The Data Recovery Mechanism Based On Windows Platform Research And Implementation

With development of technology, computer has become one of the irreplaceable parts in people’s daily life. The use of computer has brought us with great convenience. However, computer is also a double-edged sword simultaneously.It not only brings us with convenience, but also destroys our important information and data by some accidents or unexpected errors. So, data recovery has become a popular technology Data recovery is a process that technical methods are used to recover and rescue those lost data which are saved in the hard disk or a mobile device. Therefore, data recovery is meaningful for the protection of user data.The data recovery technology is a key technology in computer forensics. At present, the data recovery technology also analyzed from multiple perspectives, such as the destruction of the DBR sector, disk formatting, accidentally deleted, etc. Through testing different data recovery softwares, these tools have some inadequacies. Since most of the users use Windows operating system, we will choose Windows in this issue. Here we will further study the storage theories of FAT and NTFS systems where files store and methods of how to recover the file data after being formatted or accidently deleted in these two systems. We will study how to correctly recover file names, file paths and file contents after they are accidently deleted. Based thoses weaknesses, this paper will do some improvements, first, recovery the right name of deleted files through statistics; then, recovery those carved piece of files through sort mehtod. At the same time, as data recovery is the most effective method that guaranteed to protect data in the last step, we will also explain the significance of backup for avoiding data loss.At last, through testing the system and make some comparative analysis with related tools, we can verify that the system has achieved the desired effect of this thesis.