Locked Picture Recovery after deleting them by accident

[Vlad.Tepes]

Hello guys, I have a question if you can help me. I have scanned with Disk Drill and EasUS Recovery my recyle bin and my entire D: partition for 6 pictures that I've deleted by accident 2 weeks ago. The strage thing is that I mage to recover pictures from 6 months ago and 3 months and so on, but I cannot mange to find the 6 pictures from 2 weeks ago. Have you ever experienced something like this and may you have some tips to recover them ? Thank you for your time.

 

[Toxined]

Don't post same thing twice sir. It makes stie messy. And you should've edited this post instead posting a new one.
@Jimmy Collaros, @Dark Wolf you need to see this. Thank you.

I prefer HETMAN RECOVERY. Did you've tried that? Would you give it a try please.

Link:

https://www.teamos.xyz/threads/hetman-data-recovery-pack-4-7-multilingual-teamos.201550/

 

[Vlad.Tepes]

Sorry for the double post. Thank you for your suggestion. I'll try that one too.

 

[RedDove]

@Vlad.Tepes have you tried Recuva Pro.

Torrent - Recuva Professional / Business / Technician 1.53.2074 Multilingual *TeamOS*

Accidentally deleted an important file? Lost something important when your computer crashed? No problem! Recuva recovers files deleted from your Windows computer, Recycle Bin, digital camera card, or MP3 player. Features Undelete files on your computer Deleted a file by mistake? Recuva brings...

www.teamos.xyz

Direct - Recuva Professional v1.53.1087 + Serial Number (Key)

Recuva Professional v1.53.1087 + Serial Number (Key) | 5.79 MB At some point, everyone deletes something they shouldn't have deleted. Usually, the solution is to restore the file from the Recycle Bin, but what if you've already emptied the Recycle Bin? In that case, a file recovery program...

www.teamos.xyz

 

[Quetzalcoatl]

I for one personally prefer EaseUS Data Recovery. This thing has successfully retrieved everything i had deleted accidentally and intentionally to guage its scope of recovery. It has yet to let me down. So, never bothered to look for alternatives.

My suggestion would be to do a scan of the folder where those 6 pics used to be instead of the entire disk and go for deep scan if you can afford the time (though, you should get it by the surface scan itself but you can never be too careless with things you wish to recover)

 

[Cyler]

Since no one else answered your question (the why) here is the deal:
Successfully recovering deleted files is never straightforward and depends on several factors.

1. The medium: SSD or HDD
2. The PC usage we do AFTER the time we erased those files
3. Other reasons that have to do with how windows (or any OS) handles the file system.

When we delete a file, the file never gets wiped instantly, but rather the OS marks the area that those files occupied as ready to be used again. So if one copies or creates several files after the deletion, there is a good chance that some of those files will overwrite some or all of the files we have erased in the past. Note here that if one uses the OS disk as storage for personal documents, the chances of recovery are even smaller as the OS and the apps we use generate a LOT of temp files that will wipe erased files. In contrast, if we use a separate disk, this will increase the chance of finding deleted files, even older ones.

The above is mostly for HDDs (the spinners) because SSDs make things worse. SSDs because they use memory cells and not magnetic media to store data, they need to wipe those cells before they are able to be rewritten again, otherwise when we erase files the disk will still report the cell as used, since the OS as we said above does NOT free the area (wipe). The process of wiping cells is called TRIM (others call it active garbage collection) and it speeds the SSD disk when it comes to write speeds BUT at the cost that if a TRIM command is issued, erased files are permanently gone. Users have no power over TRIM the OS issues that automatically at set intervals.

Of course, all the above are a bit oversimplified as the real internal works for hard disk and file systems, could cause headaches.

So in your case, it could simply be that the OS for some reason overwrote the area where those 6 pictures were using, while it didn't for the others. This has nothing to do with the time you deleted the files, but rather their size and location on the disk, if the disk Is SSD or HDD etc. Note here that even if you see a successful recovery the files should still be checked manually cause often you may find corruption in them.

That doesn't mean you should stop looking, but the software won't change things by much as every software just uses the same NTFS commands to check for deleted files.
Hope it helped.

 

[Elzer]

Since no one else answered your question (how to recover) here is the deal:
***Check your inbox***

 

[Vlad.Tepes]

Thank you to all of you guys for your help and time. I will try all the solutions you've provided, and hopefully I'll manage to recover them. Although it might be that the specific space on the HDD was overwritten.

 

[pascalwil]

I will add Active@ UNDELETE to the list of tools. I has given me a chance to recover files after emptying the bin in the past. But you need to recover quickly before files are overwritten as mentioned by @Cyler

And I'd like @Cyler to clarify something.
What you're saying about different drives is also true for other partitions on the same drive, Right?
The OS will not write temp files on a different partition. Right? Only you is in control of a partition that doesn't contain an OS.

Thanks for clarifying.

Cheers

 

[Cyler]

And I'd like @Cyler to clarify something.
What you're saying about different drives is also true for other partitions on the same drive, Right?
The OS will not write temp files on a different partition. Right? Only you is in control of a partition that doesn't contain an OS.

Thanks for clarifying.

Sadly it's not true for partitions of the same physical disk. Trim works on an entire disk, not a partition. I will try to avoid being too technical.

Due to the way disks work, they are unaware of partitions. Partitions are purely a software construct and not hardware. The files, folders, and partitions are only for us users, to help us build a hierarchy and structure of our data, that resembles our real-world pages, folders, cabinets, and rooms. SSDs have only pages and blocks. Not head/tracks/sectors. They use special hardware (the controller) to translate on the fly the file/folder/partition and/or head/track/sector and LBA values that the OS and software use, to NAND pages and blocks. The controller is the only thing that knows where the data are actually located on the physical disk and to make things worse, it keeps reshuffling them at any erase/write we do across the entire disk. To a certain extent, this is true for modern HDDs too.

Since the OS is completely unaware of where the files are actually located on the SSD, when a TRIM command is issued, it affects the physical disk and not a specific partition, as data from different partitions may coexist on the same physical page, and the same applies when we write files on the disk, after a deletion, regardless of the partition that we write them.
This is why all recovery professionals always make a "sector" copy of the disk to an image and operate on the said image rather than on the physical medium if the problem allows it.

Hope it helped.

 

[pascalwil]

Thanks so much @Cyler for your feedback.
It helps a great deal indeed. I've learned something!

And now I know I'm not safe. One needs to be quick to recover if needed from a data partition before the OS overwrites the data.

Cheers

 

[Cyler]

Thanks so much @Cyler for your feedback.
It helps a great deal indeed. I've learned something!

And now I know I'm not safe. One needs to be quick to recover if needed from a data partition before the OS overwrites the data.

Cheers

in the case of SSD, not just quick, you must be instant.
An even better solution is
ALL PERSONAL FILES MUST BE BACKED UP. Cloud or local is up to you but they must be backed up.
Things that can't be found again like :

• photos
• Personal or work Documents of any kind
• Personal videos, recordings, etc
• online account data we might forget

The way I see it is: For everything I can't turn back time to get... Back it up. Movies/music/software can be found and redownloaded again, but photos of my daughters... can't.
Anyway, we are getting off track a bit here, I just hope our friend Vlad finds a solution.