Contents
Do you know that most of the data can be recovered , when it’s deleted from the device. This article includes how data can always be recovered and how data can be successfully deleted
The data is never truly gone. When a file is created or downloaded , firstly, it writes the actual data of the file on the hard drive platter . Second, it writes an entry in the file system. File system is a place where , it stores the name of the file and some basic information regarding it. Most of the OS will store a backup copy of the file. So that just in case if the file is deleted or corrupted also the backup copy will be available. Generally if a file is deleted then OS will only delete the reference to the file but it won’t delete the actual data. So this is the main principle that most of the data recovery software tools works on.
How to know that Data is really gone and it can’t be recovered once again ?
To make sure that data is really gone and it can’t be recovered, we have to overwrite the actual data area where the file is stored. System does not retain the previous state trace once it has been overwritten. Data loss is a common occurrence in the present scenario. But with the help of Data recovery software, it is also possible. The deleted data can be recovered . When you delete the data it does not actually gets deleted, only the information where u stored will be removed.
Why can’t we recover data from an overwritten Hard drive?
The data recovery from overwritten Hard Drive is impossible as it is a irreversible process. The main reason behind this is , when we overwrite the data, we will re-magnetize the hard-drive magnetic domains. So we are physically eliminating the data formerly saved on the location. But a computer scientist named Gutmann has claimed that overwritten data can be recovered using the Magnetic Force Microscopy (MFM). He proposed that even if the data has been overwritten with all the zeros, a sensitive MFM will be able to read the small variations in the bits and can determine the former data.
How long Does Data Recovery Take ?
- A drive that is fully functional is much faster to recover data from than one that is severely damaged and must be repaired.
- Based on the cases like accidental deletion, formatting, viruses, ect . will generally be done within 48 hours in most of the cases. Drives needing hardware recovery will generally take 7-10 days. A drive that is fully functional is much faster to recover data from than one that is severely damaged must be repaired.
- It also depends on the Drive size too, like if it’s a 4TB drive then it takes around 20 hrs to perform a single scan.
- Functionality of Drive after repair will reduce its potential, some drives take a month or more to extract all data after some internal repairs.
What To Do When We Accidentally Delete Data:
If you regularly use a computer or a device then you’re bound to do it at some point in time, delete data unintentionally. It could be you accidentally selected the wrong files, folders, or emptied the recycle bin without realizing that there was something important in there. So here are some of the following basic steps to be followed, when accidentally data has been deleted.
- Immediately Stop Using and Shut Off the Computer (Without Shutting Down).
- Remove the Hard Drive.
- Clone the Hard Drive.
- Choose a Data Recovery Program Appropriate to Your File system .
- Extract the Recovered Data to A Different Hard Drive.
Process Undergone:
Even if you empty the recycle bin the data still exists on the hard drive, at least for a while. It’s important to understand how OS like Windows store data. All operating systems use a type of file-system which is essentially a directory where files are stored, their names, folder location, size, and other information. Also to protect against accidents, a backup copy of the files is also stored in most operating systems. When a file is deleted what’s actually deleted is the reference in the primary filesystem table. However the file itself is stored in a different location on the drive. After the entry in the filesystem is deleted, the OS now thinks that space is available and it can store another file in that location making recovery impossible.
That’s why it’s so important to immediately stop using the computer where the data was deleted. Also in most cases the secondary filesystem still contains the necessary information to properly identify the file. Just don’t wait too long, or the backup copy may be updated and the entry lost completely. Most data recovery software works by analyzing the file-system data to see what entries are in the secondary copy but not in the primary. Thus identifying them as deleted files. The higher end software can also perform a data area scan to identify lost files and folder structures that are no longer available in the filesystem. The files may not have their names and folder locations. But if you have time to sort through them, you’ll likely find what we’re looking for.
CONCLUSION:
The only main point to be considered is once the data is overwritten then it cannot be recovered. Both the software and service will also fail to recover the data in such cases. The solution to protect the data loss is by backup. And in case, if you don’t have a backup, then we have to go for a professional data recovery.
Next Reads:
How to Recover Permanently Deleted Files – (Disk Drill Recovery)
My name is Vemula Chandana. I am from Hyderabad , and currently pursuing my BTech degree in Electronics and Communication Engineering in Anurag University.