Thursday, 12 November 2015

How Formatted drives or Deleted files and folders are easily recovered from Hard disk ,Pen drive, Memory cards

In this post we are going to see why deleted files and folders are recovered from Hard disk and pendrive. Let we see first what are the different types of disk present. HDD and SSD are the two types present to store a data, 

HDD is the Hard disk Drive which have a plate of Disk coated with magnetic.


SSD is a Solid State Drive which doesn't have the plates to store the data instead it have a memory chips integrated with the board or separated.


All the Data are stored in the format of 1's and 0's.

Both the Drive are used to store the data.Now let we see how the operating system are works. Normally when ever users store a data in Drives, it will store the records  in the drive and make a entry in the Sectors table, about the Files and Folders, So File systesm have a pointer to each file in the sector table and have the information about the File like length, start index and end index, name etc

Whenever you give a delete to the File , Operating system checks the File in the Sector table and removes the pointer to the File,and mark the space for available for another write, so now what happens the data is actually present in the disk, but the Pointer to the data is removed from the sector, Again if some file are stored in the Computer now , operating system checks for the available space and make a entry to the Drive, if the storage space is marked for deleted, then it's overwrite the data and make a new entry in sector. Now the existing data is partially over written by another data.

There is a chance that sometimes  storage is not used by file system, so existing data will be available in Hard disk.Now if we have recover tool we can recover the whole data stored in Hard disk, What recover tool will do is read the drive information and gives data So every time if you don't want  others to recover your files from drive then delete it permanently,  

Now days some SSD have a trim concepts that is you cant recover the deleted data, because whenever deletion happens it removes the pointer as well as delete the storage by overwriting the data with empty spaces are full of Zero's.

Keep one thing in mind that Deletion also takes the almost same time as copying because it rewrite the every single block of storage.

Now days because of these reasons only many person's personnel information are recovered by third persons easily form there Hard disk, memory chips and pen drives, Because end users doesn't have knowledge of  concept of storing records in the Drives, so whenever they delete a file or folder , they thought it is deleted from disk or drive, but actually they doesn't that it is retained there in the blocks of actual storage,they doesn't know that only the pointer are removed from the sectors for that file . 

We can easily recover the data from the formatted Drive also, i am also recovered data from my formatted hard disk many times by myself. So Formatting drives also doesn't remove the records,it also can give back your stored data when you tried recover.

So every time while you delete a file or giving the Hard drive to others persons. Delete the data's permanently from the storage. Because it will safe for you as well as for confidential document like PDF, DOC, .music's , videos, etc .. every single block storage files can be recovered from  drives. because every data is 0's and 1's

Now most of the companies are providing the Recover software for the storage Drives while buying itself. From this post you may know why the deleted files are recovered easily from Hard drive or Pen drive or Memory sticks 

No comments:

Post a Comment