Hard Drive Recovery and File Undelete
A Backup Article Contributed by Ashley Lister
Hard Drive Recovery and File Undelete
Hard Drive Recovery and file undelete are two terms that have become synonymous in the fields of data recovery technology.
When the Need for Any Form of Hard Drive Recovery Occurs Action Needs to Be Taken Immediately. Whether a File Has Been Accidentally or Maliciously Deleted, or the System Has Suffered a Severe Interruption in Service, Swift Action is Always the Key to Making Proper Reparation.
The smallest unit of space on the hard drive is called a sector. Each of these sectors are usually 512 bytes in size and integer groups of sectors are referred to as clusters. Every file created is made up of one or more clusters. Initially, when files are first created, the clusters are located in contiguous positions on the hard drive. However as files grow larger, or are modified in some other way, the additional or replacement clusters can become fragmented.
This means they are located randomly on other parts of the drive. If a new file is created after an accidental delete, there is always a danger that one of these randomly located clusters might be overwritten with the new information.
File Allocation Tables (FATs) keep track of which clusters belong to which particular file but it is more difficult for them to operate when they are keeping track of files that are distributed over several "unconnected" clusters. Because of this, and because of the danger of overwriting in the case of an accidental delete, it is sensible to regularly run a defragmentation routine. This utility moves fragmented clusters of the same file back to contiguous locations on the hard drive.
Defragmentation utilities can be found on all Windows platforms and there are also several useful defrag softwares available for other operating systems.
During the Undelete Process, When Some Form of Hard Drive Recovery Has Become a Necessity, It is the Reinstatement of Clusters That is the Most Important Procedure.
Deleting a file does not automatically mean that it has been erased forever. Even when a file has been deleted from the hard drive, and even when it has been removed from the recycle bin in Windows, recovery of the "lost" information is still possible. The main stumbling block to recovering a deleted file is that one or more of its clusters might already have been overwritten by new information.
Matters become more complicated when folders are renamed or drive labels are reassigned, so it is important to remember these factors when there is a chance that needed information may have been inadvertently deleted.
This is why swift action is always of paramount importance. If a hard drive is badly fragmented there is a greater likelihood of one or more clusters being overwritten before an effective undelete operation can be undertaken. Under these circumstances the chances of recovery can become slim or even impossible.
