The Mysterious Recycle Bin

 

*** also see http://support.microsoft.com/default.aspx?scid=kb;en-us;Q136517 - (but this page has much more info)

 

*** if you are having problems with your Recycle Bin - see the next page, Recycle Bin Problems and Fixes

 

The Recycle Bin contains deleted files, to give you a chance to restore them if need be.  It is a temporary stop-over before the file is deleted forever.  It is identical to the “Trash Can” with Mac computers.  If the drive space is low (default is 10% left) or if the Recycle bin becomes full, Windows deletes files from then bin that you deleted a long time ago, to make room for newly deleted files.

 

 

NOTE:  if you use Shift-Delete, then the file is actually deleted and does not go to the Recycle Bin.

 

Whenever you delete a file, instead of actually being deleted – it is renamed with an archaic naming convention (described later) and then moved to the Recycle Bin.  A hidden mapping file (named “Info2”) acts as a cross-reference so that Windows can continue to display the original file names.  For example, here we have deleted two files from the D drive and the screenshots show the displayed name in Windows Explorer (the original file names) and the actual names in a DOS box:

 

 

 


The Structure of the Recycle Bin

 

The Recycle Bin is structured differently on FAT32 drives vs NTFS drives.  However, in both cases, it is accessed and used identically – you open it by double-clicking the “Recycle Bin” icon on your desktop, and you click “File/Empty Recycle Bin” to clear it out and permanently delete the files that are there.

 

IMPORTANT – What Happens when you Delete a File:
Each drive has a folder at the root that “appears to contain” all files in the Recycle Bin.  In Windows Explorer, each folder contains a “list” of all the files you have deleted from your system.  This list shows up in Windows Explorer as if the folder contains the actual files – but each drive’s Recyled (Fat32) or Recycler (NTFS) folder only contains the files that have been deleted from that Drive !!!  You can verify this in DOS – and you will also see the weird file names that are stored (explained later).

For example – if you have a cleared out Recycle Bin, and you delete one, 100 MB file from your D drive – it will show up in each Recycle (FAT32) or Recycler (NTFS) folder on every drive.  But only the drive where it was deleted from, the D drive, will actually have the file stored !!  The folders on the other drives will list the file as if they contain it – the “Type” column in Explorer does not even say “shortcut” – however, functionally they are just shortcuts.

 

 

Fat32 Drives Recycled Bin - composed of identical folders, one per drive, named "Recycle".  Each folder lists the same set of all deleted files – but each folder only contains files deleted from that drive.  The list shows the original file names, but the actual file names that are stored are different (you can view the actual file names in DOS).

 

NTFS Drives Recycle Bin - composed of identical folders, one per drive, named "Recycler".  Each folder contains hidden folders with weird, long names.  In DOS, you can see them with “Dir /ah” and you can CD down to them and then use “Dir” to see the contents.  The same weird naming convention is used for the files!!!  Each Recycler folder and it’s archive files list the same set of all deleted files – but they only contain files deleted from that drive.  There are usually either 1, 2, or 3 archive files – I do not know why there is more than one.  For example, currently my drive has 3 of these files:

 

 

You can view the contents of the NTFS Recycle Bin archive files in Windows Explorer by clicking on them in the left pane.  Note that this archive lists files from my E drive (NTFS) and my G drive (FAT32).  But it actually only contains the file from E drive, since this is the Recycler folder on E.  The other file from G drive is just listed as a reference.

 

 

NOTE:  oddly, each “S-1-5 . . . etc” file contains the exact same list of deleted files !!!  So each archive appears to be identical – however, obviously, they do not replicate the same deleted file/s – so the drive only has ONE COPY of each deleted file from that drive only.  The other deleted files listed are just references to deleted files stored on other drives

 

Systems with FAT32 and NTFS Drives

 

For systems with both FAT32 and NTFS drives, whenever you delete a file, again, it shows up in both the FAT32 Recycle folders, and the NTFS Recycler folders. 

 

 

The Weird Naming Convention for Deleted Files

 

*** same naming convention used for both FAT32 and NTFS drives

 

As you delete files they are renamed ansd then moved to the Recycled (Fat32) or Recycler (NTFS) folder.  For example, on my Fat32 D drive - each successive file deleted is renamed and saved to the Recycled folder on "that drive". 

 

The original file names are still retained in a cross-reference list, in a file named “Info2”.  Even if you have Explorer set to show hidden files – it will never display the Info2 file !!  You can, however, see it in DOS – cd to the Recycled folder and type “attrib -h inf*”, and then “dir”.

