defrag question


taurus

New Member
Feb 11, 2007
3
0
#1
I got a question i was wondering about.
Say i delete a couple of files from ma hard drive and then i defragment. Does that make a difference when trying to recover deleted files? Is it possible after defrag then to recover?
Thanks
 

Prickaerts

Administrator
Jan 2, 2006
765
0
#3
Hi,

Doing a defrag can certainly lessen the probability of recovering the files you are talking about.

However, it depends on where the files where when you deleted them and the defrag process itself (and the logic used). The main "concern" is that you do not have a lot of control on this process, so you are left unsure.

If you want to delete a file, use tools like BCwipe, it can wipe freespace. If you are focused on recovering, a defrag is definitely bad, but it does not have to be a case-breaker.

Chris
 

Prickaerts

Administrator
Jan 2, 2006
765
0
#4
On a similar note:

Windows Vista has defrag scheduled weekly by default :|
So although this might not be the end of the work, it's not going to help us much either...

Chris
 

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu