Unable to recover huge deleted files?

[Ant]

Hello.

Is it me or is it really difficult to undelete/recover huge files (a few
GB) on both FAT32 and NTFS even right a few minutes after the deletions?
I have noticed this in the past and right now.

Currently, I have a 5.63 GB MPEG-2 file. Both undelete programs (EASEUS
Data Recovery Wizard Professional v4.3.6 and MultiStage Recovery v3.6d)
saw the file, but were unable to recover it. They both ended up with 0
byte size. chkdsk showed no unwritten files or any problems.

I did a file properties in one of the program on the found file I wanted
to recover:

finale.mpg

----------------------------------------------------------------------------------------
Record number: 4088

FILE0 Record:

========================================================================================
Magic number 'FILE' : 'FILE0'
Offset to the update sequence : 48
$LogFile Sequence Number (LSN) : 559302829
Sequence number : 11
Hard link count : 2
Offset to the first Attribute : 56
Flags : 0
-(0x01) Record is in use : False
-(0x02) Record is a directory : False
Real size of the FILE record : 544
Allocated size of the FILE record : 1024
File reference to the base FILE record : 0
Next Attribute Id : 34

STANDARD_INFORMATION (0x10)

========================================================================================
Attribute Type : 16
Length (including this header) : 96
Non-resident flag : 0
Name length : 0
Offset to the Name : 0
Flags : 0
-(0x0001) Compressed : False
-(0x4000) Encrypted : False
-(0x8000) Sparse : False
Length of the Attribute : 72
Offset to the Attribute (b) : 24
Indexed flag : 0

ATTRIBUTE_LIST (0x20)

========================================================================================
Attribute Type : 32
Length (including this header) : 72
Non-resident flag : 1
Name length : 0
Offset to the Name : 0
Flags : 0
-(0x0001) Compressed : False
-(0x4000) Encrypted : False
-(0x8000) Sparse : False
Starting VCN : 0
Last VCN : 0
Offset to the Data Runs (b) : 64
Compression Unit Size (c) : 0
Allocated size of the attribute (d) : 4096
Real size of the attribute : 488
Initialized data size of the stream (e) : 488

FILE_NAME (0x30)

========================================================================================
Attribute Type : 48
Length (including this header) : 120
Non-resident flag : 0
Name length : 0
Offset to the Name : 0
Flags : 0
-(0x0001) Compressed : False
-(0x4000) Encrypted : False
-(0x8000) Sparse : False
Length of the Attribute : 90
Offset to the Attribute (b) : 24
Indexed flag : 1
File reference to the parent directory. : 55
C Time - File Creation : 128853609016950884
A Time - File Altered : 128853647943924354
M Time - MFT Changed : 128853740926262686
R Time - File Read : 128853609016950884
Allocated size of the file : 6047903744
Real size of the file : 6047901496
Flags : 32
-(0x0001) Read-Only : False
-(0x0002) Hidden : False
-(0x0004) System : False
-(0x0020) Archive : True
-(0x0040) Device : False
-(0x0080) Normal : False
-(0x0100) Temporary : False
-(0x0200) Sparse File : False
-(0x0400) Reparse Point : False
-(0x0800) Compressed : False
-(0x1000) Offline : False
-(0x2000) Not Content Indexed : False
-(0x4000) Encrypted : False
-(0x10000000) Directory : False
-(0x20000000) Index View : False
Used by EAs and Reparse : ?
Filename length in characters (L) : 12
Filename namespace : 2 : DOS

FILE_NAME (0x30)

========================================================================================
Attribute Type : 48
Length (including this header) : 152
Non-resident flag : 0
Name length : 0
Offset to the Name : 0
Flags : 0
-(0x0001) Compressed : False
-(0x4000) Encrypted : False
-(0x8000) Sparse : False
Length of the Attribute : 124
Offset to the Attribute (b) : 24
Indexed flag : 1
File reference to the parent directory. : 55
C Time - File Creation : 128853609016950884
A Time - File Altered : 128853647943924354
M Time - MFT Changed : 128853740926262686
R Time - File Read : 128853609016950884
Allocated size of the file : 6047903744
Real size of the file : 6047901496
Flags : 32
-(0x0001) Read-Only : False
-(0x0002) Hidden : False
-(0x0004) System : False
-(0x0020) Archive : True
-(0x0040) Device : False
-(0x0080) Normal : False
-(0x0100) Temporary : False
-(0x0200) Sparse File : False
-(0x0400) Reparse Point : False
-(0x0800) Compressed : False
-(0x1000) Offline : False
-(0x2000) Not Content Indexed : False
-(0x4000) Encrypted : False
-(0x10000000) Directory : False
-(0x20000000) Index View : False
Used by EAs and Reparse : ?
Filename length in characters (L) : 29
Filename namespace : 1 : Win32

VOLUME_VERSION(NT) OBJECT_ID(2K) (0x40)

========================================================================================
Attribute Type : 64
Length (including this header) : 40
Non-resident flag : 0
Name length : 0
Offset to the Name : 0
Flags : 0
-(0x0001) Compressed : False
-(0x4000) Encrypted : False
-(0x8000) Sparse : False
Length of the Attribute : 16
Offset to the Attribute (b) : 24
Indexed flag : 0


Is this totally gone? Or do I need a different software (freeware
please). Thank you in advance. :)

[Pegasus [MVP]]

Post by Ant
Hello.
Is it me or is it really difficult to undelete/recover huge files (a few
GB) on both FAT32 and NTFS even right a few minutes after the deletions? I
have noticed this in the past and right now.
Currently, I have a 5.63 GB MPEG-2 file. Both undelete programs (EASEUS
Data Recovery Wizard Professional v4.3.6 and MultiStage Recovery v3.6d)
saw the file, but were unable to recover it. They both ended up with 0
byte size. chkdsk showed no unwritten files or any problems.
I did a file properties in one of the program on the found file I wanted

This sounds more like a Easueus or MultiStage problem than a Windows file
system problem. Perhaps these programs have some inbuilt limits or
limitations about the size of files they can recover. I suggest you try the
FAQs of these products, or send a note to their helpdesks.

[Ant]

Post by Pegasus [MVP]
This sounds more like a Easueus or MultiStage problem than a Windows file
system problem. Perhaps these programs have some inbuilt limits or
limitations about the size of files they can recover. I suggest you try the
FAQs of these products, or send a note to their helpdesks.

Is there another program to undelete that is better?