1. At a computer device configured for operating an operating system a method for handling a data object; the method comprising: operating an open function on said data object and receiving a pointer associated with a physical address of said data object, said operating being for providing access to said data object when said data object is deleted, said open function being a function of said operating system; monitoring said data object for detecting said deletion activity; receiving an event indicating said deletion activity; in response to said event, utilizing said pointer for accessing said physical address of said data object; and copying said data object from said physical address to a recycle bin, wherein said copying is only performed in response to said event; thereby enabling efficient restoring of said deleted data object.