Application functions

NTFS recovery

Data Disc Recovery as well as other programs is analyzing found informations about file and folder, then, basing on found information range data on drive and rewrite it in the pointed place.
First analyzing action is recognition of file or folder failure, type of malfunction, then using information deriving from File Record, $Bitmap attribute NTFS partition rates data state and afterwards its recovery.
This method allows to correctly place data container on NTFS partition, and then valuate its state and recover everything which can be recovered.

NTFS scanning

It is the process in which DDR is searching information about lost (deleted) elements. Searched are so called 'File Records' (FR), because after finding location of this element, basing on info gathered inside, it is possible to find data files and sub folders.
After reaching FR, application begins to analyze informations gathered inside. If finding connection with scanned part of NTFS partition is impossible, FR is placed on 'lost file' list and it's waiting for potential recovering.
Placing it on 'lost file' list isn't limited only to adding it, but also to regenerate connections with other lost elements. By that deleted file is returning to it's previous location. It is necessary because in NTFS partition every element is file.

NTFS rummage

Rummage process relays on selective picking element, from those which have been uncovered during editing and scanning partition.

FAT recovery

Recovering on FAT partitions is more complicated than on NTFS. Evidence is many failings from professional recovery software. Process is more difficult, because regeneration of data fragments is more complex, cause information about fragmented data are rubbed and none program gives full chance in regeneration of those data! Usually producer gives information that data have been lost, while their still on drive and can be efficiently recovered. In those cases, if data are valuable, It is necessary to use data recovery manufacture services. But it is possible, when having basic knowledge about data recovery, to do this alone using Data Disc Recovery, but when not having enough knowledge about file system structure this task may take long amount of time.
Besides problems with fragmented data, which can't be recovered by any existing software, there is other problem with data removed 'shift - delete' method. In that case every information allowing to locate file are rubbed.
In that case recovery program use standard algorithm of data bearings, by that faulty locating it on hard drive and recover file with entirely different data. The same is only name and file extension, everything else differs.
In Data Disc Recovery we salved that problem this way. Searching takes place directly on data field. If data are compact and are coming from the same stream, and stream size suite file size, that stream is recovered. In 90% Data Disc Recovery can correctly recover those data. It is one of many reasons DDR should be a tool in every recovery manufacture.

FAT scanning

> Scanning is major problem of every recovery software, because many data streams stays uncovered. Problem is, that recovery program should be user - friendly application, and when using more advanced algorithm, it would occur to typical PC user, that software is incomprehensible, illegible. Most of Internet users are not in familiarizing with file systems issues and wouldn't even know what to do with most of results. That why most of applications is simple and intuitive, but mostly not effective. FAT partitions scanning itself is searching fragment of informations about files and file folders sector by sector, viewing info fields and if signature on those fields match file or file folder information sequence, than it's added to result structure.
Recognition of those fields isn't complex task, actually every program we have encountered was doing it correctly.
About some applications, we have reservation, that their scanning was doing not sector by sector, but cluster by cluster. Difference is major, because when finding incorrect registry in data field, program seas scanning without revising other sectors and it happens that part of those sectors contains data from earlier registers.
Some applications couldn't also discover files and file folders on logically broken clusters. It is often, that cluster is marked as occupied while there is no logical connection between it and rest of data on drive. Scanning program couldn't correctly find it and put under scanning task.
Basically programs have many errors, but in amateur using are good tools.

FAT rummage

FAT partition rummage is based on browsing following catalogs and searching of assigned files and file folders. After scanning of partition user can rummage discovered files and file folders.
There is also possibility to scan malfunctioned partitions under condition, that logical connections between following files and folders hasn't been rubbed. If this has taken place, first thing is scanning, than rummage found files and file folders.

Editing and regeneration

By using those methods possible is recovering of any data fragment contained on drive. In case that information about file has been already overwritten or file is fragmented and recovering is impossible by using tradition methods, then through using edition dialog possible is ultimate rummage of partition and recovering found data clusters. This task isn't simple and fast, but guaranties recovering all information to the las bit.

FAT partition virtual mapa

Someone who familiarize himself with DDR capabilities, have noticed difficulty with recovering fragmented data for FAT partitions, which is bigger than to other data organizing forms and surely those people have found filed of using to virtual partition maps. We know, that when deleting data from drive we erase also connections between clusters. When deleted file isn't fragmented, meaning clusters exist following one by one, recovering programs are dealing with it very well and correctly recover data.
Problem occurs when file is fragmented. Than there is no program capable recovering those data. There is even no application picking up that issue, except Data Disc Recovery. So, when it goes to professional data recovering, it is only existing application to recover such data.
In case of important data, when it goes to recover data to the last bit, it is important to familiarize the rules of using virtual maps.
Issue of using map goes to creating it, setting as active, and arrange to particular file draft of clusters.
In DDR v0.9.9.10, possible is viewing several types of clusters:
physical - those are following clusters given partition no. 0 parallel starting cluster edited file, so if our file will have starting (first) cluster no. 2000, physically no. 0 will be 2000.
logicaly - following clusters correspond with edited file.
free - following free clusters, not connected to any object (clusters of deleted file become free, free is every clusters not occupied or clusters of deleted files), and in that case no. 0 suits number one free cluster found after first connected to given file, so if file is associated to clusters 2000,2002,2006,2009, then if clusters from 2000 to 2010 will be connected to files, in exception to cluster 2007, than free cluster no. 0 will be cluster 2007
RAW - method of viewing conform case when cluster no. 0 suites physical cluster no. 0
After establishing clusters chain, it is possible, using Recovery function, record row as any file format.
Using this method possible is recovering any clusters containing information we wish to recover.
In further versions of Data Disc Recovery you should expect clusters viewing more selective solutions.