The Principles of File Recovery



Contributed by Andrew Whitehead

Why File Recovery is Possible

File recovery is nearly always possible, if you spot the mistake and do something about it fast enough. Luckily, if you do mistakenly delete a file, the file has not been physically removed, the operating system just doesn't know where it is anymore. This is easier to understand once you realize that there is more to storing a file on your hard drive than just finding space for the information and writing it there.

The operating system must also keep track of where it put the file, without this it would be unable to find it again. When a file gets deleted, this record is altered and the disk area containing the information is marked as free space. The information itself remains intact until some other information is written over it.

The effect is similar to rubbing out the name of a video tape - you know you can use that tape now, but the original film is still on there until you do it, and should you change your mind you can do your own 'file recovery' by writing the name on the box again. Commercial file recovery programs do exactly the same trick with computer files.

File Recovery Programs

There is no shortage of file recovery software to help you out if you delete the wrong file. There are numerous commercial file recovery programs, DOS has its own 'Undelete' command, and Windows has the familiar Recycle Bin. Except for Recycle Bin, they all work on the same principle of searching the hard drive for files that have recently been marked for overwriting. More advanced ones will also tell you how much of the file is recoverable by checking how much has been written over.

The seemingly simple Recycle Bin has one advantage over any third party file recovery program: it doesn't allow any overwriting of deleted files stored in there. This means that files from here are recovered in their entirety, and will function exactly as before once they are restored.

Obstacles to File Recovery

The biggest obstacle by far is time. The longer you wait, the higher the chance of a deleted file being written over, unless it is safely in the Recycle Bin. Once this has happened file recovery is still possible but it will take a lot more than a bit of commercial software to do it.

Operating systems are continuously creating files, every web page you visit does the same, and so does every application you open. With this in mind, the time to start your file recovery process is the instant that you realize you needed that file.

If you are extremely security conscious enough to be running encryption software this will also reduce your chances of file recovery, as the majority of file recovery programs need to read the file to know it is there. If the encryption utility doesn't offer its own built-in undelete function then file recovery is going to be very difficult and very expensive.


very      not
 
Did you find this article helpful? 5 other readers gave it an average usefulness of 59.8%.
Tell us what you think!!

Discuss this Article   > >


Some Other Contributions by Andrew Whitehead

A Trip into the World of Computer Forensics (2005-08-08)  »

Computer forensics is the investigation and analysis of a suspects computer, to uncover evidence of a crime. For instance, theft of trade secrets, theft or destruction of intellectual property, or fraud.

Advantages and Problems with Online Backup Systems (2005-08-08)  »

Having an online backup system will save your day should your premises ever burn down, or the fireproof box containing your backup disks get stolen. The easiest means of backing up online is to set up a leased line to a remote server, and transfer da...

Alternate Site Disaster Recovery (2005-08-08)  »

In considering alternate site disaster recovery, the two main issues are the reconfiguring or rebuilding infrastructure, and moving data between the primary site and the alternate site.

Backup Software for Larger Systems (2005-08-08)  »

For a systems administrator, one of his most important roles is backing up, and being able to restore, the organizations data. When he chooses his backup software, to ensure that they meet his requirements he must evaluate the product's backup featur...

Backup Software Functions (2005-08-08)  »

It's probably true to say that most backup software applications available will do a reasonable job of making a backup. That does not mean that all backup software is created equal, and choosing the one that suits your requirements is worth spending ...

Backup to CD (2005-08-08)  »

If you have ever wondered about the importance of keeping a backup, imagine how you would feel if a virus destroyed the contents of your hard drive? Or a problem could only be solved by using a system recovery CD, wiping out all your data in the proc...

Basic Data Recovery (2005-08-07)  »

Have you ever wondered how much data is stored in your PC, and how much time and energy would go into its recovery? Your computer almost certainly contains a lot of personal data - financial data, names, addresses, and telephone numbers, bank account...

Brief Overview of Online Backup (2005-08-07)  »

Online backup is possibly the most convenient form of backing up files, leaving you with few excuses not to do it. Losing your files is something that is going to happen to you one day, not something that might happen, and if you do not backup your d...

Choosing Backup Media (2005-08-07)  »

Matching the capacity of the backup medium to the amount of data you intend to backup is very important, especially as hard disks capacities grow. The more disk or tape swaps required to perform a backup, the less likely it is that you will do it rou...

Computer Forensic: Siezing the Evidence (2005-08-07)  »

The computer forensic experts have to conform with many rules and regulations if the evidence they uncover is to be acceptable to the courts. The first step in obtaining computer forensic evidence is obtaining a search warrant to seize the suspect sy...

Get News and Updates


We respect your email privacy!
 
 
 
Free Website Monitor - A fantastic free site monitor service we're using. If you have a website or blog, this is gold! It watches your site 24/7 -- and sends you an SMS text message should your site go down. It's clean, simple and free! If you have a site, you need this website monitor. Take a minute and set it up for your site, you can thank me later.

Get News and Updates


We respect your email privacy!