In Windows 10, are deleted files copied to any other location, or only moved to recycle bin?
EDIT: So the question is Does Windows free up the disk space used by a file, is that data marked as deleted when it is moved to recycle bin upon deletion, or is it's pathname simply changed to recycle bin or to another folder(maybe a temp folder for Undo operations), and that data not marked as deleted until permenent?
Hello everyone, think I've found a solution here
https://whereismydata.wordpress.com/2009/05/02/forensics-what-happens-when-files-are-deleted/
I know this is pretty specific to me
Basically I deleted a file and wanted to press Ctrl+z to undo that
operation,
this was not possible because I lost the undo button in File Explorer and Ctrl+Z.
The file is in Recycle Bin, but I want to make sure restoring that file is doing the same thing as Ctrl+z like I have tried to explain below.
I mean if I left the data of the file while it still is in recycle bin
Ctrl+z would be writing new data to restore that file
So I wanted to understand the process of Undo.
The research I did was read up on File systems, FAT, but I did not read up more on NTFS which I am using, I have a hdd rather than Solid state so I read about how data is stored as the polarity of a magnet 1 for a on bit or 0 for off.
I looked into how Recovery software works, it will preserve the ones and zeroes of a file but not necessarily at the original location on disk so it preserves a copy of the file not necessarily the bits at their original locations, for linear addressing systems, this is relevent because if Undo/Delete does preserve bits at their original addresses recycle bin or temp preserves the original bits rather than copies of those bits.
When a file is deleted with del key, is a copy of that file made anywhere on hard disk, or is it only moved to recycle bin? I understand traces of the file may be left but does windows do anything else with that file?
windows-10
|
show 2 more comments
EDIT: So the question is Does Windows free up the disk space used by a file, is that data marked as deleted when it is moved to recycle bin upon deletion, or is it's pathname simply changed to recycle bin or to another folder(maybe a temp folder for Undo operations), and that data not marked as deleted until permenent?
Hello everyone, think I've found a solution here
https://whereismydata.wordpress.com/2009/05/02/forensics-what-happens-when-files-are-deleted/
I know this is pretty specific to me
Basically I deleted a file and wanted to press Ctrl+z to undo that
operation,
this was not possible because I lost the undo button in File Explorer and Ctrl+Z.
The file is in Recycle Bin, but I want to make sure restoring that file is doing the same thing as Ctrl+z like I have tried to explain below.
I mean if I left the data of the file while it still is in recycle bin
Ctrl+z would be writing new data to restore that file
So I wanted to understand the process of Undo.
The research I did was read up on File systems, FAT, but I did not read up more on NTFS which I am using, I have a hdd rather than Solid state so I read about how data is stored as the polarity of a magnet 1 for a on bit or 0 for off.
I looked into how Recovery software works, it will preserve the ones and zeroes of a file but not necessarily at the original location on disk so it preserves a copy of the file not necessarily the bits at their original locations, for linear addressing systems, this is relevent because if Undo/Delete does preserve bits at their original addresses recycle bin or temp preserves the original bits rather than copies of those bits.
When a file is deleted with del key, is a copy of that file made anywhere on hard disk, or is it only moved to recycle bin? I understand traces of the file may be left but does windows do anything else with that file?
windows-10
1
The file is left where it is, windows marks the file as deleted so the disk space can be used for other files at a later date. until that space where the file is, is overwritten with other files, it can be recovered easily.
– Moab
Jan 30 at 4:04
that would mean the file in the recycle bin is actually a copy, not a moved file, are you sure? and is this true for NTFS
– user10502023
Jan 30 at 4:11
2
If we knew what you were concerned about, what you were trying to figure out, we might be able to get you a better answer. Otherwise, Moab is right and that's about all there is to say on the subject
– music2myear
Jan 30 at 4:11
good to have someone else back that up thanks, I was thinking maybe a clipboard was used and trying to understand the undo process
– user10502023
Jan 30 at 4:14
I believe however a file is only marked as deleted after removed from recycle bin, is this true?
– user10502023
Jan 30 at 4:17
|
show 2 more comments
EDIT: So the question is Does Windows free up the disk space used by a file, is that data marked as deleted when it is moved to recycle bin upon deletion, or is it's pathname simply changed to recycle bin or to another folder(maybe a temp folder for Undo operations), and that data not marked as deleted until permenent?
