The Mysterious Recycle Bin
*** also see http://support.microsoft.com/default.aspx?scid=kb;en-us;Q136517 - (but this page has much more info)
*** if you are having problems with your Recycle Bin - see the next page, Recycle Bin Problems and Fixes
The Recycle Bin contains deleted files, to give you a chance to restore them if need be. It is a temporary stop-over before the file is deleted forever. It is identical to the “Trash Can” with Mac computers. If the drive space is low (default is 10% left) or if the Recycle bin becomes full, Windows deletes files from then bin that you deleted a long time ago, to make room for newly deleted files.
NOTE: if you use Shift-Delete, then the file is actually deleted and does not go to the Recycle Bin.
Whenever you delete a file, instead of actually being deleted – it is renamed with an archaic naming convention (described later) and then moved to the Recycle Bin. A hidden mapping file (named “Info2”) acts as a cross-reference so that Windows can continue to display the original file names. For example, here we have deleted two files from the D drive and the screenshots show the displayed name in Windows Explorer (the original file names) and the actual names in a DOS box:

The Structure of the Recycle Bin
The Recycle Bin is structured differently on FAT32 drives vs NTFS drives. However, in both cases, it is accessed and used identically – you open it by double-clicking the “Recycle Bin” icon on your desktop, and you click “File/Empty Recycle Bin” to clear it out and permanently delete the files that are there.
IMPORTANT
– What Happens when you Delete a File:
Each drive has a folder at the root that “appears to contain” all files in
the Recycle Bin. In Windows Explorer, each folder contains a “list” of all the
files you have deleted from your system. This list shows up in Windows
Explorer as if the folder contains the actual files – but each drive’s Recyled
(Fat32) or Recycler (NTFS) folder only contains the files that have been deleted from that
Drive !!! You can verify this in DOS – and you will also see the weird file
names that are stored (explained later).
For example – if you have a cleared out Recycle Bin, and you delete one,
100 MB file from your D drive – it will show up in each Recycle (FAT32) or
Recycler (NTFS) folder on every drive. But only the drive where it was deleted
from, the D drive, will actually have the file stored !! The folders on the
other drives will list the file as if they contain it – the “Type” column in
Explorer does not even say “shortcut” – however, functionally they are just
shortcuts.
Fat32 Drives Recycled Bin - composed of identical folders, one per drive, named "Recycle". Each folder lists the same set of all deleted files – but each folder only contains files deleted from that drive. The list shows the original file names, but the actual file names that are stored are different (you can view the actual file names in DOS).
NTFS Drives Recycle Bin - composed of identical folders, one per drive, named "Recycler". Each folder contains hidden folders with weird, long names. In DOS, you can see them with “Dir /ah” and you can CD down to them and then use “Dir” to see the contents. The same weird naming convention is used for the files!!! Each Recycler folder and it’s archive files list the same set of all deleted files – but they only contain files deleted from that drive. There are usually either 1, 2, or 3 archive files – I do not know why there is more than one. For example, currently my drive has 3 of these files:

You can view the contents of the NTFS Recycle Bin archive files in Windows Explorer by clicking on them in the left pane. Note that this archive lists files from my E drive (NTFS) and my G drive (FAT32). But it actually only contains the file from E drive, since this is the Recycler folder on E. The other file from G drive is just listed as a reference.

NOTE: oddly, each “S-1-5 . . . etc” file contains the exact same list of deleted files !!! So each archive appears to be identical – however, obviously, they do not replicate the same deleted file/s – so the drive only has ONE COPY of each deleted file from that drive only. The other deleted files listed are just references to deleted files stored on other drives
Systems with FAT32 and NTFS Drives
For systems with both FAT32 and NTFS drives, whenever you delete a file, again, it shows up in both the FAT32 Recycle folders, and the NTFS Recycler folders.
The Weird Naming Convention for Deleted Files
*** same naming convention used for both FAT32 and NTFS drives
As you delete files they are renamed ansd then moved to the Recycled (Fat32) or Recycler (NTFS) folder. For example, on my Fat32 D drive - each successive file deleted is renamed and saved to the Recycled folder on "that drive".
The original file names are still retained in a cross-reference list, in a file named “Info2”. Even if you have Explorer set to show hidden files – it will never display the Info2 file !! You can, however, see it in DOS – cd to the Recycled folder and type “attrib -h inf*”, and then “dir”.
By convention, every file name starts with two letters, followed by a reference number, and then the extension:
the 1st character is the drive letter where the operating system resides
the 2nd character is the drive where the file resides – same drive as it was on before it was deleted, renamed, and moved to the Recycled folder
the 3rd character is a reference number – the number is incremented for each file of the same type and on the same drive. Supposedly, when you Empty the Recycle bin, then the number will once again begin from "1" – but this is not true. I don’t know how the number is reset.
period
file extension (same extension as the original file)

