CN109614370B - Disk file scanning method and device, computer equipment and storage medium - Google Patents
Disk file scanning method and device, computer equipment and storage medium Download PDFInfo
- Publication number
- CN109614370B CN109614370B CN201811435150.XA CN201811435150A CN109614370B CN 109614370 B CN109614370 B CN 109614370B CN 201811435150 A CN201811435150 A CN 201811435150A CN 109614370 B CN109614370 B CN 109614370B
- Authority
- CN
- China
- Prior art keywords
- cluster number
- file
- initial
- assumed
- deleted
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Landscapes
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention provides a disk file scanning method, a disk file scanning device, computer equipment and a storage medium. Acquiring a file record item of a deleted file in a target disk, extracting an initial low cluster number in basic information of the file, setting a preset initial high cluster number as a temporary initial high cluster number, constructing an assumed initial cluster number of the file according to the temporary initial high cluster number and the initial low cluster number, and judging whether the file corresponding to the assumed initial cluster number on the disk is the target deleted file or not; if the file corresponding to the assumed initial cluster number on the disk is the target deleted file, recording the assumed initial cluster number as the real cluster number of the target deleted file, and using the initial high cluster number in the assumed initial cluster number as the preset initial high cluster number of the next deleted file to scan the next deleted file, so as to avoid the situation that the high clusters are traversed from head to tail in sequence when each deleted file is searched, thereby greatly improving the file scanning efficiency.
Description
Technical Field
The present invention relates to the field of computers, and in particular, to a method and an apparatus for scanning a disk file, a computer device, and a storage medium.
Background
In a conventional file system, as for the file system of FAT32, each file has a file entry, where the file entry includes: file name of the file, file start cluster number and the like. The file start cluster number is the exact position of the file stored in the disk, and includes a high cluster number and a low cluster number. If the target file is to be found accurately, the position information of the high cluster number and the low cluster number needs to be obtained, and the storage position of the file data can be accurately obtained only by combining the high cluster number and the low cluster number. After deleting a file, the file system clears the high cluster number of the initial cluster number in the file entry, the data of the low cluster number is intact, and the original data of the file still completely exists in the disk.
The current general and effective algorithm is to obtain the largest cluster number range of the managed storage space according to the size of the partition by traversing the partition where the lost file is located, obtain the initial cluster number of the file by sequentially combining the low cluster numbers of the file record items from the smallest high cluster number to the largest high cluster number, and determine whether the temporary cluster number is the real storage position of the required file by combining the format characteristic or the storage characteristic of the file. The method has the problems that each deleted file needs to traverse the high clusters from beginning to end in sequence, and particularly under the scene with large disk space, the scanning time is long, and the like.
In view of the above problems, it is desirable to provide a better and faster method for scanning a disk file.
Disclosure of Invention
The invention provides a disk file scanning method, a disk file scanning device, computer equipment and a storage medium, and aims to solve the problem that the scanning speed is low when a large number of deleted files are faced by the existing method.
In a first aspect, an embodiment of the present invention provides a disk file scanning method, which includes the following steps: acquiring a file record item of a deleted file from a file directory table corresponding to a target partition, and acquiring file basic information from the file record item, wherein the file basic information comprises the initial low cluster number of the deleted file; acquiring a preset initial high cluster number as a temporary initial high cluster number, and constructing a supposed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number; judging whether the assumed initial cluster number is larger than the maximum management cluster number of the target partition or not; if the assumed initial cluster number is not larger than the maximum management cluster number of the target partition, judging whether the file corresponding to the assumed initial cluster number on the disk is the deleted file or not according to the basic file information; if the file corresponding to the assumed initial cluster number on the disk is the deleted file, recording the assumed initial cluster number as the real cluster number of the deleted file, and using the initial high cluster number in the assumed initial cluster number as the preset initial high cluster number of the next deleted file to realize the scanning of the next deleted file.