Hello everyone, think I've found a solution here
https://whereismydata.wordpress.com/2009/05/02/forensics-what-happens-when-files-are-deleted/
I know this is pretty specific to me
Basically I deleted a file and wanted to press Ctrl+z to undo that
operation,
this was not possible because I lost the undo button in File Explorer and Ctrl+Z.
The file is in Recycle Bin, but I want to make sure restoring that file is doing the same thing as Ctrl+z like I have tried to explain below.
I mean if I left the data of the file while it still is in recycle bin
Ctrl+z would be writing new data to restore that file
So I wanted to understand the process of Undo.
The research I did was read up on File systems, FAT, but I did not read up more on NTFS which I am using, I have a hdd rather than Solid state so I read about how data is stored as the polarity of a magnet 1 for a on bit or 0 for off.
I looked into how Recovery software works, it will preserve the ones and zeroes of a file but not necessarily at the original location on disk so it preserves a copy of the file not necessarily the bits at their original locations, for linear addressing systems, this is relevent because if Undo/Delete does preserve bits at their original addresses recycle bin or temp preserves the original bits rather than copies of those bits.
When a file is deleted with del key, is a copy of that file made anywhere on hard disk, or is it only moved to recycle bin? I understand traces of the file may be left but does windows do anything else with that file?
windows-10
EDIT: So the question is Does Windows free up the disk space used by a file, is that data marked as deleted when it is moved to recycle bin upon deletion, or is it's pathname simply changed to recycle bin or to another folder(maybe a temp folder for Undo operations), and that data not marked as deleted until permenent?
Hello everyone, think I've found a solution here
https://whereismydata.wordpress.com/2009/05/02/forensics-what-happens-when-files-are-deleted/
I know this is pretty specific to me
Basically I deleted a file and wanted to press Ctrl+z to undo that
operation,
this was not possible because I lost the undo button in File Explorer and Ctrl+Z.
The file is in Recycle Bin, but I want to make sure restoring that file is doing the same thing as Ctrl+z like I have tried to explain below.
I mean if I left the data of the file while it still is in recycle bin
Ctrl+z would be writing new data to restore that file
So I wanted to understand the process of Undo.
The research I did was read up on File systems, FAT, but I did not read up more on NTFS which I am using, I have a hdd rather than Solid state so I read about how data is stored as the polarity of a magnet 1 for a on bit or 0 for off.
I looked into how Recovery software works, it will preserve the ones and zeroes of a file but not necessarily at the original location on disk so it preserves a copy of the file not necessarily the bits at their original locations, for linear addressing systems, this is relevent because if Undo/Delete does preserve bits at their original addresses recycle bin or temp preserves the original bits rather than copies of those bits.
When a file is deleted with del key, is a copy of that file made anywhere on hard disk, or is it only moved to recycle bin? I understand traces of the file may be left but does windows do anything else with that file?
windows-10
windows-10
edited Feb 1 at 0:20
user10502023
asked Jan 30 at 3:48
user10502023user10502023
93
93
1
The file is left where it is, windows marks the file as deleted so the disk space can be used for other files at a later date. until that space where the file is, is overwritten with other files, it can be recovered easily.
– Moab
Jan 30 at 4:04
that would mean the file in the recycle bin is actually a copy, not a moved file, are you sure? and is this true for NTFS
– user10502023
Jan 30 at 4:11
2
If we knew what you were concerned about, what you were trying to figure out, we might be able to get you a better answer. Otherwise, Moab is right and that's about all there is to say on the subject
– music2myear
Jan 30 at 4:11
good to have someone else back that up thanks, I was thinking maybe a clipboard was used and trying to understand the undo process
– user10502023
Jan 30 at 4:14
I believe however a file is only marked as deleted after removed from recycle bin, is this true?
– user10502023
Jan 30 at 4:17
|
show 2 more comments
1
The file is left where it is, windows marks the file as deleted so the disk space can be used for other files at a later date. until that space where the file is, is overwritten with other files, it can be recovered easily.
– Moab
Jan 30 at 4:04
that would mean the file in the recycle bin is actually a copy, not a moved file, are you sure? and is this true for NTFS
– user10502023
Jan 30 at 4:11
2
If we knew what you were concerned about, what you were trying to figure out, we might be able to get you a better answer. Otherwise, Moab is right and that's about all there is to say on the subject
– music2myear
Jan 30 at 4:11
good to have someone else back that up thanks, I was thinking maybe a clipboard was used and trying to understand the undo process
– user10502023
Jan 30 at 4:14
I believe however a file is only marked as deleted after removed from recycle bin, is this true?
