#Where is recycle bin in windows xp how to#

We can see the Rifiuti usage command after running the rifiuti.exe. Next put the INFO2 file inside the Rifiuti folder and run rifiuti.exe via the command prompt. Rifiuti, the Italian word meaning вЂњtrash,вЂќ was developed to examine the contents of the INFO2 file in the recycle bin. Rifiuti is a recycle bin forensic analysis tool. We canвЂ™t normally open that file, so we will use a tool called Rifiuti. Just extract that file to the different location. In the below figure we can see there is an INFO2 file. Now navigate to this directory via the command prompt and type dir /a to view all files and folders. In our case, we have only one user in this system thatвЂ™s why we have only one. This will be generated for every separate user. Once the changes have been made, browse the C drive and you can see the Recycler folder clearly. Uncheck вЂњHide protected operating system filesвЂќ and you are done. Open вЂњFolder Options,вЂќ then select вЂњShow hidden files and foldersвЂќ under the вЂњHidden files and foldersвЂќ section.

The Recycler folder is a hidden directory, so we have to make some changes in the folder options to view that directory. First check out the Recycler folder on C drive.

#Where is recycle bin in windows xp how to#

Here we will see how to analyze the INFO2 file for the Windows XP operating system. The table below shows locations from both past versions of Windows as well as Windows Vista. This location varies, depending on the version of Windows the user is running. The file at this point is copied into the recycle binвЂ™s system folder, where it is held until the user gives further instructions on what to do with the file. When a user вЂњdeletesвЂќ a file in Windows, the file itself is not actually deleted. To understand how the information files are structured and how the naming convention works, there must first be an understanding of how the recycle bin works. By analyzing the recycle bin, we can recover useful data.

In this case, the file is moved to a hidden, system folder where it is renamed and stored until further instructions are given as to what is to happen to the file.ДЇrom the forensic point of view, the recycle bin is a gold mine for gathering evidence, clues, etc. If the user holds the shift key at the time of deleting a file, then the file will be deleted permanently without being stored in the recycle bin. If a user wants to restore the deleted file from the recycle bin, it can be done. When a file is deleted in the Microsoft Windows operating system, it doesnвЂ™t delete it permanently it is stored in the recycle bin.