Welcome to my “The hard drive recovery process.”
blog about SSD and hard disks, as well as programs for their maintenance. Here you will find reviews of the most interesting gadgets, news from the battlefield HDD vs SSD, a lot of descriptions of programs with step-by-step instructions.
In the article, data recovery from the hard disk, we will consider the situation when the disk is not visible by the standard means of the operating system, that is, it is corrupted, but damaged at a logical level.
If everything is bad with the disk, it can not be recognized by the programs described in this article below, apparently problems at the "iron" level, then you can resort to the help of the MHDD program, how to use it You can learn by reading the article instructions (in steps) , but please note that this program will restore the working capacity of HDD without saving data.
If the situation is simpler, the hard disk is recognized by the operating system, but you just accidentally deleted the files, in this case, the deleted file recovery article will help you in which there is a data recovery experiment, the r.lab repair program r.saver.
Also, if you have any questions about data recovery, please visit the data recovery section of our blog hard disk, which contains articles, videos, and experiments to restore data from various media. But back to the topic of our article, data recovery from a failed hard disk ...
Why is it possible to recover data from a hard disk
Recover data that is not visible on the hard drive, it is real. Data that is for some reason not visible by standard means of the conductor, or which are deleted and no new information is written on top of them, are subject to recovery. The essence of data deletion is the change in the status of the information block. Physically, data is not erased when deleted. Therefore, if new information is not written on top of the block with the status "deleted," information recovery is possible, and consists in changing the status of the block to "not deleted".
Briefly, the HDD device and the write principle
The modern hard disk (HDD) is structurally composed of five parts:
Integrated circuit;
Electromotor;
Rocker arm;
Housing;
Disks.
If everything is bad with the disk, it can not be recognized by the programs described in this article below, apparently problems at the "iron" level, then you can resort to the help of the MHDD program, how to use it You can learn by reading the article instructions (in steps) , but please note that this program will restore the working capacity of HDD without saving data.
If the situation is simpler, the hard disk is recognized by the operating system, but you just accidentally deleted the files, in this case, the deleted file recovery article will help you in which there is a data recovery experiment, the r.lab repair program r.saver.
Also, if you have any questions about data recovery, please visit the data recovery section of our blog hard disk, which contains articles, videos, and experiments to restore data from various media. But back to the topic of our article, data recovery from a failed hard disk ...
Why is it possible to recover data from a hard disk
Recover data that is not visible on the hard drive, it is real. Data that is for some reason not visible by standard means of the conductor, or which are deleted and no new information is written on top of them, are subject to recovery. The essence of data deletion is the change in the status of the information block. Physically, data is not erased when deleted. Therefore, if new information is not written on top of the block with the status "deleted," information recovery is possible, and consists in changing the status of the block to "not deleted".
Briefly, the HDD device and the write principle
The modern hard disk (HDD) is structurally composed of five parts:
Integrated circuit;
Electromotor;
Rocker arm;
Housing;
Disks.
The integrated circuit is a generalizing element of the HDD. It synchronizes all of its parts and allows you to access information on requests. The development of modern electronics allowed to create a small-scale microcircuit that allows controlling the process of reading/writing information organizes the responses of the hard disk to requests for information from outside.
The electric motor serves to rotate the discs into which the information is recorded. Modern HDD allows you to maintain a speed of more than 7200 rpm. The higher the rotation speed, the faster the response from the hard disk when requesting information.
The rocker arm contains several heads at its end, according to the number of disks. The head can read the recorded information, it can record a new one. The process of recording is fairly simple. It consists in magnetizing / demagnetizing the disk surface with a magnetic head that moves above it. The process of recording takes a few seconds (it all depends on the amount of information, it is clear that a large amount will be recorded for longer than, for example, one file with text).
Discs are those elements that actually store information. Their surface is covered with a magnetic film. At the factory, the disks are divided into separate tracks, and each track is divided into sectors. A markup map stored in the HDD allows the head to move quickly and accurately to the desired sector where the required information will be stored. The file table is one of the most important elements of the hard disk. If it is damaged, it will lose access to all information written on the drive, despite the fact that the data remains undamaged.
