Windows 10: file forensics: any way to recover moved file?


  1. Posts : 10
    windows 7 64 bit pro
       6 Days Ago #1

    file forensics: any way to recover moved file?


    Last night I moved--not copied--a file from my Dell Latitude Win 10 laptop's SSD to a thumb drive.

    To be precise, I think that I clicked on the file in Windows Explorer in the laptop, then cut it via ctrl-x, and then pasted it onto the flash drive with ctrl-v.

    I then safely ejected the thumb drive (I always do this), took it to my desktop, and to my horror found that the file was not on the thumb drive.

    Because I moved, not copied, the file, it was no longer in its original location on the laptop. It also is not in the laptop's Recycle Bin.

    My question: is the file still in some other location on the laptop, from which I can recover it?

    Or, when you move a file like this, does Windows immediately permanently delete it?

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Some more details follow, if you are interested.

    The thumb drive is a Visiontek PRO 256 GB USB 3 drive.

    I do NOT have this problem with this thumb drive on my Dell T1700 Win 7 workstation.

    However, this is the second Dell laptop that I have seen this drive have this same problem with. My original laptop, a Dell Precision Win 7 machine would sometimes do this; that one got stolen in Rotterdam a month ago. The current laptop is a Dell Latitude Win 10 box.

    For some reason, there is a bad interaction between Dell laptops and this particular thumb drive. I tested another, cheaper, thumb drive on the Dell laptop and it worked fine.
      My ComputerSystem Spec


  2. Posts : 7,588
    10 Home x64 (1803) (10 Pro on 2nd pc)
       6 Days Ago #2

    @up2trix, if at all possible do not use the Dell laptop for now.

    When a file is deleted permanently the space is marked as being free, but it is not overwritten until Windows uses that space for another file. While the data still exists it may be possible to restore the file. See this thread for some suggestions.

    Software to bring back lost files


    There are many similar threads, so search the forums for 'restore deleted file' to find more suggestions...
    https://www.tenforums.com/gtsearch.p...&sa.x=0&sa.y=0

    The important thing is to use the laptop as little as possible (if at all) to reduce the risk of the data being overwritten. Especially, do NOT defragment the drive (either manually or by letting Windows automatically do so). See Step 6 in this tutorial to turn off scheduled defragmentation.

    Change Optimize Drives Schedule Settings in Windows 10
      My ComputersSystem Spec


  3. Posts : 4,611
    Mac OS High Sierra 10.13.5
       6 Days Ago #3

    There are Linux tools that can help to recover the file.
      My ComputerSystem Spec


  4. Posts : 4,956
    Win10 Home and Pro, Win10 Insider Preview, WinXP Home Premium, Linux Mint
       6 Days Ago #4

    To add to what Bree said, historically the operating system only removes/changes the first character of the file name while marking the space on the drive as available. Defragging moves parts of a file closer to each other which will make that original space available. Using a software for recovering usually has better success if one remembers the actual file name and can enter that first character when prompted. Some programs follow a convention in their naming such as on cameras where image files may be named image_001.jpg [each brand may use their own scheme] so if a found file is named ?mage_001.jpg it only needs the i as the first character, replace the ?.
      My ComputerSystem Spec


  5. Posts : 10
    windows 7 64 bit pro
    Thread Starter
       5 Days Ago #5

    Bree said: View Post
    @up2trix, if at all possible do not use the Dell laptop for now.

    When a file is deleted permanently the space is marked as being free, but it is not overwritten until Windows uses that space for another file. While the data still exists it may be possible to restore the file. See this thread for some suggestions.

    Software to bring back lost files
    Bree, thanks much for your response.

    I ended up trying both Recuva as well as Puran File Recovery. No dice.

    I am going to have to recreate the file's contents...
      My ComputerSystem Spec

  6.    5 Days Ago #6

    Try checking the thumbdrive too. Maybe it got deleted somehow or there are errors in filesystem (do a chkdsk).
      My ComputerSystem Spec

  7.    5 Days Ago #7

    up2trix said: View Post
    Last night I moved--not copied--a file from my Dell Latitude Win 10 laptop's SSD to a thumb drive.

    To be precise, I think that I clicked on the file in Windows Explorer in the laptop, then cut it via ctrl-x, and then pasted it onto the flash drive with ctrl-v.

    I then safely ejected the thumb drive (I always do this), took it to my desktop, and to my horror found that the file was not on the thumb drive.

    Because I moved, not copied, the file, it was no longer in its original location on the laptop. It also is not in the laptop's Recycle Bin.

    My question: is the file still in some other location on the laptop, from which I can recover it?

    Or, when you move a file like this, does Windows immediately permanently delete it?

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Some more details follow, if you are interested.

    The thumb drive is a Visiontek PRO 256 GB USB 3 drive.

    I do NOT have this problem with this thumb drive on my Dell T1700 Win 7 workstation.

    However, this is the second Dell laptop that I have seen this drive have this same problem with. My original laptop, a Dell Precision Win 7 machine would sometimes do this; that one got stolen in Rotterdam a month ago. The current laptop is a Dell Latitude Win 10 box.

    For some reason, there is a bad interaction between Dell laptops and this particular thumb drive. I tested another, cheaper, thumb drive on the Dell laptop and it worked fine.
    I would have tried to restart the pc with the drive plugged in, sometimes the system (windows) is simply "not aware" that the file is there actually.
    I've also found a way to reproduce this behaviour at will, there are plenty of request for help of vanishing files in windows but it seems to be accepted as a something we have to live with

    see the link for further info:


    Fast Boot has the devil inside - Windows 10 Forums
      My ComputerSystem Spec


 

Related Threads
Hey guys, What's the best app I can use to recover a file from an SD card that was in a camera? I don't mind buying an app because this is really important for me! I really hope someone can help me because I'm desperate for help! Thank...
I moved my page file to a different drive but according to WinDirStat, there's still a pagefile.sys on the previous drive. It doesn't appear in Windows Explorer even with hidden files set to show. How can I get rid of it? Thanks.
I created a thread in General Support called Update Removed Windows 7 Games about a Windows Update that removed my Windows 7 games. The update also caused other problems which I specified in the thread, but that topic has now been moved to the...
I am posting this here under General Discussion since it is so spooky as to almost be a Twilight Zone thing. We have a 3-computer local/home network with all dynamic data stored on a network drive. We use File Explorer frequently. Six or...
I don't need to recover my entire backup. I seem to recall in Windows 7 that I could look at files saved using backup and restore. Then click on one to recover it. How do I do this in 10? Thanks

Tags for this Thread

Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 18:28.
Find Us