重要数据文件的恢复技术

Important Data File Restoring Technology

在进行硬盘数据恢复时,如果每次都从头到尾地进行扫描,需要耗费大量的时间,而且恢复的数据大部分是不需要的.为了节约时间提高效率,应对特定的重要数据文件进行恢复.论文从硬盘启动及文件读写的原理出发,分析文件被修改或删除时操作系统所做的操作,对比分析文件分配表(FAT)和文件目录表(FDT)在特定文件修改或删除时产生的变化,针对现有的数据恢复技术无法自动恢复不连续簇文件的问题,通过FAT表内连续簇的分布规律来进行特定文件恢复,并在实验中进行验证.

During data recovery, it would cost a lot of time to scan from begin to end, and most of the recovered data would be not required. Restoring the particular data files can be useful to save time and improve efficiency. Paper begins with presenting the principle of file reading and writing, and analyzes the OS’ actions when the file is modified or deleted, as well as the changes of the File Associate Table （FAT） and File Directory Table （FDT）. Aiming at the problem that the current data recovery method is not in effect for the lost files without continuous clusters, we can do the job for the particular file according to its clusters’ distribution characteristics, and paper tests it in some experiment.