Question recover deleted folder from other user in same PC

[yordanrhapsody]

Dear All

this is the situation:

laptop with Windows 10 with two domain users A and B

user A entered C:\Users\B\Desktop\ and deleted one folder and emptied the recycle bin

how can I recover that folder? I have stellar phoenix professional 7

 

[ex_bubblehead]

Restore from your latest backup. No backup? it's unlikely anything usable can be recovered.

In addition, your security, how shall I say it, seriously sucks when a user can access another user's profile in that manner. Someone needs to be shown the door.

 

[yordanrhapsody]

exaclty, it is just what happened (not only for this reason by the way)

so it's not possible to restore this folder, right?!

 

[MJS WARLORD]

go into the user account where stuff has got deleted and download the free recuva program program.
https://www.ccleaner.com/recuva
run the program and play around with it until you find the correct part of the program to restore your folder.
NOTE... you may find some folders or other items with symbols or rubbish instead of proper names , I don't know why it sometimes does this but don't ignore them because an item with an odd name might be the one you are looking for.

 

[ex_bubblehead]

go into the user account where stuff has got deleted and download the free recuva program program.
https://www.ccleaner.com/recuva
run the program and play around with it until you find the correct part of the program to restore your folder.
NOTE... you may find some folders or other items with symbols or rubbish instead of proper names , I don't know why it sometimes does this but don't ignore them because an item with an odd name might be the one you are looking for.

Your advice, as given, is immediately destructive to what you are trying to locate and recover. The instant you install anything on that drive you immediately render what you are looking for unrecoverable as it has, in all likelihood, overwritten that which you are looking to recover. Same goes for leaving the drive in the system and letting it run normally. There are almost continuous writes throughout the day that will overwrite the areas of the disk designated as free. In addition, if this is an SSD you can kiss the data goodbye within only a minute or two of its being deleted due to the drive's builtin garbage collection. Backups are the only guaranteed means of recovery from situations such as this.

 

[ex_bubblehead]

exaclty, it is just what happened (not only for this reason by the way)

so it's not possible to restore this folder, right?!

Extremely unlikely. First, if this wasn't noticed for a while, and the system was operated normally, it's likely that parts of what you are looking for have already been overwritten and are gone forever. Second, if the drive is an SSD then the built-in garbage collection rendered the data completely unrecoverable in a few minutes at most. Bottom line, no backup, no recovery.

And, for the record, my comment about someone being shown the door was aimed directly at whoever is responsible for your network security.

 

[MJS WARLORD]

bubblehead why the attack on my advice have you even tried using the recuva program I recommend.
If you had then you would know that it scans for items that have been "technically" deleted , I don't get why you say when you install anything it make stuff unrecoverable , the whole point of using software like recuva is to get back stuff you thought was lost forever.

your comments about kissing your data goodbye is wrong , data is NEVER gone for good it is still their.
PROOF... lets pretend you downloaded pornography and then deleted it , you then let something slip and police knock on your door , they take your pc away and find what you thought was gone for good , have you never seen police programs showing this.

BTW i do know what i am talking about as i have been around computers for about 18 years , i have personally used the recuva program to get back lost word files.

 

[punkncat]

Aside from whether you can or cannot recover this deleted file, what I find more curious is how user B had that level of control over another user folder. Technically they should not have been able to do so without either being logged in as/having the password of the other user, or having that level of control to modify in other folders as an admin.

 

[MJS WARLORD]

Hi punkncat , that was my first thought as well , maybe he should have done same as me , myself and my wife don't have separate user accounts because we are the only 2 in the home that have access to the pc and as far as pc's and their usage is concerned we don't have any secrets. We are we up on security issues such as dodgy emails , if we see a subject line or address we don't recognise we just say to each other , does this mean anything to you and if the answer is no then we delete it.

 

[ex_bubblehead]

bubblehead why the attack on my advice have you even tried using the recuva program I recommend.
If you had then you would know that it scans for items that have been "technically" deleted , I don't get why you say when you install anything it make stuff unrecoverable , the whole point of using software like recuva is to get back stuff you thought was lost forever.

your comments about kissing your data goodbye is wrong , data is NEVER gone for good it is still their.
PROOF... lets pretend you downloaded pornography and then deleted it , you then let something slip and police knock on your door , they take your pc away and find what you thought was gone for good , have you never seen police programs showing this.

BTW i do know what i am talking about as i have been around computers for about 18 years , i have personally used the recuva program to get back lost word files.

I won't get into a "Whose is bigger" here, but I've been around this industry more than twice as long as you and have far more experience with data recovery than you will ever acquire. Your advice, as given, is destructive, you NEVER install anything on a drive that you are attempting to recover, NEVER, period. Yes, data is recoverable after deletion and overwrite, if you happen to be the NSA, but, for everyone else out there it's gone, poof!

 

[ss202sl]

bubblehead why the attack on my advice have you even tried using the recuva program I recommend.
If you had then you would know that it scans for items that have been "technically" deleted , I don't get why you say when you install anything it make stuff unrecoverable , the whole point of using software like recuva is to get back stuff you thought was lost forever.

your comments about kissing your data goodbye is wrong , data is NEVER gone for good it is still their.
PROOF... lets pretend you downloaded pornography and then deleted it , you then let something slip and police knock on your door , they take your pc away and find what you thought was gone for good , have you never seen police programs showing this.

BTW i do know what i am talking about as i have been around computers for about 18 years , i have personally used the recuva program to get back lost word files.

When you install software or create any file, it has to go somewhere. When you delete a file that file location becomes free to write data to. If you write data over any deleted file, you may not be able to recover the file - even with Recuva.

 

[MJS WARLORD]

Oh boy I seem to have hit a nerve with you bubblehead , you say you wont get into an argument about who is bigger and then you do by saying you been in data recovery more than twice as long as me , that would mean you been doing data recovery for over 36 years. winding the clock back that would mean you were doing data recovery in 1982 that would have to be on something like a zx spectrum or a zx81 or a very primitive word processor because pc's had not been invented.

Just curious , do you use the name Brian Hamilton on another site , if you do then you know why I am asking.

 

[ex_bubblehead]

Oh boy I seem to have hit a nerve with you bubblehead , you say you wont get into an argument about who is bigger and then you do by saying you been in data recovery more than twice as long as me , that would mean you been doing data recovery for over 36 years. winding the clock back that would mean you were doing data recovery in 1982 that would have to be on something like a zx spectrum or a very primitive word processor because pc's had not been invented.

Just curious , do you use the name Brian Hamilton on another site , if you do then you know why I am asking.

When someone spouts potentially dangerous advice to others it catches my attention.

 

[USAFRet]

All write actions should cease on this drive.

Attempting to recover to the same drive, no matter what tool you use, lessens the possibility of getting anything usable out of it.

At the very least, recover to a different drive.
Depending on the supposed importance of this data, a forensic sector by sector copy of the whole drive, and then attempt any recovery actions on this copy.

 

[USAFRet]

user A entered C:\Users\B\Desktop\ and deleted one folder and emptied the recycle bin

How was this possible?

 

[MJS WARLORD]

Guys I don't want to fall out with anyone on here as I use this site a lot so I think we should call a truce and agree to disagree , all I can say is that I accidentally deleted some word documents and the recuva program got them back.