 

By convention, every file name starts with two letters, followed by a reference number, and then the extension:

 

  1. the 1st character is the drive letter where the operating system resides

  2. the 2nd character is the drive where the file resides – same drive as it was on before it was deleted, renamed, and moved to the Recycled folder

  3. the 3rd character is a reference number – the number is incremented for each file of the same type and on the same drive.  Supposedly, when you Empty the Recycle bin, then the number will once again begin from "1" – but this is not true.  I don’t know how the number is reset.

  4. period

  5. file extension (same extension as the original file)

 

 

Example – I deleted 3 files from D drive (tempa.jpg, tempb.jpg, tempc.jpg) and the same 3 files from F drive.  In Windows Explorer, both D:\Recycled and F:\Recycled contain the following list:

 

 

In DOS, we see what they actually contain:

 

 

Naming Convention for Deleted Folders

 

When you delete folders, they are also saved to the Recycled folder but will show as saved folders and will have no extension. 

 

Example - WinXP is on the D drive, and you delete two JPG image files and then one folder from the drive.  Assume the Recycled folder contains files.  The deletions will be saved in D:\Recycled as : 

 

     Dd169.jpg

     Dd170.jpg

     Dd171

 

If Windows was on the C drive and they were deleted from the C drive then they would be moved to C:\Recycled and named:

 

     Cc169.jpg

     Cc170.jpg

     Cc171

 

 

Info2. For example the file name:  C:\www.dbknox_faq.com\index.html would become Dc1.html (if it was the first file deleted on the partition).

 

 

Sample Recycled folder contents

 

Here is the DOS dir command on my own FAT32 folders (c:\Recycled and D:\Recycled) and my only NTFS drive folder (E:\Recycler):

 

 

C:\RECYCLED>dir

 Volume in drive C is C DRIVE

 Volume Serial Number is 2156-17EB

 

 Directory of C:\RECYCLED

 

07/14/2001  04:55 PM    <DIR>          .

07/14/2001  04:55 PM    <DIR>          ..

10/04/2003  12:09 AM            11,907 Dc1.htm

10/04/2003  12:09 AM    <DIR>          Dc2

10/05/2003  12:12 AM         4,174,509 Dc3.wma

10/05/2003  12:15 AM            49,000 Dc4.pk

05/27/2003  12:49 PM                26 Dc5.inf

06/03/2003  02:39 PM               412 Dc6.bat

05/27/2003  12:49 PM                25 Dc7.txt

06/06/2002  05:14 PM             8,990 Dc8.zip

07/31/2003  12:36 PM            26,570 Dc9.zip

05/27/2003  12:31 PM               131 Dc10.txt

07/31/2003  12:35 PM           288,232 Dc11.exe

10/07/2003  02:24 AM    <DIR>          Dc12

10/07/2003  02:30 AM    <DIR>          Dc13

10/10/2003  02:06 PM         5,667,358 Dc14.rar

10/16/2003  10:53 PM           730,000 Dc15.r00

10/16/2003  10:53 PM           730,000 Dc16.r01

10/16/2003  10:53 PM           730,000 Dc17.r02

10/16/2003  10:53 PM           730,000 Dc18.r03

10/16/2003  10:53 PM           730,000 Dc19.r04

10/16/2003  10:53 PM           730,000 Dc20.r05

10/16/2003  10:53 PM           730,000 Dc21.r06

10/16/2003  10:53 PM           730,000 Dc22.r07

10/16/2003  10:53 PM           730,000 Dc23.r08

10/16/2003  10:53 PM           730,000 Dc24.r09

10/16/2003  10:53 PM           730,000 Dc25.r10

10/16/2003  10:53 PM           730,000 Dc26.r11

10/16/2003  10:53 PM           730,000 Dc27.r12

10/16/2003  10:53 PM           730,000 Dc28.r13

10/16/2003  10:53 PM           730,000 Dc29.r14

10/16/2003  10:53 PM           730,000 Dc30.r15

10/16/2003  10:53 PM           730,000 Dc31.r16

10/16/2003  10:53 PM           730,000 Dc32.r17

10/16/2003  10:53 PM           730,000 Dc33.rar

              30 File(s)     24,097,160 bytes

               5 Dir(s)   4,550,754,304 bytes free

 

 

D:\RECYCLED>dir

 Volume in drive D is D DRIVE

 Volume Serial Number is 1F42-17FD

 