Example – I deleted 3 files from D drive (tempa.jpg, tempb.jpg, tempc.jpg) and the same 3 files from F drive. In Windows Explorer, both D:\Recycled and F:\Recycled contain the following list:

In DOS, we see what they actually contain:

Naming Convention for Deleted Folders
When you delete folders, they are also saved to the Recycled folder but will show as saved folders and will have no extension.
Example - WinXP is on the D drive, and you delete two JPG image files and then one folder from the drive. Assume the Recycled folder contains files. The deletions will be saved in D:\Recycled as :
Dd169.jpg
Dd170.jpg
Dd171
If Windows was on the C drive and they were deleted from the C drive then they would be moved to C:\Recycled and named:
Cc169.jpg
Cc170.jpg
Cc171
Info2. For example the file name: C:\www.dbknox_faq.com\index.html would become Dc1.html (if it was the first file deleted on the partition).
Sample Recycled folder contents
Here is the DOS dir command on my own FAT32 folders (c:\Recycled and D:\Recycled) and my only NTFS drive folder (E:\Recycler):
![]()
C:\RECYCLED>dir
Volume in drive C is C DRIVE
Volume Serial Number is 2156-17EB
Directory of C:\RECYCLED
07/14/2001 04:55 PM <DIR> .
07/14/2001 04:55 PM <DIR> ..
10/04/2003 12:09 AM 11,907 Dc1.htm
10/04/2003 12:09 AM <DIR> Dc2
10/05/2003 12:12 AM 4,174,509 Dc3.wma
10/05/2003 12:15 AM 49,000 Dc4.pk
05/27/2003 12:49 PM 26 Dc5.inf
06/03/2003 02:39 PM 412 Dc6.bat
05/27/2003 12:49 PM 25 Dc7.txt
06/06/2002 05:14 PM 8,990 Dc8.zip
07/31/2003 12:36 PM 26,570 Dc9.zip
05/27/2003 12:31 PM 131 Dc10.txt
07/31/2003 12:35 PM 288,232 Dc11.exe
10/07/2003 02:24 AM <DIR> Dc12
10/07/2003 02:30 AM <DIR> Dc13
10/10/2003 02:06 PM 5,667,358 Dc14.rar
10/16/2003 10:53 PM 730,000 Dc15.r00
10/16/2003 10:53 PM 730,000 Dc16.r01
10/16/2003 10:53 PM 730,000 Dc17.r02
10/16/2003 10:53 PM 730,000 Dc18.r03
10/16/2003 10:53 PM 730,000 Dc19.r04
10/16/2003 10:53 PM 730,000 Dc20.r05
10/16/2003 10:53 PM 730,000 Dc21.r06
10/16/2003 10:53 PM 730,000 Dc22.r07
10/16/2003 10:53 PM 730,000 Dc23.r08
10/16/2003 10:53 PM 730,000 Dc24.r09
10/16/2003 10:53 PM 730,000 Dc25.r10
10/16/2003 10:53 PM 730,000 Dc26.r11
10/16/2003 10:53 PM 730,000 Dc27.r12
10/16/2003 10:53 PM 730,000 Dc28.r13
10/16/2003 10:53 PM 730,000 Dc29.r14
10/16/2003 10:53 PM 730,000 Dc30.r15
10/16/2003 10:53 PM 730,000 Dc31.r16
10/16/2003 10:53 PM 730,000 Dc32.r17
10/16/2003 10:53 PM 730,000 Dc33.rar
30 File(s) 24,097,160 bytes
5 Dir(s) 4,550,754,304 bytes free
![]()
D:\RECYCLED>dir
Volume in drive D is D DRIVE
Volume Serial Number is 1F42-17FD
Directory of D:\RECYCLED
09/27/2003 06:19 PM 203,264 Dd155.asd
09/28/2003 07:23 PM <DIR> Dd156
09/12/2003 01:17 PM 137 Dd157.url