– user10502023
Jan 30 at 4:17
1
1
The file is left where it is, windows marks the file as deleted so the disk space can be used for other files at a later date. until that space where the file is, is overwritten with other files, it can be recovered easily.
– Moab
Jan 30 at 4:04
The file is left where it is, windows marks the file as deleted so the disk space can be used for other files at a later date. until that space where the file is, is overwritten with other files, it can be recovered easily.
– Moab
Jan 30 at 4:04
that would mean the file in the recycle bin is actually a copy, not a moved file, are you sure? and is this true for NTFS
– user10502023
Jan 30 at 4:11
that would mean the file in the recycle bin is actually a copy, not a moved file, are you sure? and is this true for NTFS
– user10502023
Jan 30 at 4:11
2
2
If we knew what you were concerned about, what you were trying to figure out, we might be able to get you a better answer. Otherwise, Moab is right and that's about all there is to say on the subject
– music2myear
Jan 30 at 4:11
If we knew what you were concerned about, what you were trying to figure out, we might be able to get you a better answer. Otherwise, Moab is right and that's about all there is to say on the subject
– music2myear
Jan 30 at 4:11
good to have someone else back that up thanks, I was thinking maybe a clipboard was used and trying to understand the undo process
– user10502023
Jan 30 at 4:14
good to have someone else back that up thanks, I was thinking maybe a clipboard was used and trying to understand the undo process
– user10502023
Jan 30 at 4:14
I believe however a file is only marked as deleted after removed from recycle bin, is this true?
– user10502023
Jan 30 at 4:17
I believe however a file is only marked as deleted after removed from recycle bin, is this true?
– user10502023
Jan 30 at 4:17
|
show 2 more comments
1 Answer
1
active
oldest
votes
Depending on how you deleted the files. There are two common delete functions (Delete and Shift+Delete) each of these functions have a different process of deleting files and each have different recovery methods.
Delete
- Not Permanent until files deleted from the Recycling Bin
- Process: Deletes the file by moving the file to the Recycling Bin
- Recovery Method: Restore the files from the Recycling Bin
Shift+Delete (Permanent)
- Process: Permanently deletes the file by basically bypassing the Recycling Bin
- Recovery Method: Using a recovery program to recover only if the data has not been overwritten.
There is a third way of deleting a file permanently referred to as zero filling which is a low-level format that just overwrites the data with zeroes.
The Recycle Bin is basically one bin with many folders, going into your Recycle Bin properties you can see almost all your drives have a recycle bin location of their own with their own maximum size settings.
So your files do move to a different folder.
Appreciate the answer, seems like windows does only move it to recycle bin and not really do anything else besides record the transaction
– user10502023
Jan 30 at 4:47
So a deleted file will exist only in the recycle bin and at it's original location on disk in Windows 10, not in another folder?
– user10502023
Jan 30 at 5:35
2
The file gets moved to the specified Recycle Bin folder of the drive. The Recycle Bin folder is a system file so it will stay hidden even when you try to show 'Hidden Folders', you can still show hidden system folders.
– angelofdev
Jan 30 at 5:38
I know it gets moved(or literally copied not sure) to the recycle bin, so I'm going to assume if I scanned my system, the file would not exist elswhere taking up space.
– user10502023
Jan 30 at 5:43
That's really what I'm wondering?, thanks for the replies
– user10502023
Jan 30 at 5:50
|
show 3 more comments
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1399930%2fin-windows-10-are-deleted-files-copied-to-any-other-location-or-only-moved-to%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Depending on how you deleted the files. There are two common delete functions (Delete and Shift+Delete) each of these functions have a different process of deleting files and each have different recovery methods.
Delete
- Not Permanent until files deleted from the Recycling Bin
- Process: Deletes the file by moving the file to the Recycling Bin
- Recovery Method: Restore the files from the Recycling Bin
Shift+Delete (Permanent)
- Process: Permanently deletes the file by basically bypassing the Recycling Bin
- Recovery Method: Using a recovery program to recover only if the data has not been overwritten.
There is a third way of deleting a file permanently referred to as zero filling which is a low-level format that just overwrites the data with zeroes.