 Directory of D:\RECYCLED

09/27/2003  06:19 PM           203,264 Dd155.asd

09/28/2003  07:23 PM    <DIR>          Dd156

09/12/2003  01:17 PM               137 Dd157.url

09/20/2003  06:38 PM               182 Dd158.url

10/01/2003  10:52 AM    <DIR>          Dd159

08/10/2003  09:45 AM               493 Dd160.htm

10/02/2003  01:50 PM               243 Dd161.url

10/02/2003  01:50 PM               243 Dd162.url

09/24/2003  12:15 PM               116 Dd163.url

10/05/2003  12:07 AM                 0 Dd164.mp3

10/05/2003  01:10 AM         4,592,848 Dd165.mp3

09/21/2003  09:11 AM            32,768 Dd166.mp3

09/20/2003  11:40 PM                 0 Dd167.mp3

09/21/2003  08:01 AM                 0 Dd168.mp3

09/20/2003  11:40 PM                 0 Dd169.mp3

09/20/2003  11:39 PM                 0 Dd170.mp3

09/21/2003  07:58 AM                 0 Dd171.mp3

09/21/2003  08:41 AM                 0 Dd172.mp3

09/21/2003  07:59 AM                 0 Dd173.mp3

09/12/2003  04:09 PM                 0 Dd174.MP3

10/05/2003  12:07 AM                 0 Dd175.mp3

10/06/2003  08:38 AM    <DIR>          Dd176

10/06/2003  08:40 AM               138 Dd177.url

10/06/2003  11:59 AM    <DIR>          Dd178

10/07/2003  04:15 AM                 0 Dd179.mp3

12/14/2002  10:50 AM             1,454 Dd180.lnk

10/09/2003  10:56 AM            45,056 Dd181.asd

09/11/2003  03:19 PM               429 Dd182.lnk

10/07/2003  08:07 PM               398 Dd183.lnk

10/07/2003  08:04 PM               416 Dd184.lnk

10/07/2003  05:00 AM             1,454 Dd185.lnk

10/10/2003  10:18 AM               156 Dd186.url

02/28/2003  09:27 AM               566 Dd187.dyn

10/10/2003  11:10 AM               672 Dd188.dyn

03/29/2003  11:25 AM               253 Dd189.lnk

10/16/2003  10:49 PM    <DIR>          Dd190

05/12/2003  10:43 AM               539 Dd191.lnk

09/24/2003  06:00 AM           577,615 Dd192.rtf

08/22/2003  07:09 PM            17,650 Dd193.jpg

06/19/2003  03:17 AM            19,880 Dd194.jpg

10/17/2003  11:18 AM            49,558 Dd195.jpg

10/17/2003  04:34 AM         2,319,672 Dd196.rtf

10/18/2003  11:17 PM        13,617,019 Dd197.swf

10/18/2003  04:30 AM           879,158 Dd198.rtf

10/19/2003  01:27 AM    <DIR>          Dd199

10/16/2003  11:03 PM               569 Dd200.lnk

10/19/2003  11:32 AM             9,012 Dd201.rar

10/19/2003  11:31 AM            14,000 Dd202.rar

10/19/2003  11:31 AM            14,000 Dd203.rar

10/19/2003  11:31 AM            14,000 Dd204.rar

10/19/2003  11:31 AM            14,000 Dd205.rar

10/19/2003  11:31 AM            14,000 Dd206.rar

10/19/2003  11:31 AM            14,000 Dd207.rar

10/19/2003  11:31 AM            14,000 Dd208.rar

10/19/2003  11:31 AM            14,000 Dd209.rar

10/19/2003  11:31 AM            14,000 Dd210.rar

10/19/2003  11:32 AM            14,000 Dd211.rar

10/19/2003  11:32 AM            14,000 Dd212.rar

10/19/2003  11:32 AM            14,000 Dd213.rar

10/19/2003  11:32 AM            14,000 Dd214.rar

10/19/2003  11:32 AM            14,000 Dd215.rar

10/19/2003  11:32 AM            14,000 Dd216.rar

10/17/2003  03:47 PM    <DIR>          Dd217

10/21/2003  02:20 PM               126 Dd218.url

10/21/2003  02:53 PM               166 Dd219.url

10/21/2003  02:53 PM               130 Dd220.url

10/23/2003  10:59 AM    <DIR>          Dd221

06/23/2003  11:24 PM    <DIR>          Dd222

06/23/2003  11:27 PM               507 Dd223.lnk

10/24/2003  01:55 AM        48,415,744 Dd224.asd

              61 File(s)     70,998,631 bytes

              11 Dir(s)   3,936,780,288 bytes free

 

 

E:\RECYCLER>dir /ah

 Volume in drive E is E DRIVE

 Volume Serial Number is E8DC-1A51

 Directory of E:\RECYCLER

10/09/2003  11:39 PM    <DIR>          S-1-5-21-1343024091-436374069-1957994488-1003

09/18/2003  09:39 PM    <DIR>          S-1-5-21-1343024091-436374069-1957994488-1004

               0 File(s)              0 bytes

               4 Dir(s)  25,922,043,904 bytes free