finalrecovery.com
web


Online Support Chat


Sales & Service Inquiry

If you have any questions and concerns, please fill in the form below and we'll get back to you as soon as possible.

Subject:

Email:

Product Name:

Specific Questions:

Recover file from deleted/lost disk partition

In this section, we'll explain the principle of partition recovery, and the precondition of successful partition recovery.

To purchase disk partition recovery, file undelete software, please click here.

What is partition? What happened while a partition was deleted?

A partition is a part of a hard disk drive. It is a container of logical drive. Operating systems can create logical drive inside a partition, and files and directories can be stored in created drive. The most widely used disk partitioning scheme is MBR partitioning. In this partitioning scheme, partition data is stored in partition table. The figure shown below is the main partition table of a hard disk drive.

  1st partition entry     2nd partition entry
  3rd partition entry     4th partition entry
  terminator      

 

Offset
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
   
000001B0
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
01
                                 
000001C0
01
00
07
FE
BF
7C
3F
00
00
00
FE
25
9C
00
00
00
              ?         %        
000001D0
81
7D
05
FE
FF
DA
3D
26
9C
00
DE
CB
55
00
00
00
              = &         U      
000001E0
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
                                 
000001F0
00
00
00
00
00
00
00
00
00
00
00
00
00
00
55
AA
                              U  

By analyzing the first partition entry, we can know this partition starts from number 63 (0x3F) sector, and this is a NTFS partition because its file system flag is 0x07. We know a NTFS partition starts with a 512 bytes NTFS boot record. While first partition to be deleted, its partition entry will be cleared. So it is impossible to get the information of that deleted NTFS partition by analyzing the partition table. However, the data area (including NTFS boot record) of the partition is intact.

How to recover files from lost/deleted partition?

As mantioned above, the data area will keep intact while a partition to be deleted. FinalRecovery can scan hard disk drive to find the deleted partition. Once the partition was found, FinalRecovery's "Standard Scan" and "Advanced Scan" can be used to find files and directories on the partition.

FinalRecovery cannot find the lost partition if boot sector of the partition has be destroyed. Under this situation, lost files still can be recovered by using "Advanced Scan" or "Raw Recovery". Because "Advanced Scan" can guess parameters of the partition, and "Raw Recovery" can recover files independent of file system data at all.

 

To learn how to recover files from deleted/lost partition, please click here.
To purchase partition recovery, file undelete software, please click here.