What is Deleted Files?
When a file is deleted from a Windows computer the record for that file in the file-system index (the FAT or MFT) is marked to show that it is a deleted. The clusters on the drive where the data for the file is stored are now considered unallocated (i.e. available for new storage). At this point in time, the deleted file can easily be located by reading the file-system index record, locating the list of deleted files, and going to the clusters to recover the data.
However, continued use of a computer after a deletion will lead to new data being written to the hard drive. If new data is written to the drive it is possible that:
· The record in the file-system index is re-used for a new file. If this happens, the original file name is overwritten and destroyed as the file name is only stored in the index and not with the file data;
· One or more of the clusters used to store the original file could be re-used for new data. If this happens, the original file content could become corrupt or totally overwritten and destroyed.
It is for this reason that following a deletion or loss of files, use of the hard drive should be kept to a minimum to avoid new data being written to the drive and to maximize the possibility of recovery.
Data Trace Recovery is the solution for the above description.
Download site:http://www.datatous.com/download.php?sid=547
DataToUS Tech
www.datatous.com
没有评论:
发表评论