Recycle bin

[Guest]

how do you retrieve deleted data from recycle bin?

 

[UL-Tomten]

how do you retrieve deleted data from recycle bin?

I think you could P/Invoke SHGetSpecialFolderPath to get the location
of the recycle bin, look up the SID of the user[1] you want to recover
files for, find the INFO2 file in the bin[2] and iterate over the
files and move them to their previous location.

1: http://www.codeproject.com/cs/library/sidtranslator.asp
2: http://www.cybersecurityinstitute.biz/downloads/INFO2.pdf

 

[wutanghax0r]

how do you retrievedeleteddata from recycle bin?

I think you could P/Invoke SHGetSpecialFolderPath to get the location
of the recycle bin, look up the SID of the user[1] you want torecover
files for, find the INFO2filein the bin[2] and iterate over the
files and move them to their previous location.

1:http://www.codeproject.com/cs/library/sidtranslator.asp
2:http://www.cybersecurityinstitute.biz/downloads/INFO2.pdf

It is more difficult to recover files that have been cleared from the
recycle bin than files that were deleted from their original location
(bypassing the recycle bin).
This info will explain the difference:
http://www.pandorarecovery.com/knowledge_base/general/recycler.php

Try Pandora Recovery. Its free.
http://www.pandorarecovery.com