Deleted file recovery program using C C++

windows file-recovery
Abdul Sami picture Abdul Sami · Sep 28, 2010 · Viewed 16.3k times · Source

I want to write a program that can recover deleted files from hard drive ( FAT32/NTFS partition Windows). I don't know where to start from. What should be the starting point of this? What should i read to pursue this? Help is required. Which system level structs should i study?

Answer

Michael Borgwardt picture Michael Borgwardt · Sep 28, 2010

It's entirely a matter of the filesystem layout, how a "file" actually looks on disk, and what remains when a file is deleted. As such, pretty much all you need to understand is the filesystem spec (for each and every filesystem you want to support), and how to get direct block-level access to the HD data. It might be possible to reuse some code from existing filesystem drivers, but it will need to be modified to process structures that, from the point of view of the filesystem, are gone.

Related questions

how can i recover windows chk-files extensions in linux bash

After a scan disk i have a lot of CHK-files in folders like "found.000", ... I can find out the extensions with the file command: for i in /media/Daten/found.*/*.chk ; do file $i; done how can I use this …

Read More
How can you find out which process is listening on a port on Windows?

How can you find out which process is listening on a port on Windows?

Read More
How can I install pip on Windows?

pip is a replacement for easy_install. But should I install pip using easy_install on Windows? Is there a better way?

Read More