What Happens When A File Is Written To A Hard Drive
When a file is written to a hard drive, two separate systems come into play:
- Record of that file is kept in the Root Table or Master File Table (MFT)
- Physical hard drive addresses are labeled as 'occupied'. These addresses are physical locations called clusters.
When file is deleted from a hard drive, the same two systems are notified:
- The file record in the Root Table or MFT indicates the file has been deleted.
- Clusters are labeled as 'unoccupied'.
In the event of an accidental file deletion it is strongly recommended to perform the recovery operation as soon as possible. If any new files are written to the same drive, there is a chance that the file-writing process may have allocated these
Important
PROTECT THE DRIVE LOCATION WHERE YOU HAVE
ACCIDENTALLY DELETED FILES.
Any program that writes data to the disk, even the installation of data
recovery software can spoil your sensitive data.
DO NOT SAVE DATA ONTO THE SAME DRIVE THAT YOU FOUND
ERASED DATA, WHICH YOU ARE TRYING TO RECOVER!
While saving recovered data onto the same drive where sensitive data was
located, you can spoil the process of recovering by overwriting table
records for this and other deleted entries. It is better to save data
onto another logical, removable, network or floppy drive.
IF YOU HAVE AN EXTRA HARD DRIVE, OR OTHER LOGICAL
DRIVES THAT ARE BIG ENOUGH, CREATE A DISK IMAGE.
A Disk Image is a single-file mirror copy of the contents of your
logical drive. Backing up the contents of the whole drive - including
deleted data - is a good safety precaution in case of failed recovery.
Before you start recovering deleted files, create a Disk Image for this
drive.
Visit our Help and Tips Forum to ask any troubleshooting questions.
Visit our new Repairspot FAQs Page.
Back to Help and Tips
Looking for a book on computers?
Search here at abebooks.com!
 |
 |
|
|
Looking for some software to help you recover files or operating system?
Here is some of the recovery software found on Ebay?