Recycle Bin

Question 1

What is the “Windows Recycle Bin” ?

Answer 1

It is another folder within the Windows OS folder structure. It is a location where files are marked for deletion are temporarily stored, unless their size exceeds the recycle bin limits.

Question 2

Name 2 type of file deleting.

Answer 2

• To Recycle Bin (no shift key)
• Directly Deleted (uses shift key)

Question 3

What is “File Recycling” ?

Answer 3

File is not really deleted, it is moved to a hidden folder and renamed.

It stays there until:
- the Recycle bin is emptied
- the file is recovered
- or delete by the recycle bin because space is needed.

Question 4

Where is the recycle bin stored on NTFS drives?

Answer 4

The hidden recycle bin folder is stored in the root of a drive. E.g.: C\$Recycle.bin
This contains SID folders for each user .(S-1-5-21-453859… - 1000). The last digits are user id’s.
The SID folder contains files delete by the user.

Question 5

What kind of files are in the SID folder?

Answer 5

There are 2 type of files in the SID folder, file started with:

• $R, recycled files
• $I, contains information about $R files.

$I files have a fixed size of 544 bytes.
It contains info about a $R file:
- size
- date an time of recycling
- original name and location