I am looking at a Windows XP (SP2) machine that has over 25,000 deleted files in the "Windows\CSC" folder. The user states that he has created a shortcut of his user share on the server on his desktop (hence the offline folder), but he has a desktop and never disconnects from the network. He also states that he has never manually disabled the offline folders or deleted the files within them.
The 25,000 files are named in a similar fashion as 80006EA6.
Is there any way to explain an inadvertant deletion of these files? Any program or service that would delete these files?
What steps have you taken to recreate this event? lol
Hello?? I'm trying to help you out here. Whats your response? roll
I learned alot in school about CSC Folders, so please let me know the exact problem you're having. Thanks! ))))
I'm not the original poster, but I had a similar situation recently.
One of the members of our team had a tool called csc.exe which seemed to recover some of the files, but it could only be run within the live system, and could only recover files associated with the logged-in user.
I recovered some files from file slack and drive slack, but I'd love to hear any advice you have on how to recover these kinds of files.
Did anyone finally ever discovered how to map the 8000XXXX offline file names with the actual online names in the server?