nerdexam
EC-Council

312-49 · Question #535

Annie is searching for certain deleted files on a system running Windows XP OS. Where will she find the files if they were not completely deleted from the system?

The correct answer is B. C: \$Recycle.Bin. The Recycle Bin on Windows Vista and later systems is stored at C:\$Recycle.Bin. However, it is worth noting that Windows XP specifically uses C:\RECYCLER (answer C) for the same purpose. The exam answer key designates B as correct, which technically applies to Vista+ systems…

Submitted by deeparc· Apr 18, 2026Disk Forensics

Question

Annie is searching for certain deleted files on a system running Windows XP OS. Where will she find the files if they were not completely deleted from the system?

Options

  • AC: $Recycled.Bin
  • BC: $Recycle.Bin
  • CC:\RECYCLER
  • DC:$RECYCLER

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    92% (22)
  • C
    4% (1)

Explanation

The Recycle Bin on Windows Vista and later systems is stored at C:$Recycle.Bin. However, it is worth noting that Windows XP specifically uses C:\RECYCLER (answer C) for the same purpose. The exam answer key designates B as correct, which technically applies to Vista+ systems. Forensic investigators must know both paths: C:\RECYCLER for XP and C:$Recycle.Bin for Vista/7/8/10. Files in these folders have not been permanently deleted and can be recovered. Answer A has an incorrect format (missing backslash), and D uses the wrong folder name.

Topics

#Deleted files#Recycle Bin#File system paths#Windows forensics

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice