Concept:
whenstorage Mediainjury or due to a person's misoperation,Operating Systemcaused by the failure of itselfDatainvisible, unreadable, lost. The project teacher reads data that is not visible, unreadable, or unreadable in a normal state through special means.
Principle:
in reality, very many people do not know the deletion, formatting and other hard disk operations lost data can be restored, the deletion, formatting after the data will not exist. In fact, the above simple operation after the data still exist in the hard disk, understand the knowledge of the principle of data recovery only a few seconds to get the lost data back, do not think it is inconceivable, in understanding the data on the hard disk, USB, floppy disk and Other media storage principle, You can also be a magician yourself .
Specific principle Analysis:PartitioningThe base unit of the hard disk storage data is the sector. We can understand a page of a book. When we installed or bought a mobile hard disk, the first step is to facilitate management-partition.
No matter what partitioning tool is used. The number of partitions on the hard disk, the size of each partition, the starting position, and so on will be marked on the first sector of the hard disk. The term is called the Master Boot Record (MBR). Also known as the partition information table. When the master boot record for various reasons (hard drive bad, virus, misoperation, etc.) is destroyed, some or all of the partition will naturally be lost, according to data information characteristics, we can again calculate the size and location of the partition, manually labeled to the Partition information table, "Lost" partition back. file allocation table in order to manage file storage, after the hard disk partition is complete, the next task is to format the partition.
The formatter divides the partition into a folder file allocation area and data area according to the partition size, just like we read the novel. The first few pages are chapter folders. The real content is behind it. The file allocation table records the attributes, size, and location of each file in the data area. Our operations on all files are based on the file allocation table. After the file allocation table has been compromised, the system cannot locate the file. Although the actual content of each file is still stored in the data area, the system will still feel that the file does not exist. Our data is lost, just like the folder of a novel is torn down.
To go directly to the desired chapter, it is impossible to get what you want (to recover the data), only to know the approximate number of pages in detail by memory. or each page (sector) to find the content you want. Our data can also be restored back. When we store files to the hard disk, the system first writes the file name, size, and then continues to write the file contents in the data area from the file allocation table according to the spare space of the data area.
Then start writing the actual contents of the file to the data area. A file store operation is not complete. The delete operation is very simple, when we need to delete a file, the system simply writes a delete flag in the file allocation table before the file, indicating that the file has been deleted. The space occupied by him has been "released". Other files can use the space he occupies.
So. When we delete the file and want to retrieve it (data recovery), we just need the tool to remove the deletion flag and the data is restored.
Of course. If no new file is written, the space occupied by the file is not overwritten by the new content.
formatting formatting operations and deletions are similar, just manipulate the file allocation table, only the format is to add all the files are deleted flag, or simply empty the file allocation table, the system will feel that the hard disk partition does not exist whatever content. The format operation does not do anything to the data area, and the folder is empty. The content is still in the knowledge of data recovery and corresponding tools. The data can still be restored back. Note: Formatting is not 100% can be restored, in some cases the disk will not open, need to format talent open.
Assume that the data is important. Never try to recover after formatting. Because formatting itself is the process of writing to a disk. It only destroys the remaining information.
Overwrite data recovery The project teacher often says: "The data is likely to return if only the data is not overwritten." Because of the storage characteristics of the disk, when we do not need the data on the hard disk, the data is not taken away. When deleted, the system simply writes a delete flag on the file, and the formatting and low-level formatting also overwrite the data on the disk once again with the number 0 as the content, which is the overlay.
A file is flagged after the delete flag. The space he occupies when new files are written, it is possible for new files to be overwritten with new content.
The deleted file name is still in. But the space content he points to the data area has been overwritten, and the recovery will be something wrong.
The space occupied by the file information with the delete tag in the same file allocation table may also be overwritten by the new file name file information, and the file name will not exist. When a partition is formatted, there is a copy of the new content, the new data is only to overwrite the space in front of the partition, remove the space occupied by the new content, the remaining spatial data area of the partition is still possible to organize unordered content, the data recovery. Similarly. Cloning, one-click Recovery, System Restore and other data loss, only the new data occupy less space than the pre-destruction space capacity. It is possible for the data Recovery Project master to recover the partitions and data you want. plainly, the so-called delete format is to mark the current file, only the original area is not overwritten, the data can be retrieved.
3 ways to prevent data loss: 1. Never save your file data on the same drive disk of the operating system we know that most word processors will save the files you created in My Documents, but this is the least suitable place to save the files. For most computer problems that affect the operating system, whether due to a virus problem or a software failure problem. Usually the only workaround is to format the driver disk again or install the operating system again, assuming this is the case. All the things on the drive disk will be data lost.
Another relatively inexpensive solution is to install a second hard drive on your computer, and when the operating system is compromised, the second hard drive will not be affected, assuming you still need to buy a new computer, the hard drive can be installed on a new computer, and such a hard drive installation is easy.
Let's say you don't quite agree with the method of installing a second drive disk. Another great option is to purchase an external hard drive, which is easier to operate with an external drive. It can be used at any time, no matter what computer, but only need to insert it into Usbport or firewireport. 2. Regular backup of your file data, regardless of where they are stored in the operating system is not enough to save your files, you should save the file in a different location, and you need to create a regular backup of the file, so that we can guarantee the security of the file, regardless of whether your backup will fail: The disc may be damaged. The hard disk may be damaged, the floppy disk is erased, and so on. Suppose you want to make sure that you can remove files at any time. Then consider making two backups, assuming the data is important. You can even consider saving critical files at the fire layer. 3. Beware of user errors Although we do not want to admit it. But very often the data is lost due to our own problems. Be able to consider the use of safeguards in word processors. such as version number feature feature and tracking change. The most common case of user data loss is when they are editing a file. Accidentally delete some parts, then after the file is saved. The deleted part is lost. Unless you have enabled the ability to save file changes.
Assuming that you think those features are very cumbersome, then I recommend that you save the file as a different name before you start editing the file, which is not organized like any other method, but it is a good solution and can solve the problem of data loss.
Related Free software recommendations:
Easy I data recovery, Minitool, Xun long hard disk data recovery software, Data Recovery Wizard, easy to count photo recovery software. Aladdin data recovery software.
Note that software capabilities are limited, and if recovery fails, consider finding a professional for a specific test.
Those years we felt the incredible data recovery