基于文件名搜索的NTFS文件恢复方法研究  

Research on NTFS file recovery method based on file name search

作　　者：吴淑惠 Wu Shuhui(Beijing industry and trade technicians College,Beijing 100097,China)

机构地区：[1]北京市工贸技师学院数媒系,北京100097

出　　处：《计算机时代》2023年第3期119-123,共5页Computer Era

摘　　要：NTFS文件系统具有很好的容错性和安全性,是当前应用最为广泛的文件系统。在使用该文件系统的过程中,误删除文件系常见操作。本文针对误删除文件的两种情况(从回收站中删除和按shift+delete组合键删除),研究了在Winhex中通过文件名搜索的恢复方法。因数据恢复过程中经常需要对数据流进行计算,故提供了在Excel中自动计算的公式。另外,本文还涉及了远程数据恢复。NTFS file system has good fault tolerance and security, and is the most widely used file system at present. In the process of using this file system, it is a common operation to delete files by mistake. In view of two cases of mistakenly deleting files(deleting from the recycle bin and deleting by pressing the shift+delete key), the recovery method of file name search in Winhex is studied. Since data run calculation is often required during data recovery, the formulas for automatic calculation in Excel are provided. In addition, remote data recovery is also involved in this paper.

关 键 词：NTFS文件 文件名搜索 data run计算 WINHEX 远程数据恢复 

分 类 号：TP309.3[自动化与计算机技术—计算机系统结构]