Winhex Data recovery under fat

I built a file Abc.word on my own USB stick and then deleted

Two · Open the disk you want to restore with Winhex

This is a U-disk I: Press OK to open it

Three. Come to its root directory

Four · Find the file name, locate the files directory entry

File start cluster number:5d80 decimal:23936

File size: 9a00 decimal : 39424 bytes converted to sector number: 39424/512=77

Five · Jump to file Data cluster 23936

After determining

Six • Restore files to a new file

1. Right-click on the first byte and select "Start position of block", which is D

2. Add the file consumption sector size to the sector where the file data is located 77+207856= 20165207933

4. Jump to 207933 sector at the end of the sector, right-click to select "Block Tail"

5. Right-click Edit, copy selection, and to a new file, pop up a dialog box, modify the suffix named Doc to save

Of course, I'm just talking about the basis, the end of the file should be 00 00 00 and the like, but if there is file fragmentation, the file will not be used in a continuous way. You need to find multiple selections and then merge. When you press Shift+delete to completely delete, the file high-temperature address cluster, that is, the above figure in the first cluster two bytes 00 00, will be cleared, the above low is 5d80. You need to find a file that has a similar date, and then try to borrow its high position.

Winhex Data recovery under fat