super super hidden directories within $RECYCLE.BIN

Posted: 12-04-2008, 08:59 AM

Has anyone else ever found some cryptically-named super super hidden
directories/files within $RECYCLE.BIN? I discovered that even empty
Recycling Bins contain deleted files. I was using 7-zip's File Browser
instead of Explorer which doesn't ever show them. (yes, of course I have
it set to show hidden, superhidden, and system files. I also gave myself
full rights of $RECYCLE.BIN using the built-in Administrator account,
just in case.) There's a bunch of deleted files I thought I deleted for
good and some 0-byte files called fileassociations.log in various
$RXXXXXX directories. When I try to delete these, Windows can't find
them. Because I'm OCD, I just had to delete these for real real (I know
they can still be recovered, but I don't want to see them if I'm not
using forensic software. 7-zip is not.) so I took Vista offline, booted
into a Linux CD and deleted from there.... it worked and now there gone
but Vista now says "The Recycling Bin on C:\ is corrupted. Do you want
to empty the Recycling Bin for this drive?" whenever I open the Bin or
start Windows... I don't really care about fixing this (I have plenty of
backup images) but I am curious.


--
r0cket

super super hidden directories within $RECYCLE.BIN


Responses to "super super hidden directories within $RECYCLE.BIN"

Donald Lessau
Guest
Posts: n/a
 
Re: super super hidden directories within $RECYCLE.BIN
Posted: 12-04-2008, 09:44 AM
"r0cket" <guest@unknown-email.com> schrieb im Newsbeitrag
news:26edd429e982baff32e2d9107a6fe317@nntp-gateway.com...
>
> Has anyone else ever found some cryptically-named super super hidden
> directories/files within $RECYCLE.BIN? I discovered that even empty
> Recycling Bins contain deleted files. I was using 7-zip's File Browser
> instead of Explorer which doesn't ever show them. (yes, of course I have
> it set to show hidden, superhidden, and system files. I also gave myself
> full rights of $RECYCLE.BIN using the built-in Administrator account,
> just in case.) There's a bunch of deleted files I thought I deleted for
> good and some 0-byte files called fileassociations.log in various
> $RXXXXXX directories. When I try to delete these, Windows can't find
> them. Because I'm OCD, I just had to delete these for real real (I know
> they can still be recovered, but I don't want to see them if I'm not
> using forensic software. 7-zip is not.) so I took Vista offline, booted
> into a Linux CD and deleted from there.... it worked and now there gone
> but Vista now says "The Recycling Bin on C:\ is corrupted. Do you want
> to empty the Recycling Bin for this drive?" whenever I open the Bin or
> start Windows... I don't really care about fixing this (I have plenty of
> backup images) but I am curious.
You don't need forensic software to see those files. XYplorer File Manager
will shown them to you just like normal files because that's what they are
(Windows Explorer just hides them from you to get the Recycle Bin idea to
life -- but it's just a construct superimposed onto NTFS). You can also
preview those files in XYplorer without a problem. But I would not recommend
to delete them, because -- as you experienced -- it will corrupt the
Recycler (there's a special file called "INFO2" (in XP, not sure about
Vista) which is expected to be in synch with the items in the Recycler).

http://www.xyplorer.com/

Don

Core
Guest
Posts: n/a
 
Re: super super hidden directories within $RECYCLE.BIN
Posted: 03-23-2009, 12:14 AM

Well: You are "almost" right but this problem can be far a way mor
complicated. If you enabled- Linux is a good way to do this- to se
those files, you will find a strange creature; "track"! This file exis
even if you reformat the HD- of course not with Windows but with Acroni
Disk Director and with 35 pass- and still holds information of the firs
installation-PC name and so on- and recreate the $Recycle bin on an
machine, what did connect to that HD...USB or Ultrabay...doesn't matter
The "upscale" message about the "corruption" is a joke and if you clic
on "do you want to empty the recycle bin" you give the command for th
"system" to do the recreation. So simple! If you have a "real" tool t
check out your HD...please go and check out the sector 63-64..

--
Cor
-----------------------------------------------------------------------
Core's Profile: http://forums.techarena.in/members/73632.ht
View this thread: http://forums.techarena.in/vista-fil...ent/1082271.ht

http://forums.techarena.i

 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
super-!! jeee Windows XP Music 0 12-06-2007 09:53 AM
super collapse 2 val Windows XP Games 1 11-27-2003 06:23 PM
Super fast system went super sluggish after registry curruption Ken Poston Windows XP Help & Support 1 10-25-2003 07:44 AM
super hidden chkdsk files Greg Brown Windows XP 2 08-22-2003 09:36 AM
Super bar Kevin Weilbacher Windows XP Security & Administration 1 08-11-2003 10:59 PM