You can boot a Linux LiveCD and you will definitely be able to "test delete"
the pagefile on the disk in question. If Windows has a fixation with it,
Windows will re-create the pagefile soon after the system starts. The beauty
of Linux is (so far) they make light of the Windows rules for things. it is
a perfect maintenance environment, from that perspective.
It could be, even though Windows is not using the file, it has a file
attribute of "system" and that is why Windows will not allow you to delete it.
You could check the properties of the file, and see what can be arranged.
As far as I know, the pagefile settings are stored in the registry. You can
use regedit to verify the settings.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Memory Management
PagingFiles REG_MULTI_SZ <--- I think this means multiple strings
can be stored in there
C:\pagefile.sys 2046 4092 <--- My pagefile is still on C:
I have only one line stored in this
The recovery partition is probably supposed to be a "hidden" partition.
There is a trick, where they add "10" to the hex number for the partition
type, and that is supposed to tell Windows not to mount that partition.
You generally do not want any kind of fresh writes going to a partition
like that. It contains a copy of a "factory restore" for the computer.
I have even heard of cases, where people have managed to cause System Restore
to dump crap in there (restore points), if the partition is made visible.
0c WIN95 OSR2 FAT32, LBA-mapped
1c Hidden WIN95 OSR2 FAT32, LBA-mapped
That's not a rule you can apply blindly, it is just to illustrate the
tricks they apply to the partition type field. They really should not
do that, but that is the scheme applied in some cases, to hint to
the OS that it should not mount a partition. For example, it might not
prevent a Linux OS doing a scan to populate /etc/fstab, from looking in
there. Partition types can be determined by reading a partition, as
well as honoring the value stored in the type field.
Virtually the only way to stop software from meddling with SATA or IDE
disks, is to unplug them. I have tried all the other tricks (even disable in
BIOS does not work). If you must stop software from writing to one of
those disk types, unplugging the drive, always works... (With SCSI,
there used to be a write protect jumper, and that was absolute.)
To check the partition type field, you can use PTEDIT32, available free.
This is what the tool output looks like. The partition types are on the left.
The four primary partitions are shown in this example, and only three
entries are defined (the fourth is empty). The boot flag is set on the
second partition (typically important to Windows, but not to all OSes, as
this is a "hint" checked by the MBR bootstrap code).