Home / Language / English / Recovering Deleted Files

Recovering Deleted Files

 This article explains how to restore deleted files no longer in the Recycle Bin.Restore deleted files that are no longer in the Recycle Bin! When a file is deleted from your computer, its contents aren’t immediately destroyed. Its hard drive space is made available for use, but until that space is overwritten, your old data is usually intact.


Data Recovery Basics

Emergency file recovery requires more than the correct tool, though. It requires knowing how file deletion occurs, and what you have to do to maximize the chances of a successful recovery.

When a file is deleted from your computer, its contents aren’t immediately destroyed. Windows simply marks the hard drive space as being available for use by changing one character in the file table so that the file entry won’t be displayed in My Computer or a commandline DIR command, etc. If you manage to start an undeletion process before Windows uses that part of the hard drive to write a new file, all you have to do is set that flag back to “on,” and you get the file. Pretty cool, eh?

Obviously, the sooner you try to restore a file, the more successful you’ll be. But stop a moment and think about the other things that could cause this part of the hard drive to be overwritten. If your hard drive is pretty full, the odds are much greater that Windows will grab your precious unallocated space for its next write. Or, if you defrag the hard drive, you run the risk of unused parts of the drive being overwritten!

So stop using the computer immediately.

This is also one of the places where well-planned partitioning of your hard drive has a huge advantage. Partitions physically mark off different parts of the hard drive. If, for example, you have your data and program files on their own separate partitions, and it’s a data file that you want to recover (which is usually the case), then Windows startup or shutdown won’t touch that part of the hard drive. If you have the swapfile / pagefile on its own partition, and all of your directories for temporary files on another, then these most-changing and most-written files also will be kept from overwriting the part of the drive holding the files you want to recover. However, if you take that 80 GB hard drive and make it all one big single C: partition, then you run the risk of making your file unrecoverable anytime the swapfile resizes, or any time Windows writes a temporary file of any kind… and this could be pretty much at any moment whatsoever! Partitioning gives enormous advantage in file recovery. I recommend you read my article Planning Your Partitions for more ideas along these lines.


Restoration is a freeware program by Brian Kato that restores deleted files no longer in the Recycle Bin. It works on Windows 9x versions, NT, 2000, and XP — even in NTFS! It is only 406 KB in size. You can read more about Restoration here and download it directly from here.

How to Run

Unzip the package and Run the “Restoration.exe” file, which is extracted form the  self-extracting file or the zip file.

 1. Select a drive.

If you specify all or part of the file name, all first byte unknown   files which are possibly contain the text are displayed. If you want to search by   extension, please enter something like “. TXT”.

If you check “Include used clusters by other files” box and search,  you can find more files, but the file has little possibility of being  restored correctly if the pointed cluster is used by another file.

If you check the “Include even if the file size is zero” box, you can   find more files, but it’s almost pointless to restore them because   it’s exactly the same as creating a new empty file of the same name  manually.

After finishing the regular search, a message will appear asking you   if you want to scan vacant clusters, if you couldn’t find your target   file, please select yes.
 2. Select a listed file.

 3. Click “Restore by copying” button.

 4. Specify the location you want to restore to.
  I recommend you if possible to select a different drive from the  searched drive so not to overwrite original data.
  If the file is a compressed file of NTFS, it will be decompressed and  restored.

Complete deletion
Erase all vacant cluster s by overwriting with random numbers and then  with zeros.  After that, erase all deleted file information(FAT partition)/file  records(NTFS partition) by using random numbers and zeros.

 1. Click “Others” and then “Delete Completely” from the menu bar.

 2. Answer the dialog boxes.

About Mohammad Khazab

%d bloggers like this: