METHOD AND SYSTEM FOR RECOVERING DELETED FILE BASED ON FAT32 FILE SYSTEM

摘要

A method and system for recovering deleted files based on a FAT32 file system is disclosed. A first root directory FDT information set is formed by reading FDT information of each directory entry R_i; FDT information of each directory entry Ri in the first root directory FDT information set F_DTS = {R₁, R₂, ..., R_N} is parsed to obtain attributes of the FDT information of a current directory entry R_i, and whether each directory entry R_i in the first root directory FDT information set represents a directory entry of a file or a directory entry of a folder is determined from the attributes; a starting sector number of the directory entry R_i is calculate to obtain an actual physical position of the current file, and information of the current file directory entry R_i is recursively parse out; and the FDT information of the directory entry R_i of all directories in the current file system is parsed to obtain the actual physical position of the current file or folder and information of the directory entry R_i. Fast recovery of the deleted file is effectively realized using a file feature-combined algorithm of dynamically calculating FDT cluster higher bits and a directory entry feature and information match-combined algorithm of dynamically calculating FDT cluster higher bits.