All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: Why some files can't recovered?
PostPosted: January 18th, 2017, 10:27 
Offline

Joined: September 24th, 2014, 15:11
Posts: 187
Location: on the space
Hello.
I have a questions. As I know regular format not remove anything and my questions is that if regular format can't remove anything then why a partition formatted and no files or...copied in it still some files can't recovered?
Please tell me if I wrong.

Thank you.


Top
 Profile  
 
 Post subject: Re: Why some files can't recovered?
PostPosted: January 20th, 2017, 4:14 
Offline

Joined: September 24th, 2014, 15:11
Posts: 187
Location: on the space
Any idea?


Top
 Profile  
 
 Post subject: Re: Why some files can't recovered?
PostPosted: January 20th, 2017, 6:05 
Offline

Joined: August 13th, 2016, 17:10
Posts: 193
Location: Vienna, Austria
It is a bit hard to understand your question. Could you explain your question in more detail? If english is not your native language, perhaps also write the question in your native language?


Top
 Profile  
 
 Post subject: Re: Why some files can't recovered?
PostPosted: January 21st, 2017, 3:53 
Offline

Joined: September 24th, 2014, 15:11
Posts: 187
Location: on the space
sourcerer wrote:
It is a bit hard to understand your question. Could you explain your question in more detail? If english is not your native language, perhaps also write the question in your native language?


Consider a partition that formatted via windows formatting tool and not file copied to the partition. When you recovered the partition then some files can't recovered. why?


Top
 Profile  
 
 Post subject: Re: Why some files can't recovered?
PostPosted: January 21st, 2017, 16:11 
Offline

Joined: August 13th, 2016, 17:10
Posts: 193
Location: Vienna, Austria
The FAT and NTFS filesystems which are used by Windows can use most of the partition space both for data and meta-data (directories, allocation table, ...). Therefore, formatting can also destroy some meta-data.
With a FAT filesystem, I guess you mostly loose the file-allocation table at the beginning of the partition, which contains the information how the blocks of a file are chained together. If you do not have any fragmentation, and you can recognize the beginning and end of the fileformats, then some tools can recover that, but if you have fragmentation (the blocks are not consecutive), you have lost the information which blocks belong together to a file.
If I remember correctly, it could be even worse with NTFS, because the meta-data is always spread across the whole partition.
Perhaps the graphs on page 29 explain it better: https://www.kernel.org/doc/ols/2011/ols2011-suzaki.pdf


Top
 Profile  
 
 Post subject: Re: Why some files can't recovered?
PostPosted: January 23rd, 2017, 5:18 
Offline

Joined: September 24th, 2014, 15:11
Posts: 187
Location: on the space
sourcerer wrote:
The FAT and NTFS filesystems which are used by Windows can use most of the partition space both for data and meta-data (directories, allocation table, ...). Therefore, formatting can also destroy some meta-data.
With a FAT filesystem, I guess you mostly loose the file-allocation table at the beginning of the partition, which contains the information how the blocks of a file are chained together. If you do not have any fragmentation, and you can recognize the beginning and end of the fileformats, then some tools can recover that, but if you have fragmentation (the blocks are not consecutive), you have lost the information which blocks belong together to a file.
If I remember correctly, it could be even worse with NTFS, because the meta-data is always spread across the whole partition.
Perhaps the graphs on page 29 explain it better: https://www.kernel.org/doc/ols/2011/ols2011-suzaki.pdf


But, someone said that Formatting never remove anything.


Top
 Profile  
 
 Post subject: Re: Why some files can't recovered?
PostPosted: January 23rd, 2017, 6:19 
Offline

Joined: August 13th, 2016, 17:10
Posts: 193
Location: Vienna, Austria
Formatting does not overwrite much, but it does overwrite some things. So you should not rely on formatting to really delete your data, but you should also not rely on formatting to preserve your data in a recoverable state. It's not all black or white, it's gray ...


Top
 Profile  
 
 Post subject: Re: Why some files can't recovered?
PostPosted: January 24th, 2017, 2:05 
Offline

Joined: September 24th, 2014, 15:11
Posts: 187
Location: on the space
sourcerer wrote:
Formatting does not overwrite much, but it does overwrite some things. So you should not rely on formatting to really delete your data, but you should also not rely on formatting to preserve your data in a recoverable state. It's not all black or white, it's gray ...

I can't understand. If it is not remove anything then why Metadata is corrupted and if it is remove everything then why you can recover?


Top
 Profile  
 
 Post subject: Re: Why some files can't recovered?
PostPosted: January 24th, 2017, 2:43 
Offline

Joined: August 13th, 2016, 17:10
Posts: 193
Location: Vienna, Austria
It overwrites some things. You can still recover some things, but some things are overwritten.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 34 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group