- How-To Booklet
- 1. How to protect your computer from malware and hackers
- 2. How to protect your information from physical threats
- 3. How to create and maintain secure passwords
- 4. How to protect the sensitive files on your computer
- 5. How to recover from information loss
- 6. How to destroy sensitive information
- 7. How to keep your Internet communication private
- 8. How to remain anonymous and bypass censorship on the Internet
- Glossary
- Hands-On Guides
- Avast - anti-virus
- Spybot - anti-spyware
- Comodo - firewall
- KeePass - secure password storage
- TrueCrypt - secure file storage
- Cobian - backup
- Undelete Plus - file recovery
- Eraser - secure file removal
- CCleaner - temporary file removal
- Riseup - secure email service
- Pidgin + OTR - secure instant messaging
- VaultletSuite - secure mail client
- Thunderbird + Enigmail - secure mail client
- Firefox - Web browser
- Tor - anonymity and circumvention
- portable security
FAQ and Review
Submitted by genner on Fri, 11/21/2008 - 01:57.
Elena and Nikolai find Undelete Plus an easy enough program to set up and use, but they are still not sure exactly what files it will restore, and how to identify them.
Q: When I selected the file type
WINDOWS, I got a list of different kinds of files, but I wasn't sure
what they all were. Can you explain what kinds of files Undelete Plus
has retrieved, and how I can identify the ones I want to recover?
A: Undelete Plus will find all previously deleted files on your computer that can be recovered. Remember, in Chapter 5 of the booklet we discussed why a normal Windows deletion is insufficient and how files can be restored. If you do not set a filter for your search, UndeletePlus will display all recoverable files, including past programs that you uninstalled from you computer, unnecessary system files and of course, your documents as well. Any file in the Windows section of the results is best left alone. These are system files and will not contain anything that is of relevance to you.
Q: In particular, can you tell me how to
find a file I was working on when the computer crashed? Can I use
Undelete Plus for this?
A: Unlikely. A crashed document is not a deleted one. However, it is worth performing a search with a filter on the date of creation set. You could also try to view your computer's temporary files. In Windows XP, this can be done by performing the following steps:
Step 1. Select: Start > Programs > Accessories > System Tools > Disk Cleanup
Figure 9: The Windows Disk Cleanup feature
Step 2. Choose your drive, and when the program loads (it could take a relatively long time to load, especially if this is the first time you are running it).
Step 3. Click the View Files button.
Please see some additional guides for restoring crashed Word documents and other Office files:
Q: What kinds of files will Undelete Plus not restore?
A: Undelete Plus cannot restore deleted files that have been overwritten by other files. In Windows, when you delete a file, it marks that particular space on the hard drive as open to be overwritten by new data. It then writes new data to the drive (new documents, installed programs) in a random fashion. There is then a small probability that it will overwrite the space taken up by the document you previously deleted (and now want to restore).
Q: If I use a computer in an Internet
cafe, and then somebody else comes along and uses Undelete Plus on it,
how can I ensure that they won't be able to recover copies of files
I've been working on and then deleted?
A: You will need to use a secure deletion program. Please refer to the manual chapter on Eraser and CCleaner. You can also carry a portable version of CCleaner with you on a USB stick.
Q: Can I use this program to undelete files I've deleted from a USB key, DVD or CD? If so, how?
A: Yes, if your USB memory stick or CD/DVD drive is plugged in it will appear automatically within the Undelete Plus drive menu in the left pane.
Q: The files listed for undeleting all
have a status listed next to them (very good, bad, overwritten etc.).
Which of these statuses are an indication that I cannot recover the
file in question?
A: A bad or overwritten status means that the file cannot be recovered.
Q: How long will files remain on the computer in a form in which they are recoverable?
A: Until the space they take up on the hard drive is overwritten with new data. If, for example, you delete a bunch of documents and then copy a movie onto your hard drive, it is probable that the movie will overwrite the deleted documents, rendering them impossible to recover.
Q: Are there any other uses for this program?
A: Undelete Plus or other data recovery programs can be used to obfuscate (hide from plain view) the existence of files on your computer, USB memory stick or even a digital camera. If you have been taking photographs or carry information with you the existence of which you do not want anybody to know about, then you can delete them (using your computer) wait until the situation improves and then undelete (recover) them.
Tip: Be careful not to write any new data to the device that you want to restore files from. It is best to test this procedure out a few times before trying it with important data.
3.1 Review questions
- How is Undelete Plus able to recover deleted files?
- Which files cannot be recovered?
- How can you display only the results you are looking for after a completed scan?
- What should you not do on your computer or digital device if you want to restore files from it?

