[SOLVED] how's the recovery data works??

[watashisushi]

so im accidentally formatting my father old external harddrives,luckily i could recover it event it takes a while cus the storage was too big (1tb)


well my question is,how does the recovery data works? i mean im deleting and formatting it,when i recovering it the file was came back.
where was the file go?
how the file get detected again after i deleting/formatting it?

i need an explanation,it would be so helpfull to me 😀

cheers!!! thank you soo much

 

[hotaru.hino]

Normally when you delete a file on a storage drive, the only thing that happens is the data is marked as "can be used for something else". It's not actually modified in anyway. So you can recover a "deleted" file by flipping the flags back. However, the longer you wait to do this, the higher the chance the data is overwritten by something else and so you can't recover the file.

As far as formatting a drive goes, it's the same thing. The only thing that happens is the partition information is deleted and a new one written, which effectively marks all of the data in the drive as "can be used for something else." In Windows, you may noticed there's an option to not do a quick format. All this does is performs a deep scan of the drive for defects. It doesn't actually delete anything.

If you want to actually delete everything off the drive, you need to perform a secure erase which there are various tools that can do that available.

 

[watashisushi]

Normally when you delete a file on a storage drive, the only thing that happens is the data is marked as "can be used for something else". It's not actually modified in anyway. So you can recover a "deleted" file by flipping the flags back. However, the longer you wait to do this, the higher the chance the data is overwritten by something else and so you can't recover the file.

As far as formatting a drive goes, it's the same thing. The only thing that happens is the partition information is deleted and a new one written, which effectively marks all of the data in the drive as "can be used for something else." In Windows, you may noticed there's an option to not do a quick format. All this does is performs a deep scan of the drive for defects. It doesn't actually delete anything.

If you want to actually delete everything off the drive, you need to perform a secure erase which there are various tools that can do that available.

luckily the harddrive was formatted yesterday,so im still in luck 😀 thank you soo much for your explanation! i appreciate it so much!

 

[USAFRet]

Think of a paper book.
A quick format as you probably did is akin to tearing out the Table of Contents.
The data is still (probably) there, you and the PC just can't find it.

A data recovery tool may be able to find and rebuild those files.
Maybe.
Sometimes, it just finds file fragments. file0001.txt, file0002.txt, file0005.txt.. Those 3 things were originally part of a jpg, and 0003 and 4 are too far gone.
Sometimes, they cannot be put back together to a viewable jpg. Sometimes not.


In the future, however....do NOT rely on things like this to recover.
Backup backup backup.

 

[watashisushi]

Think of a paper book.
A quick format as you probably did is akin to tearing out the Table of Contents.
The data is still (probably) there, you and the PC just can't find it.

A data recovery tool may be able to find and rebuild those files.
Maybe.
Sometimes, it just finds file fragments. file0001.txt, file0002.txt, file0005.txt.. Those 3 things were originally part of a jpg, and 0003 and 4 are too far gone.
Sometimes, they cannot be put back together to a viewable jpg. Sometimes not.


In the future, however....do NOT rely on things like this to recover.
Backup backup backup.

thank you for your explanation! it's very simple!