| FinalRecovery :: Recover file from deleted/lost drive | 
|
Support Center |
|
|
|
Sales & Service Inquiry If you have any questions and concerns, please fill in the form below and we'll get back to you as soon as possible. |
In this section, we'll explain the principle of partition recovery, and the precondition of successful partition recovery.
 |
To purchase disk partition recovery, file undelete software, please click here.
A partition is a part of a hard disk drive. It is a container of logical drive. Operating systems can create logical drive inside a partition, and files and directories can be stored in created drive. The most widely used disk partitioning scheme is MBR partitioning. In this partitioning scheme, partition data is stored in partition table. The figure shown below is the main partition table of a hard disk drive.
| 1st partition entry | 2nd partition entry | |||
| 3rd partition entry | 4th partition entry | |||
| terminator |
Offset |
0 |
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
|||||||||||||||||
000001B0 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
01 |
|||||||||||||||||
000001C0 |
01 |
00 |
07 |
FE |
BF |
7C |
3F |
00 |
00 |
00 |
FE |
25 |
9C |
00 |
00 |
00 |
? | % | |||||||||||||||
000001D0 |
81 |
7D |
05 |
FE |
FF |
DA |
3D |
26 |
9C |
00 |
DE |
CB |
55 |
00 |
00 |
00 |
= | & | U | ||||||||||||||
000001E0 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
|||||||||||||||||
000001F0 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
00 |
55 |
AA |
U | ||||||||||||||||
By analyzing the first partition entry, we can know this partition starts from number 63 (0x3F) sector, and this is a NTFS partition because its file system flag is 0x07. We know a NTFS partition starts with a 512 bytes NTFS boot record. While first partition to be deleted, its partition entry will be cleared. So it is impossible to get the information of that deleted NTFS partition by analyzing the partition table. However, the data area (including NTFS boot record) of the partition is intact.
As mantioned above, the data area will keep intact while a partition to be deleted. FinalRecovery can scan hard disk drive to find the deleted partition. Once the partition was found, FinalRecovery's "Standard Scan" and "Advanced Scan" can be used to find files and directories on the partition.
FinalRecovery cannot find the lost partition if boot sector of the partition has be destroyed. Under this situation, lost files still can be recovered by using "Advanced Scan" or "Raw Recovery". Because "Advanced Scan" can guess parameters of the partition, and "Raw Recovery" can recover files independent of file system data at all.
 |
To learn how to recover files from deleted/lost partition, please click here. |
 |
To purchase partition recovery, file undelete software, please click here. |