Undelete Explained

A Backup Article Contributed by Ashley Lister

Undelete Explained

The undelete utility can be as simple as a command that retrieves a single file, or as complicated as a process that recovers an entire lost drive.

Undelete Has Been around for a long Time.

Since computer files were first created, the opportunity for accidentally deleting data has always been a risk. Even today, especially today, the risk of accidentally deleting a file runs high among users. On the majority of Windows system a warning appears prior to executing the delete, asking the operator if they are sure they want to go ahead with the delete process.

But, with a combination of complacency and arrogance, a great number of users will confirm this request and only afterwards realize they have made a mistake. It is on occasions like this that the undelete utility proves itself invaluable.

Undelete is for More Than Just Accidents.

The undelete function can be invaluable after a virus attack. There are plenty of malicious codes that attack computers and remove valuable files at random. In cases like this undelete can be a life saving function that retrieves lost data. Viruses alone aren't responsible for the majority of deleted files and malicious users can also cause irreparable damage to information. Fortunately, the undelete utility is able to make instant reparation.

Undelete Doesn't Always Work.

To take full advantage of the undelete facility a user has to understand a little about the process of how information is written and rewritten to a computer's hard drive. Information is stored in sectors which are gathered together in clusters. Each cluster could be part of a file or a whole file and its address will be listed in the computer's File Allocation Table (FAT). However, as soon as a file has been deleted, the cluster of sectors it used to occupy are immediately marked for reuse.

Any cluster of sectors that contained freshly deleted information is liable to be overwritten. It is because of this danger of overwriting that the undelete utility needs to be used as quickly as possible.

There is always the chance that, no matter how quickly a user employs the undelete command, the file might not be able to be retrieved. If the deletion isn't noticed straight away, or if any other file producing process has been going on since it was deleted, the information you're trying to retrieve might have been overwritten.

That is why it is imperative, if you are going to use undelete, you must use undelete as soon as you realize the file has been deleted.

Undelete can be a life saving utility that can restore information that you feared was lost for good. However, rather than rely on this clever routine as safety net, it is far more sensible to take regular backups, safeguard operating systems from virus attacks and the threat of malicious users, and always consider your response before confirming any delete command. Following those simple instructions could be enough to stop you from needing the undelete utility.