The common causes of data loss are
- Accidental removal of files and folders and then emptying Recycle Bin (~75%)
- After physical damage of critical sectors on HDD ("bad clusters") some drives become unreadable (~6%)
- Loss of information due to a power failure or power surge (~5%)
- Deletion of logical drive/partition itself then recalling important data on it (~3%)
- Damage of MBR, Partition Table, Volume Boot Sectors by virus (~3%)
- Other (~8%) ...
In a situation where data is damaged, there are generally two reasons:
- Original partition/drive has become invisible to Operating System (deleted or damaged or overwritten)
- Drive is visible but important files/folders are not visible (i.e. they have been deleted or overwritten)
In the first case recovery software must analyse the surface of the physical drive for residual logical data organisation clues in order to reconstruct partition/drive parameters (clues such as the first sector number, cluster size, file system type, etc.).
The user must have access to this virtual drive so that the lost data can be copied to another drive.
Partition Recovery Concepts
If the partition is not bootable, i.e. Microsoft Windows NT/2000/XP is unable to start, then choose a solution from the topics below.
- Partition/Drive Recovery
- MBR is damaged
- Partition is deleted or Partition Table is damaged
- Partition Boot Sector is damaged
- Missing or Corrupted system Files
File Recovery Concepts
If a file or folder was deleted from NTFS bypassing the Recycle Bin (or the Recycle Bin has been emptied after file deletion) the recovery software must have full access to the existing partition or drive.
The task is to scan the drive surface for the deleted file or folder entries in the Root Folder (FAT) or the Master File Table (NTFS). If such entries are found, UNERASER should display them and give the user an opportunity to save whatever is recoverable (that which has not been overwritten with other data).
Choose a solution from the topics below:
- File Recovery
- Disk Scan for deleted entries
- Defining clusters chain for the deleted entry
- Clusters chain recovery
