Research On Data Recovery Of Advanced Formatted NTFS File System

With the rapid development of computer applications, the importance of information and data more obvious. Loss of important data tend to cause great losses. Therefore, the data problems, how to maximize the recovery of data became an urgent need to address the problem.Around the NTFS file system data recovery done some research, I put forward a more complete high-level formatted file recovery methods.(1) script-based repair$MFT data recovery, formatted for high-level format the partition,$MFT is cleared causes the operating system can not locate the files on the partition, restore the$MFTdirectly through winhex or use the chkdsk command to restore the data. The innovation lies in the fact that the usually high-level format recovery method is slower than the proposed method is not only fast and accurate script to restore only the$MFT single record, you can quickly recover lost data.(2) damaged by the secondary partition, the partition of actual damage may be serious, can not recover the files, traces of the search the way to recovery data. Some files in the storage of text in accordance with a certain format to store, so it can be a keyword query to re-restore these files. The usual way is to search for traces of the file level, according to the characteristics of the file format itself to restore the file. In this paper, the way is to restore date according to its data format.