What should I pay attention to when recovering U disk accidentally deleted data

U disk data has been accidentally deleted by mistake. What should I do? Use data recovery software to recover it. Remind you to pay attention to the following items before recovery, otherwise it will not be recovered.

First, don't format the partition again. After the user formats the partition for the first time, the partition type changes, resulting in data loss, such as the original FAT32 partition into an NTFS partition, or the original NTFS partition formatted into a FAT32 partition. After the data is lost, the original directory format cannot be scanned by the general software, and the partition is formatted again to the original type, and then the data is scanned. We pointed out that the original partition type of the second format is a serious error operation, it is likely to destroy some large files that could be recovered, resulting in permanent unrecoverable.

Second, do not restore the data directly to the source disk. After many users delete the files, the files recovered by the general software are directly restored to the original directory, so the possibility of destroying the original data is very large, so it is strictly prohibited to directly restore to the source disk.

Third, do not rebuild the partition operation. After the partition table is destroyed or the partition is deleted, if the partition table reconstruction tool is directly used to directly create or format the partition, it is easy to destroy the important area such as the file allocation table (FAT) or the file record table (MFT) of the original partition, which makes the recovery difficult. greatly increase. In the practice of recovery, we encountered many times after the customer destroyed the partition table. First, we tried several partition tools and could not recover the data. Then we tried to find a professional help. As a result, we found that after using various partition tools, Some important directory files are destroyed, resulting in incomplete file directory recovery, and some large files cannot be recovered. It is a pity that these files can be fully recovered in the case of the initial partition loss described by the customer. Professional data recovery personnel will first locate the specific location of the partition (logical sector number) before rebuilding the partition table, and then use the sector view tool to check several important parameters of the partition such as DBR/FAT/FDT/MFT, etc. Modify the partition table, and after modifying the partition table, the system will be prohibited from doing dskchk to destroy the partition directory during the system startup process to ensure that the data will not be destroyed.

Fourth, in the process of data recovery, do not cause secondary damage to the data, or the difficulty of recovery is steep. During the data recovery process, it is forbidden to write new data to the source disk.

V. Do not do DskChk disk check. After the error occurs in the general file system, when the system boots into the startup screen, it will automatically prompt whether it needs to do the disk check. By default, the DskChk disk check operation starts after 10 seconds. This operation can sometimes repair some small damaged directory files, but many times it will Destroyed the data. It cannot be fixed because of the complicated directory structure. After the repair fails, a directory such as FOUND.000 is formed in the root directory, and there are a large number of files with a .CHK extension. Sometimes these files can be restored by changing their names. Sometimes they are finished, especially the FAT32 partition or the larger database files of NTFS.

6. Do not redo the array after the array is lost. In the practice of saving server arrays, we encountered some network management forces forced the array to go online after the server crashed, even if the dropped hard disk is forced to go online, or directly rebuilding. These operations are very dangerous, and any operation written to the disk can destroy the data.

VII. After the data is lost, it is strictly forbidden to save new files in the partition that needs to be restored. It is best to turn off the download tool, not to go online, unnecessary applications are turned off, and then scan to recover data. If the partition to be restored is the system partition, if the data file is deleted, if there is no important data such as database in the computer, we suggest that you power off the computer directly, and then hang the hard disk to another computer to recover, because When the computer is turned off or turned on, the operating system will write data to the system disk, which may destroy the data.