DEV Community

Cover image for Recovering Files After CCleaner
Michael Mirosnichenko
Michael Mirosnichenko

Posted on

Recovering Files After CCleaner

Using automatic applications to delete files you are not using allows you to free disk space and boost the system performance, but instead, increases the risk of deleting important data accidentally. Read this article to find out how to recover files deleted by CCleaner, when such recovery is next to impossible, and how to avoid such misfortune.

Introduction

On the Internet, you can find lots of apps to assist you in cleaning junk files, freeing more disk space and making the process entirely automated. CCleaner is one of such apps. It helps users to remove unnecessary files created by Windows operating system and integrated utilities. This program relieves users from all the routine work in searching for and erasing data, and provides a concise report on the files it deleted and the amount of free space. However, the program may sometimes delete files which are more important than junk. Or sometimes, for a number of reasons, users may need the files which have already been removed. In this case, the question is how to recover files you lost after CCleaner erased them. In this article, we’ll show you a proper method of doing it and explain everything in detail.

YouTube:

What Happens When a File is Deleted?

The Windows operating system monitors location of files on the hard disk with the help of certain marks. Every fie and folder on the disk have their own markers (indicators) to tell the operating system where the data of a certain file begins and ends.

When a user starts the process of deleting a file in this or another way, Windows only deletes a specific marker and notes that the sectors containing the data of the deleted file are now free and available for writing new file data there. From the point of view of the file system, the deleted file is no longer present on the hard disk, and the sectors containing its data are considered to be free.

However, until the Windows operating system has actually written new data to the sectors containing the data of the deleted file, such file is still available for recovery. A file recovery application can scan the hard disk for deleted files and recover them successfully. If the file was overwritten partially, file recovery apps can restore only a certain share of the data. It happens when a part of the sectors still containing data of the deleted file was used to write new data. In some cases, recovery apps can restore the entire file by fixing overwritten sectors with the help of deep analysis.

The process of deleting as we have described it here applies in full to any files stored on hard disk drives (HDD). This process is different for files deleted from solid state drives (SSD), and in the next part of the article, we’ll focus on peculiarities of deleting files from SSD.

Why Aren’t Deleted Files Erased at Once?

YouTube:

The answer to the question why the computer doesn’t just erase files when they are deleted is pretty simple. Deleting the file indicator and marking the space occupied by the file as free for writing new data is a quick operation, as the file indicator (marker) has a minimal size. On the contrary, erasing a file completely by overwriting its data takes much more time. For example, if you delete a file of 10 GB, the visible process of deleting is almost instant. Yet the actual deleting of the file’s contents may take several minutes – that is, almost as much time as you need to write the same 10 GB of data to your hard disk.

To improve overall performance of a desktop or laptop computer and save the user’s time, the Windows operating system doesn’t actually remove the file contents when it is deleted – except for cases when special software is used to completely erase the file contents by overwriting.

The process of deleting files from solid state drives (SSD) is a bit different. A design-specific feature of SSD disks is that they use flash memory based on a particular semiconductor technology to store user data.

All modern SSD devices support compulsory implementation of the TRIM hardware command used to notify the drive that some blocks no longer hold useful information and therefore it doesn’t have to be stored anymore. Immediately after a file is deleted, this command marks the blocks as free, and consequently, the data is erased physically; the actual time when it happens is determined by the drive’s firmware.

In fact, data cannot be overwritten in the drive’s flash cells due to peculiarities of solid-state drive operation. To write any new data, the contents of the flash memory should be cleaned first. The operating system removes files at once to boost performance of subsequent write operations. If the files were not deleted at once, it would take longer to prepare the storage device for writing new data as this process would involve cleaning the flash memory first, and only then performing the actual write operations. Application of the TRIM command allows you to clean the flash memory at once and excludes any chance of keeping odd (junk) files which prevents reduction in the drive’s performance.

However, using the TRIM command can make it much more difficult or even impossible to recover data, even with the help of specialized software.

When is it Impossible to Recover Files After CCleaner and Why?

CCleaner is quite easy to use and can be very useful, if applied properly. It helps clean unnecessary files from the Windows operating system and other installed programs, saves hard disk space and in the long run, boost your computer’s performance.

If data is cleaned in a common way, the deleted information will be available for further recovery with a special program that we will tell you about in the next part of the article.

However, if you have some confidential personal data on your computer, for example, financial documents, registration files etc., and you are interested in erasing them entirely without a single chance for recovery, the Tools section features the utility called Drive Wiper which will erase all contents or free space in selected hard disks.

By overwriting the hard disk free space with other data, CCleaner ensures complete erasure of files that used to be stored in the corresponding sectors. You can select how many passes the app will use to overwrite data and make sure the information is gone.

In this case, the user information is removed past recovery.

Image description

You should also be careful with CCleaner settings. If you change default settings according to your own priorities, for example, Secure file deletion, Wipe alternate data streams or Wipe cluster tips, such data will be destroyed permanently without a single chance for recovery.

How Can We Recover Files After Using CCleaner?

If you use default settings, that is, ordinary quick delete, then professional data recovery software gives you excellent chances for success in bringing your files back.

To ensure the deleted data will be back without any problems, please pay attention to some requirements:

Recover the file as soon as possible: In the course of its work, Windows operating system permanently writes separate fragments of data to the hard disk and does so regardless of current user activity, which increases the probability for overwriting the deleted files. That is why you should start recovering deleted files immediately, because the chances for positive results are considerably higher right after the files were deleted than after some time.

Reduce using the hard disk: The best way to recover files deleted from the hard disk is to shut down the computer immediately after deleting, connect its hard disk to another computer as an extra partition, and recover the deleted files while using the other computer’s operating system (installed on the different hard disk) to install and run a corresponding file recovery utility. If you try to recover the missing files by installing the file recovery utility on the same hard disk from where you deleted the files, then the process of installation and regular operations of the hard disk may result in those files being overwritten.

Windows doesn’t have integrated tools to scan the hard disk for deleted files and restore them. However, on the Internet you can find many different programs meant to recover missing files.

Hetman Partition Recovery by Hetman Software truly deserves to be mentioned as the best software product globally recognized for its outstanding ability to find and recover deleted files on a hard disk of desktop or laptop computer.

This top-notch utility ranks among the best possible solutions in the company’s portfolio for the widest range of application, the high percentage of recovered files and impressive functionality.

Hetman Partition Recovery deals with data recovery by using a licensed innovative algorithm which is capable, in most cases, of recovering user files completely regardless of why and how they were deleted.

The program can easily restore various kinds of data:

  • User files after they were accidentally deleted from all kinds of computer devices: personal computers, laptops, USB flash drives, memory cards, digital cameras etc. You can read more about possible causes of damage to memory cards, methods for fixing them and recovering their data in our article: «Recovering Data From Flash Drives And Memory Cards»..
  • The program restores data after formatting or deleting partitions or drives, after changes or damage to the file system – and does all of that with signature-based data search principles.
  • Files deleted by emptying the Recycle Bin, deleted permanently, and deleted with the key shortcut Shift + Delete.
  • Data corrupted and blocked by harmful effects of malware (viruses).
  • Data after system or hardware failures, firmware errors and operating system crashes.
  • It also provides you with access to information located in physically damaged, unreadable, inaccessible and non-operable hard disks. You can fully explore the methods for fixing hard disk problems and recovering data in our previous article: «How to Convert a RAW Disk Into NTFS and Restore its Data?»..

The program Hetman Partition Recovery is available for download and installation from the developer’s official website. When you start the installer, it activates the wizard to take you through several simple steps, configure the settings properly and finalize the installation.

Top comments (0)