Geek Answers Handbook

How does the file recovery program work?

I wanted to make some simple file recovery programs where I want to try to recover files that were deleted by pressing Shift + Delete. I work on Windows, can someone show me any links or documents that can help me do this programmatically? I know C, C ++, .NET. Any pointers?

+6
windows
source share
3 answers

http://www.google.hu/search?q=file+recovery+theory&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a :)

Basically, file recovery looks for file headers and / or file names on disk, as I know, and then try to get the whole file from the header information.

This might be a good start: http://geeksaresexy.blogspot.com/2006/02/theory-behind-deleted-files-recovery.html

+5
source share

The principle of all recovery tools is that deleting a file removes only the pointer in the folder and (quick) formatting the partition only overwrites the first sectors of the partition that contains the file system headers. A deep analysis of partition data (at the sector level) can rebuild most of the file system data, cluster allocation tables, folders, and file cluster chains.

All courses, if you use a surface testing tool to format a section that will rewrite all sectors to make sure they are correct, nothing will be restored - unless you use specialized equipment to look at the residual magnetism at the edges of the actual track

0
source share

In windows, when a file is deleted (permanent deletion), it is not actually deleted from the disk, but the file name is added using char (_ I think) in front of it, and the windows ignore them when displayed in Explorer ... and recovery tools will look for these file names on disk. And your file restores integrity based on some data recorded at the location of the deleted file. I don’t know, this template is still used by windows .. but a long time ago I read it somewhere where

-one
source share

More articles:


All Articles