Thread: What actually happens when a file is deleted ?

  1. #1
    Registered User
    Join Date
    Oct 2001
    Posts
    29

    What actually happens when a file is deleted ?

    Hi !!
    I might get flamed for asking this but I was wondering as to what actually happens when a file gets deleted ? Is it removed off the hard disk or is it converted in an unreadable format ? Because I have seen that many a times a deleted file can be retrieved using some trick. Is some advanced algorithm converts the file in an un readable format when, say in a windows environment, the file is put in recycle bin and then deleted or deleted by just pressing the delete button ? Is the method of deletion different in Windows and Unix ?

    I would be etremely thankful if someone could answer the question.

  2. #2
    Mayor of Awesometown Govtcheez's Avatar
    Join Date
    Aug 2001
    Location
    MI
    Posts
    8,823
    I believe that unless you use some sort of a tool, the file's entry's just deleted from the HD lib.... But I mightbe wrong....

  3. #3
    Registered User
    Join Date
    Oct 2001
    Posts
    29

    Thanks Govtcheez !

    Thanks for replying so fast. But I want to know how a file gets deleted. ITs not that I want to retrieve a deleted file or something like that. But thanks for answering.

  4. #4
    Evil Member
    Join Date
    Jan 2002
    Posts
    638
    On a PC, when you delete a file, you are actually doing three things:

    1. Erasing the first letter of the filename
    2. Removing the file's location from the file allocation system
    3. Allowing the area that stored the data of the file to be written to.


    Someone attempting to undelete would look into unallocated space for what looked like an ordered file. Then they would remark that space as reserved for a file, but the first letter would have to be manually recovered.

    However, this has the drawback of not being foolproof, or even reliable. If a file is deleted and then immediately an undelete program is applied to it, it stands a good chance of being completely recovered. However, if a file is deleted and then the space that contained it is reused (a newly saved file took the vacant space) then an undeleter is useless.

    For people wishing to PREVENT file recovery, utilities do exist. Offhand I can think of Shredder, which overwrites the allocation area of a file with garbage data, preventing any recovery.


    Windows adds an extra step of idiot proofing to this process, the Recycle Bin. When you click to delete, or drag an item to the Bin, it is not actually deleted, just moved to a hidden folder on the C:\ drive. Only when a user selects Empty Recycle Bin are files actually deleted.

  5. #5
    It's full of stars adrianxw's Avatar
    Join Date
    Aug 2001
    Posts
    4,829
    As cheez said, the file is not deleted. The blocks that constituted the file are just flagged as free in the disc allocation table. That is why, if nothing else has grabbed those blocks in the mean time, you can "undelete" the file by restoring the allocation table entries.

    ***EDIT***

    Whoops, concurrency again!
    Wave upon wave of demented avengers march cheerfully out of obscurity unto the dream.

  6. #6
    Registered User
    Join Date
    Oct 2001
    Posts
    29

    Thanks Alot Guys !!

    Hi !!
    Thanks a lot for answering my questions. Thats the reason why I post my questions here. Its the "only" place where I get real answers from real programmers like you. Thanks again for answering the questions. I would be even more thankful if you could tell me how it happens on a Unix OS.
    Last edited by pritesh; 02-06-2002 at 10:28 AM.

  7. #7
    Has a Masters in B.S.
    Join Date
    Aug 2001
    Posts
    2,263
    to delete a file to where it can't be recovered you have to delete and write over the data 8 times, well, if you've got something that important anyway, your probably got a sniper aiming at your head as we speak.

    >
    Windows adds an extra step of idiot proofing to this process, the Recycle Bin. When you click to delete, or drag an item to the Bin, it is not actually deleted, just moved to a hidden folder on the C:\ drive. Only when a user selects Empty Recycle Bin are files actually deleted.
    <

    don't use it.

    just his Shift + Delete to skip it.
    ADVISORY: This users posts are rated CP-MA, for Mature Audiences only.

  8. #8
    Registered User
    Join Date
    Jan 2002
    Location
    Vancouver
    Posts
    2,212
    hm.. I'm gonna make a file shredder which replaces every letter of the file with '1', then deletes it. Would that do the trick?

    Maybe I could sell it...

  9. #9
    _B-L-U-E_ Betazep's Avatar
    Join Date
    Aug 2001
    Posts
    1,412
    They have disk wipe utilities already that write ones to the dive and then zero it.
    Blue

Popular pages Recent additions subscribe to a feed

Similar Threads

  1. Encryption program
    By zeiffelz in forum C Programming
    Replies: 1
    Last Post: 06-15-2005, 03:39 AM
  2. System
    By drdroid in forum C++ Programming
    Replies: 3
    Last Post: 06-28-2002, 10:12 PM
  3. Hmm....help me take a look at this: File Encryptor
    By heljy in forum C Programming
    Replies: 3
    Last Post: 03-23-2002, 10:57 AM
  4. Need a suggestion on a school project..
    By Screwz Luse in forum C Programming
    Replies: 5
    Last Post: 11-27-2001, 02:58 AM