Call:   (888) 458-3222

 

What is an Info 2 Record?

 

Windows automatically keeps an index of what was deleted and when.

It is kept in the Recycle Bin.

 

When the Recycle Bin is emptied, the INFO2 record is deleted.

We run special scripts to find any and all INFO2 records or pieces of records.

 

 

Naming convention:

Before deletion:   letters.doc

After deletion:   dc241.doc

 

(d for deleted, c for the file coming from the c partition, and then

an arbitrary number, then the file extension assigned to the file)

 

 

 

 

 

 

Return to FAQ List

Next Question: What is a MD5 Calculation?

Center for Computer Forensics

21800 Melrose Ave

Suite 1

Southfield, MI 48075

 

info@computer-forensics.net

This website is not intended to provide legal or professional advice. The site is merely a starting point to learn about the topics listed. While we attempt to maintain current, complete and accurate information we accept no responsibility for errors or omissions.