Design And Implementation Of File Recovery Based On NTFS File System

Along with the popularization of personal computers, electronic documentshave become an integral part of people’s work. If the electronic document has beenaccidentally deleted, or it is destroyed for other reasons, then, would have asignificant impact on the work and even serious consequences. This paper describethe file recovery program can solve this problem.This paper is based on the status of the field of data recovery at home andabroad, then describes the current situation at home and abroad, summarize datarecovery at home and abroad and some specific issues, combined with the actualdata recovery works on the design and implementation made the introduction, at thelast the program has been verified by testing the function of availability.The file recovery program on Windows platform is mainly based on NTFS(New Technology File System) file system, the file recovery program focuses on theNTFS file system format, and the data structure. The MFT (Master File Table) onNTFS file system is the core of the file recovery.In this paper, C++is used as the programming language for the NTFS filesystem to analyze the data collation. Depend on the results of these analyzes, theprogram can read the entries of the MFT data, then recover the file data. In thespecific program design, this paper also uses large memory block memorymanagement technology to reduce system memory fragmentation problems, theapplication of space data encoding technique to encode large data, the application ofthe most commonly used linear search to achieve high-speed data index.Through this program, user can select which disk partition to scan, user canquickly scan the hard disk partition which has been selected, and then select thedesired scan results, then quick and easy recover file datas. Through this programon many different types of file recovery test results, this program can meet vastmajority user’s requirement.