The Recycle Bin is basically one bin with many folders, going into your Recycle Bin properties you can see almost all your drives have a recycle bin location of their own with their own maximum size settings.
So your files do move to a different folder.
Appreciate the answer, seems like windows does only move it to recycle bin and not really do anything else besides record the transaction
– user10502023
Jan 30 at 4:47
So a deleted file will exist only in the recycle bin and at it's original location on disk in Windows 10, not in another folder?
– user10502023
Jan 30 at 5:35
2
The file gets moved to the specified Recycle Bin folder of the drive. The Recycle Bin folder is a system file so it will stay hidden even when you try to show 'Hidden Folders', you can still show hidden system folders.
– angelofdev
Jan 30 at 5:38
I know it gets moved(or literally copied not sure) to the recycle bin, so I'm going to assume if I scanned my system, the file would not exist elswhere taking up space.
– user10502023
Jan 30 at 5:43
That's really what I'm wondering?, thanks for the replies
– user10502023
Jan 30 at 5:50
|
show 3 more comments
Depending on how you deleted the files. There are two common delete functions (Delete and Shift+Delete) each of these functions have a different process of deleting files and each have different recovery methods.
Delete
- Not Permanent until files deleted from the Recycling Bin
- Process: Deletes the file by moving the file to the Recycling Bin
- Recovery Method: Restore the files from the Recycling Bin
Shift+Delete (Permanent)
- Process: Permanently deletes the file by basically bypassing the Recycling Bin
- Recovery Method: Using a recovery program to recover only if the data has not been overwritten.
There is a third way of deleting a file permanently referred to as zero filling which is a low-level format that just overwrites the data with zeroes.
The Recycle Bin is basically one bin with many folders, going into your Recycle Bin properties you can see almost all your drives have a recycle bin location of their own with their own maximum size settings.
So your files do move to a different folder.
Appreciate the answer, seems like windows does only move it to recycle bin and not really do anything else besides record the transaction
– user10502023
Jan 30 at 4:47
So a deleted file will exist only in the recycle bin and at it's original location on disk in Windows 10, not in another folder?
– user10502023
Jan 30 at 5:35
2
The file gets moved to the specified Recycle Bin folder of the drive. The Recycle Bin folder is a system file so it will stay hidden even when you try to show 'Hidden Folders', you can still show hidden system folders.
– angelofdev
Jan 30 at 5:38
I know it gets moved(or literally copied not sure) to the recycle bin, so I'm going to assume if I scanned my system, the file would not exist elswhere taking up space.
– user10502023
Jan 30 at 5:43
That's really what I'm wondering?, thanks for the replies
– user10502023
Jan 30 at 5:50
|
show 3 more comments
Depending on how you deleted the files. There are two common delete functions (Delete and Shift+Delete) each of these functions have a different process of deleting files and each have different recovery methods.
Delete
- Not Permanent until files deleted from the Recycling Bin
- Process: Deletes the file by moving the file to the Recycling Bin
- Recovery Method: Restore the files from the Recycling Bin
Shift+Delete (Permanent)
- Process: Permanently deletes the file by basically bypassing the Recycling Bin
- Recovery Method: Using a recovery program to recover only if the data has not been overwritten.
There is a third way of deleting a file permanently referred to as zero filling which is a low-level format that just overwrites the data with zeroes.
The Recycle Bin is basically one bin with many folders, going into your Recycle Bin properties you can see almost all your drives have a recycle bin location of their own with their own maximum size settings.
So your files do move to a different folder.
Depending on how you deleted the files. There are two common delete functions (Delete and Shift+Delete) each of these functions have a different process of deleting files and each have different recovery methods.
Delete
- Not Permanent until files deleted from the Recycling Bin
- Process: Deletes the file by moving the file to the Recycling Bin
- Recovery Method: Restore the files from the Recycling Bin
Shift+Delete (Permanent)
- Process: Permanently deletes the file by basically bypassing the Recycling Bin
- Recovery Method: Using a recovery program to recover only if the data has not been overwritten.
There is a third way of deleting a file permanently referred to as zero filling which is a low-level format that just overwrites the data with zeroes.
The Recycle Bin is basically one bin with many folders, going into your Recycle Bin properties you can see almost all your drives have a recycle bin location of their own with their own maximum size settings.
