Guide · deleted files & dead drives
Deleted files or a dead drive: the first hour decides what survives
Here's the short version: stop writing to the drive. What you do in the first hour matters more than any recovery tool you can buy. This guide covers the first-hour checklist, how to triage the failure, and when to stop and hand it over.
Last updated 2 July 2026 · by Alien IT Solutions
Rule one: stop writing to the drive
Deleted the wrong folder? Drive not showing up? Whatever just happened, the single biggest rule is the same: stop putting new data on that drive. Every file you save, every program you install, every update that lands in the background can overwrite the exact blocks your lost files are sitting on.
Recovery is a race between you and the next write. Most data that dies after an accidental delete is not killed by the fault. It is killed by what the owner does in the hour after it, usually with the best of intentions.
Why deleted files are usually recoverable
Deleting a file does not wipe it. It removes the index entry, the signpost that tells the system where the file lives, and marks that space as free for reuse. The data itself stays on the disk until something new is written over the top of it.
Think of a library that throws out the catalogue card but leaves the book on the shelf. Anyone willing to walk the shelves can still find the book. That is exactly what recovery software does: it ignores the missing catalogue and reads the shelves directly.
The catch is that "free" space is fair game. The moment the system needs somewhere to put new data, it can land right on top of your file, and a busy machine writes constantly, whether you touch it or not. Once a block is overwritten, no software on earth brings it back. Which is why rule one is rule one.
The first-hour checklist
Four things, in order. They cost nothing and they protect every option you have left.
Stop using the machine
If the lost files were on the system drive, save nothing, install nothing, and shut it down. Browsers, updates and logs all write to disk constantly, even while you sit there deciding what to do.
Don't install recovery software onto the affected drive
Installing the rescue tool onto the drive you are rescuing can overwrite the very files you want back. Run it from another machine or another disk, with the affected drive attached as a second drive.
Don't keep rebooting a clicking drive
Clicking, buzzing or not spinning up means a mechanical fault. Every power-on can drag damaged heads across the platters. It does not heal with repeated attempts. It gets worse with each one.
Note exactly what happened
What was deleted, when, what error appeared, what noises it makes. Written down, in order. It changes how the recovery is approached and it stops the guesswork that costs data.
Triage: which failure have you got?
Three situations, three very different playbooks. Getting this call right is most of the battle.
! Deleted or formatted, drive otherwise fine
The good-news case. The hardware is healthy and only the index is gone, so software recovery odds are good if nothing has been written since. Stop using the drive, scan it from another machine, and recover the files to a different disk. Never back onto the same one.
! Detected, but slow, erroring or dropping out
That is failing hardware, and every hour powered on is a risk. The priority is to image it: take a full sector-by-sector copy onto a healthy disk, then do all the recovery work from the copy. Do not run scan after scan against a dying drive. You get one good read, spend it on the image.
! Clicking, beeping or not spinning at all
Physical failure. Power it off and stop. No software fixes damaged heads, and no, the freezer trick does not work. On modern drives it adds condensation and mechanical stress and usually finishes the job. Opening the case outside a clean room is much the same. This one is professional territory.
SSDs play by different rules
Straight answer: if the deleted files were on an SSD, your odds are worse and the window is shorter. Modern systems send a TRIM command when files are deleted, which tells the SSD it can erase those blocks whenever it likes. Most do it within minutes.
There is no shelf to walk. The library shreds the book almost as soon as the card goes in the bin. It is still worth stopping and checking straight away, because some setups have TRIM disabled and many external SSDs over USB never receive the command, but treat recovery of deleted files from a TRIMmed SSD as unlikely rather than probable, no matter what the software box promises.
A failed SSD is a different story to a deleted file on one. Drives that stop being detected or hit firmware faults are sometimes recoverable, but that is specialist work on the hardware, not something a scan-and-hope tool will do.
DIY software or a professional?
Here's the honest split. DIY recovery software is fine when three things are true: the drive is mechanically healthy, the loss is a deletion or an accidental format, and the data would be annoying to lose but not devastating. A movie you can re-download, a document you can rewrite. Have a go, done properly it is a reasonable bet.
Hand it over when any of these are true: the drive is making noises or misbehaving, the first attempt did not work, or the data is irreplaceable. The only copy of the family photos. The business's accounts. Years of work.
The rule we give everyone: don't practise on data you can't afford to lose. Your first-ever recovery attempt should not be on the only copy of something that matters, because every failed attempt, every extra hour a failing drive spends powered on, lowers the odds of the next attempt working. With irreplaceable data, the cheapest option is the one that works the first time.
The real lesson: this page shouldn't need to exist
Every recovery job starts the same way: a single copy of something important, and a bad day. A backup turns this entire page into a non-event. Delete the wrong folder? Restore it. Drive dies? Restore to a new one and get on with your day. Recovery is a gamble with odds set by physics; a backup that actually restores is boring, and boring is exactly what you want your data to be. If today's scare ends well, spend the relief on setting one up, two copies on different devices, one off-site, tested with a real restore, before the next bad day picks the file you can't replace.
Questions people ask
I deleted files by accident. Can I get them back?
Usually, yes, if you stop using the drive straight away. Deletion removes the index entry, not the data, so the files sit there until something overwrites them. Stop writing to the drive, run recovery software from a different drive or machine, and recover to a separate disk. On an SSD the window is much shorter because of TRIM.
My hard drive is not detected. What should I do?
Check the simple things once: a different cable, a different port, a different machine. If it still does not show up, or shows up and then vanishes, stop there. Repeated power cycles on a faulty drive make things worse. Note exactly what it does and get advice before trying anything else.
My drive is clicking. Should I try the freezer trick?
No. Freezing a modern drive adds condensation and mechanical stress and usually finishes it off. Clicking means a physical fault, so every power-on risks more damage. Power it off, leave it off, and treat it as a professional recovery job.
Are deleted files recoverable from an SSD?
Often not. Modern systems send a TRIM command on delete that lets the SSD erase those blocks within minutes, so the undelete approach that works on hard drives usually fails on SSDs. It is still worth stopping and checking straight away, but be realistic about the odds.
When is DIY recovery software fine?
When the drive is mechanically healthy, the loss is a deleted file or an accidental format, and the data is not irreplaceable. Install the software on a different drive and recover to a different drive. If the drive is making noises, throwing errors, or holds the only copy of something that matters, do not practise on it.
How do I make sure this never matters again?
A backup that actually restores. Two copies on different devices, one of them off-site or in the cloud, tested by doing a real restore. Once that is in place, a deleted file or a dead drive is a ten-minute restore instead of a recovery gamble.
Lost files right now?
Stop using the drive, then tell us what happened through the contact form. We'll tell you straight whether it's a software job, an imaging job, or one to stop touching.