Recovering Data

Represented by Houssem Dellai Ridha Thabet

Plan

1- Introduction 2- How data is saved? 3- How data is deleted? 4- How to recover data? 5- Some tips 6- Conclusion

Introduction
People uses their computers to add,modify and delete files. But sometimes,they could intentionally delete important files they really needs. Is there any solution to get their files back?

How data is saved?

Windows contains a list of all files stored on a computer in a table known as the Master File Table (MFT). The MFT contains just some information about the file.
myFile1(name,size,location,) myFile2(name,size,location,)

How data is saved?

The file is stored physically in clusters on the disk. The MFT is like the reference of all files.
MFT
myFile1(name,location,) myFile2(name,location,)

Disk
myFile1 myFile2

How data is deleted?

When a file is deleted from the cycle bin,the OS marks the file name in the MFT with a special character.
MFT
(*)myFile1(name,location,) myFile2(name,location,)

Disk
myFile1 myFile2

How data is deleted?

The OS now dont see myFile1 while it is still not erased on the disk, not even from the MFT!
MFT
(*)myFile1(name,location,) myFile2(name,location,)

Disk
myFile1 myFile2

How to recover data?

The MFT is still contain the location of the deleted file. So,a data recovery software can easily get back the deleted file from that location on the disk.

How to recover data?

Data recovery softwares

How to recover data?

But whats if the MFT was overwritten? In that case,the software will search on deleted files on the disk and try to recognise them to be able to recover them.

How to recover data?

And what is if the file on the disk was overwritten? Take it easy,your data could never be recovered!

How to recover data?

What is if the disk is physically damaged? There is a possibility to undelete your files,but you will have to give it to a technician using the clean-room. Thats expensive.

Some tips
Make extra copy of your important data. Make at least two partitions on your PC. Dont install or add any file whenever you want to recover data

Conclusion
Be carefull whenevr you delete any file specially from the cycle bin. Dont install the recovery software on the same partition where the deleted file or you can use a Linux distribution.

Thank you for your attention..