To protect disks from physical threats, a special design of the hard drive case is thought out. The case not only protects the data on the disk upon impact but also to some extent preserves the information under the electromagnetic influence.
Depending on the type of computer system for HDD different requirements are put forward. For example, for a desktop computer, the speed and capacity of the drive will be the first. In the case of mobile computer systems (netbooks, laptops, etc.), the size of the hard disk and its security come first. This is due to the fact that mobile computers are more likely than static ones to be impacted and exposed to various radiations. Thus, the requirements for the hull will be more stringent.
Where are the deleted files stored?
Quite common is the situation when the necessary files disappear from the hard drive. Do not panic if the disappearance of files is caused not by mechanical damage to HDD - there is a solution. The deleted files physically remain on the same place in the HDD drive. The only difference from not deleted is the status 0 in the file table, which indicates that the files are deleted from the file system. When files disappear, it is strictly prohibited to write to the hard disk. First, you need to analyze the file table using a special software, and if the files have not already been erased, then using the special hard disk recovery programs you can return them.
What you can not do when restoring data.
When the main reason that can lead to irretrievable deletion of files is clear, several recommendations should be made concerning what actions to commit are undesirable:
Reading, writing, deleting files on the media where the data loss occurred: this can lead to a complete irretrievable loss of information;
The media on which information will be restored should be connected to another computer as a non-primary data storage medium;
If the operating system prompts you to perform any action with the hard disk (recovery, defragmentation, etc.), it should be rejected. Defragmentation will uniquely make deleted files destroyed forever. After all, when you run it, you work with the file table and the "free space" on your hard drive. When restoring data, you should specify the location to which the recovered information will be written, the third-party keeper, since It can also overwrite the file table, destroying the remote permanently.
Separately, you should pay attention to the fact that even loading a file system can damage deleted files. The fact is that when you start the computer and start the file system, a paging file is created, which increases the speed of the computer system. This file is created on the free disk space of the HDD. If it is created, the deleted files on top of which the file will be located will be permanently lost.
The process of recovering data from a hard disk.
Create an image in the sectoral mode.
To ensure the recovery of data lost on the hard disk, you should create its image and perform all the work on restoring information directly with it. In this case, all malfunctions that may occur with the data during the processing do not affect the primary media.
Quite common is the situation when the necessary files disappear from the hard drive. Do not panic if the disappearance of files is caused not by mechanical damage to HDD - there is a solution. The deleted files physically remain on the same place in the HDD drive. The only difference from not deleted is the status 0 in the file table, which indicates that the files are deleted from the file system. When files disappear, it is strictly prohibited to write to the hard disk. First, you need to analyze the file table using a special software, and if the files have not already been erased, then using the special hard disk recovery programs you can return them.
What you can not do when restoring data.
When the main reason that can lead to irretrievable deletion of files is clear, several recommendations should be made concerning what actions to commit are undesirable:
Reading, writing, deleting files on the media where the data loss occurred: this can lead to a complete irretrievable loss of information;
The media on which information will be restored should be connected to another computer as a non-primary data storage medium;
If the operating system prompts you to perform any action with the hard disk (recovery, defragmentation, etc.), it should be rejected. Defragmentation will uniquely make deleted files destroyed forever. After all, when you run it, you work with the file table and the "free space" on your hard drive. When restoring data, you should specify the location to which the recovered information will be written, the third-party keeper, since It can also overwrite the file table, destroying the remote permanently.
Separately, you should pay attention to the fact that even loading a file system can damage deleted files. The fact is that when you start the computer and start the file system, a paging file is created, which increases the speed of the computer system. This file is created on the free disk space of the HDD. If it is created, the deleted files on top of which the file will be located will be permanently lost.
The process of recovering data from a hard disk.
Create an image in the sectoral mode.
To ensure the recovery of data lost on the hard disk, you should create its image and perform all the work on restoring information directly with it. In this case, all malfunctions that may occur with the data during the processing do not affect the primary media.
The most suitable software for creating a disk image is the TrueImage program from Acronis. The program can be purchased on the company's website. The cost of the program is an order of magnitude lower than the cost of software to restore information. This shows that it is much cheaper to prevent unforeseen situations than to later restore.
No comments:
Post a Comment