Deleted file recovery method and system based on fat32 file system

Abstract

The invention discloses a method and system for recovering deleted files based on the FAT32 file system. By reading each directory item R i The FDT information forms the first root directory FDT information set; to the first root directory FDT information set F DT S={R 1 , R 2 ,...,R N} in each directory entry R i The FDT information is parsed, and the current directory item R is parsed out i The attributes of the FDT information, and determine each directory entry R in the first root directory FDT information set according to the attributes i Represents the directory entry of a file or a folder; calculate the directory entry R i The starting sector number of the current file is obtained, and the actual physical location of the current file is obtained, and the current file directory item R is recursively parsed i information; the directory entry R of all directories in the current file system has been parsed i The FDT information to get the actual physical location of the current file or folder and the directory entry R i Information. In addition, the high-level algorithm of FDT clusters dynamically calculated by combining file characteristics and the high-level algorithm of FDT clusters dynamically calculated by combining the characteristics of directory items and information matching are used to effectively realize the rapid recovery of deleted files.

Description

technical field [0001] The invention relates to the technical field of computer data recovery, in particular to a method and system for recovering deleted files based on the FAT32 file system. Background technique [0002] The FAT32 file system is one of the most widely used file systems in the Windows operating system, and it is used more on storage media such as SD cards and U disks. The FAT32 file system consists of a reserved sector (DBR), a file allocation table area (FAT), a root directory area (ROOT) and a data area (DATA); the reserved sector is located at the starting position of the FAT32 file system, and the first reserved sector The first sector is the DOS boot record of the FAT32 file system, that is, DBR, which stores the cluster size, number of reserved sectors, total number of sectors, starting position of the root directory, size and number of the FAT table, etc. of the FAT32 file system on the disk. Information; the FAT table is used to describe the alloca...

AI Technical Summary

Problems solved by technology

[0007] As mentioned above, for a deleted folder, the cluster high bit of the directory item will be cleared when the file is deleted, resulting in the direct parsing of the deleted folder directory item and the location of the subfolder cannot be correctly located, resulting in the actual restored directory may be incomplete Problem, the present invention proposes a kind of deleted file recovery method based on FAT32 file system, comprises the following steps:

Images