Once you run a scan from either the wizard or a manual scan, a list of deleted files will be displayed. This list will include all the files that Orion was able to find. Some deleted files will have had all record of their existence overwritten. This will be especially true on your main hard drive (usually C:). Even if you just deleted a file, it's possible that the record that Orion uses to find it will be overwritten in just a few minutes or even less. That is why it is important to run your scan as soon as possible after you delete your file.
Next to the filename, each file displays a color which indicates the likelihood of recovering material from your deleted file. The colors are as follows:
- Red Recovery unlikely
- Orange Poor chance of recovery
- Yellow Questionable recover
- Green High chance of recover
- Filename - On FAT file systems, sometimes the first letter of the filename is overwritten. In this case the first character will be an underscore ("_").
- Path - This is the folder the file was found in. If it was deleted from the recycle bin, the path may not be the original path but a folder called "$Recycle.Bin". On NTFS file systems, a part of the path may have been overwritten and lost so a question mark will be displayed ("?") after the drive letter.
- Size - If the file size is greater than 1024 bytes it will be displayed as kilobytes. If the file size is greater than 1024 kilobytes it will be displayed as megabytes.
- Created date - This is the date the file was created on this drive even if it was copied from elsewhere.
- Modified date - This is the date the file was last modified. If the file was copied from a different drive, the modified date may be earlier than the created date. This date is only updated when the file is actually changed, not when it is simply copied or moved.
- File type - This column lists what type the file is.
- Recovery potential - This column estimates how likely a file can be recovered. The fewer portions of the file that have been overwritten by other files, the better the chances. If you accidentally delete a file it is important, try to attempt recovery as soon as possible, before it gets damaged.
|