So your files do move to a different folder.
edited Jan 30 at 4:54
answered Jan 30 at 4:39
angelofdevangelofdev
929120
929120
Appreciate the answer, seems like windows does only move it to recycle bin and not really do anything else besides record the transaction
– user10502023
Jan 30 at 4:47
So a deleted file will exist only in the recycle bin and at it's original location on disk in Windows 10, not in another folder?
– user10502023
Jan 30 at 5:35
2
The file gets moved to the specified Recycle Bin folder of the drive. The Recycle Bin folder is a system file so it will stay hidden even when you try to show 'Hidden Folders', you can still show hidden system folders.
– angelofdev
Jan 30 at 5:38
I know it gets moved(or literally copied not sure) to the recycle bin, so I'm going to assume if I scanned my system, the file would not exist elswhere taking up space.
– user10502023
Jan 30 at 5:43
That's really what I'm wondering?, thanks for the replies
– user10502023
Jan 30 at 5:50
|
show 3 more comments
Appreciate the answer, seems like windows does only move it to recycle bin and not really do anything else besides record the transaction
– user10502023
Jan 30 at 4:47
So a deleted file will exist only in the recycle bin and at it's original location on disk in Windows 10, not in another folder?
– user10502023
Jan 30 at 5:35
2
The file gets moved to the specified Recycle Bin folder of the drive. The Recycle Bin folder is a system file so it will stay hidden even when you try to show 'Hidden Folders', you can still show hidden system folders.
– angelofdev
Jan 30 at 5:38
I know it gets moved(or literally copied not sure) to the recycle bin, so I'm going to assume if I scanned my system, the file would not exist elswhere taking up space.
– user10502023
Jan 30 at 5:43
That's really what I'm wondering?, thanks for the replies
– user10502023
Jan 30 at 5:50
Appreciate the answer, seems like windows does only move it to recycle bin and not really do anything else besides record the transaction
– user10502023
Jan 30 at 4:47
Appreciate the answer, seems like windows does only move it to recycle bin and not really do anything else besides record the transaction
– user10502023
Jan 30 at 4:47
So a deleted file will exist only in the recycle bin and at it's original location on disk in Windows 10, not in another folder?
– user10502023
Jan 30 at 5:35
So a deleted file will exist only in the recycle bin and at it's original location on disk in Windows 10, not in another folder?
– user10502023
Jan 30 at 5:35
2
2
The file gets moved to the specified Recycle Bin folder of the drive. The Recycle Bin folder is a system file so it will stay hidden even when you try to show 'Hidden Folders', you can still show hidden system folders.
– angelofdev
Jan 30 at 5:38
The file gets moved to the specified Recycle Bin folder of the drive. The Recycle Bin folder is a system file so it will stay hidden even when you try to show 'Hidden Folders', you can still show hidden system folders.
– angelofdev
Jan 30 at 5:38
I know it gets moved(or literally copied not sure) to the recycle bin, so I'm going to assume if I scanned my system, the file would not exist elswhere taking up space.
– user10502023
Jan 30 at 5:43
I know it gets moved(or literally copied not sure) to the recycle bin, so I'm going to assume if I scanned my system, the file would not exist elswhere taking up space.
– user10502023
Jan 30 at 5:43
That's really what I'm wondering?, thanks for the replies
– user10502023
Jan 30 at 5:50
That's really what I'm wondering?, thanks for the replies
– user10502023
Jan 30 at 5:50
|
show 3 more comments
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1399930%2fin-windows-10-are-deleted-files-copied-to-any-other-location-or-only-moved-to%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
The file is left where it is, windows marks the file as deleted so the disk space can be used for other files at a later date. until that space where the file is, is overwritten with other files, it can be recovered easily.
– Moab
Jan 30 at 4:04
that would mean the file in the recycle bin is actually a copy, not a moved file, are you sure? and is this true for NTFS
– user10502023
Jan 30 at 4:11
2
If we knew what you were concerned about, what you were trying to figure out, we might be able to get you a better answer. Otherwise, Moab is right and that's about all there is to say on the subject
– music2myear
Jan 30 at 4:11
good to have someone else back that up thanks, I was thinking maybe a clipboard was used and trying to understand the undo process
– user10502023
Jan 30 at 4:14
I believe however a file is only marked as deleted after removed from recycle bin, is this true?
– user10502023
Jan 30 at 4:17