09/20/2003 06:38 PM 182 Dd158.url
10/01/2003 10:52 AM <DIR> Dd159
08/10/2003 09:45 AM 493 Dd160.htm
10/02/2003 01:50 PM 243 Dd161.url
10/02/2003 01:50 PM 243 Dd162.url
09/24/2003 12:15 PM 116 Dd163.url
10/05/2003 12:07 AM 0 Dd164.mp3
10/05/2003 01:10 AM 4,592,848 Dd165.mp3
09/21/2003 09:11 AM 32,768 Dd166.mp3
09/20/2003 11:40 PM 0 Dd167.mp3
09/21/2003 08:01 AM 0 Dd168.mp3
09/20/2003 11:40 PM 0 Dd169.mp3
09/20/2003 11:39 PM 0 Dd170.mp3
09/21/2003 07:58 AM 0 Dd171.mp3
09/21/2003 08:41 AM 0 Dd172.mp3
09/21/2003 07:59 AM 0 Dd173.mp3
09/12/2003 04:09 PM 0 Dd174.MP3
10/05/2003 12:07 AM 0 Dd175.mp3
10/06/2003 08:38 AM <DIR> Dd176
10/06/2003 08:40 AM 138 Dd177.url
10/06/2003 11:59 AM <DIR> Dd178
10/07/2003 04:15 AM 0 Dd179.mp3
12/14/2002 10:50 AM 1,454 Dd180.lnk
10/09/2003 10:56 AM 45,056 Dd181.asd
09/11/2003 03:19 PM 429 Dd182.lnk
10/07/2003 08:07 PM 398 Dd183.lnk
10/07/2003 08:04 PM 416 Dd184.lnk
10/07/2003 05:00 AM 1,454 Dd185.lnk
10/10/2003 10:18 AM 156 Dd186.url
02/28/2003 09:27 AM 566 Dd187.dyn
10/10/2003 11:10 AM 672 Dd188.dyn
03/29/2003 11:25 AM 253 Dd189.lnk
10/16/2003 10:49 PM <DIR> Dd190
05/12/2003 10:43 AM 539 Dd191.lnk
09/24/2003 06:00 AM 577,615 Dd192.rtf
08/22/2003 07:09 PM 17,650 Dd193.jpg
06/19/2003 03:17 AM 19,880 Dd194.jpg
10/17/2003 11:18 AM 49,558 Dd195.jpg
10/17/2003 04:34 AM 2,319,672 Dd196.rtf
10/18/2003 11:17 PM 13,617,019 Dd197.swf
10/18/2003 04:30 AM 879,158 Dd198.rtf
10/19/2003 01:27 AM <DIR> Dd199
10/16/2003 11:03 PM 569 Dd200.lnk
10/19/2003 11:32 AM 9,012 Dd201.rar
10/19/2003 11:31 AM 14,000 Dd202.rar
10/19/2003 11:31 AM 14,000 Dd203.rar
10/19/2003 11:31 AM 14,000 Dd204.rar
10/19/2003 11:31 AM 14,000 Dd205.rar
10/19/2003 11:31 AM 14,000 Dd206.rar
10/19/2003 11:31 AM 14,000 Dd207.rar
10/19/2003 11:31 AM 14,000 Dd208.rar
10/19/2003 11:31 AM 14,000 Dd209.rar
10/19/2003 11:31 AM 14,000 Dd210.rar
10/19/2003 11:32 AM 14,000 Dd211.rar
10/19/2003 11:32 AM 14,000 Dd212.rar
10/19/2003 11:32 AM 14,000 Dd213.rar
10/19/2003 11:32 AM 14,000 Dd214.rar
10/19/2003 11:32 AM 14,000 Dd215.rar
10/19/2003 11:32 AM 14,000 Dd216.rar
10/17/2003 03:47 PM <DIR> Dd217
10/21/2003 02:20 PM 126 Dd218.url
10/21/2003 02:53 PM 166 Dd219.url
10/21/2003 02:53 PM 130 Dd220.url
10/23/2003 10:59 AM <DIR> Dd221
06/23/2003 11:24 PM <DIR> Dd222
06/23/2003 11:27 PM 507 Dd223.lnk
10/24/2003 01:55 AM 48,415,744 Dd224.asd
61 File(s) 70,998,631 bytes
11 Dir(s) 3,936,780,288 bytes free
![]()
E:\RECYCLER>dir /ah
Volume in drive E is E DRIVE
Volume Serial Number is E8DC-1A51
Directory of E:\RECYCLER
10/09/2003 11:39 PM <DIR> S-1-5-21-1343024091-436374069-1957994488-1003
09/18/2003 09:39 PM <DIR> S-1-5-21-1343024091-436374069-1957994488-1004
0 File(s) 0 bytes
4 Dir(s) 25,922,043,904 bytes free