help to recover the file.
      My Computer


  4. Posts : 14,020
    Win10 Pro and Home, Win11 Pro and Home, Win7, Linux Mint
       #4

    To add to what Bree said, historically the operating system only removes/changes the first character of the file name while marking the space on the drive as available. Defragging moves parts of a file closer to each other which will make that original space available. Using a software for recovering usually has better success if one remembers the actual file name and can enter that first character when prompted. Some programs follow a convention in their naming such as on cameras where image files may be named image_001.jpg [each brand may use their own scheme] so if a found file is named ?mage_001.jpg it only needs the i as the first character, replace the ?.
      My Computers


  5. Posts : 35
    Windows 10 Pro for Workstations
    Thread Starter
       #5

    Bree said:
    @up2trix, if at all possible do not use the Dell laptop for now.

    When a file is deleted permanently the space is marked as being free, but it is not overwritten until Windows uses that space for another file. While the data still exists it may be possible to restore the file. See this thread for some suggestions.

    Software to bring back lost files
    Bree, thanks much for your response.

    I ended up trying both Recuva as well as Puran File Recovery. No dice.

    I am going to have to recreate the file's contents...
      My Computer


  6. Posts : 2,935
    Windows 10 Home x64
       #6

    Try checking the thumbdrive too. Maybe it got deleted somehow or there are errors in filesystem (do a chkdsk).
      My Computer


  7. Posts : 668
    Win 10 pro
       #7

    up2trix said:
    Last night I moved--not copied--a file from my Dell Latitude Win 10 laptop's SSD to a thumb drive.

    To be precise, I think that I clicked on the file in Windows Explorer in the laptop, then cut it via ctrl-x, and then pasted it onto the flash drive with ctrl-v.

    I then safely ejected the thumb drive (I always do this), took it to my desktop, and to my horror found that the file was not on the thumb drive.

    Because I moved, not copied, the file, it was no longer in its original location on the laptop. It also is not in the laptop's Recycle Bin.

    My question: is the file still in some other location on the laptop, from which I can recover it?

    Or, when you move a file like this, does Windows immediately permanently delete it?

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Some more details follow, if you are interested.

    The thumb drive is a Visiontek PRO 256 GB USB 3 drive.

    I do NOT have this problem with this thumb drive on my Dell T1700 Win 7 workstation.

    However, this is the second Dell laptop that I have seen this drive have this same problem with. My original laptop, a Dell Precision Win 7 machine would sometimes do this; that one got stolen in Rotterdam a month ago. The current laptop is a Dell Latitude Win 10 box.

    For some reason, there is a bad interaction between Dell laptops and this particular thumb drive. I tested another, cheaper, thumb drive on the Dell laptop and it worked fine.
    I would have tried to restart the pc with the drive plugged in, sometimes the system (windows) is simply "not aware" that the file is there actually.
    I've also found a way to reproduce this behaviour at will, there are plenty of request for help of vanishing files in windows but it seems to be accepted as a something we have to live with

    see the link for further info:


    Fast Boot has the devil inside - Windows 10 Forums
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 15:20.
Find Us




Windows 10 Forums