In a second aspect, an embodiment of the present invention further provides an apparatus for scanning a disk file, where the apparatus includes:
an obtaining unit, configured to obtain a file entry of a deleted file from a file directory table corresponding to a target partition, and obtain basic file information from the file entry, where the basic file information includes a starting low cluster number of the deleted file;
a constructing unit, configured to obtain a preset initial high cluster number as a temporary initial high cluster number, and construct a presumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number;
a first judging unit, configured to judge whether the assumed starting cluster number is greater than a maximum management cluster number of a target partition;
a second determining unit, configured to determine, according to the basic file information, whether a file corresponding to the assumed initial cluster number on a disk is the deleted file if the assumed initial cluster number is not greater than a maximum management cluster number of a target partition;
and the recording unit is used for recording the assumed initial cluster number as the real cluster number of the deleted file if the file corresponding to the assumed initial cluster number on the disk is the deleted file, and using the initial high cluster number in the assumed initial cluster number as the preset initial high cluster number of the next deleted file to realize the scanning of the next deleted file.
In a third aspect, an embodiment of the present invention further provides a computer device, which includes a memory and a processor, where the memory stores a computer program, and the processor implements the above method when executing the computer program.
In a fourth aspect, the present invention also provides a computer-readable storage medium, which stores a computer program, and the computer program can implement the above method when being executed by a processor.
The invention provides a method, a device, computer equipment and a storage medium for scanning disk files, which are characterized in that a file record item of a deleted file is obtained, according to basic information of the file record item, wherein the basic information comprises an initial low cluster number in a file initial cluster number, the invention generates an initial high cluster number in turn and combines with the initial low cluster number to generate a hypothetical initial cluster number, according to the file information pointed by the hypothetical initial cluster number, the hypothetical initial high cluster number is continuously compared with the basic information in the file record item to find out a corresponding deleted file, the initial high cluster number of the deleted file is recorded, and the disk storage has certain continuity characteristics, the initial high cluster number of the currently determined deleted file is set as the preset initial high cluster number of the file record item of the next deleted file, so as to avoid the situation that the high clusters are traversed from head to tail in turn when each deleted file is found, thereby greatly improving the file scanning efficiency.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.
FIG. 1 is a schematic flowchart of a disk file scanning method according to an embodiment of the present invention;
FIG. 2 is a schematic flowchart of another embodiment of a disk file scanning method according to the present invention;
FIG. 3 is a schematic sub-flowchart of a disk file scanning method according to an embodiment of the present invention;
FIG. 4 is a schematic view of another sub-process of an embodiment of a disk file scanning method according to the present invention;
FIG. 5 is a schematic view of another sub-process of an embodiment of a disk file scanning method according to the present invention;
FIG. 6 is a schematic view of another sub-process of an embodiment of a disk file scanning method according to the present invention;
FIG. 7 is a schematic block diagram of an embodiment of a disk file scanning apparatus provided in the present invention;
FIG. 8 is a schematic block diagram of another embodiment of a disk file scanning apparatus provided in the present invention;
FIG. 9 is a schematic block diagram of a sub-unit of an embodiment of a disk file scanning apparatus provided in the present invention;
FIG. 10 is a schematic block diagram of another exemplary sub-unit of an embodiment of a disk file scanning apparatus according to the present invention;
FIG. 11 is a schematic block diagram of another exemplary sub-unit of an embodiment of a disk file scanning apparatus according to the present invention;
FIG. 12 is a schematic block diagram of another exemplary sub-unit of an embodiment of a disk file scanning apparatus according to the present invention;
FIG. 13 is a schematic block diagram of a computer device provided by an embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
It will be understood that the terms "comprises" and/or "comprising," when used in this specification and the appended claims, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.
It is also to be understood that the terminology used in the description of the invention herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used in the specification of the present invention and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.
It should be further understood that the term "and/or" as used in this specification and the appended claims refers to and includes any and all possible combinations of one or more of the associated listed items.
As shown in fig. 1, a flow chart of an embodiment of the method of the present invention includes steps S110 to S150.
S110, a file record item of a deleted file is obtained from a file directory table corresponding to the target partition, and file basic information is obtained from the file record item, wherein the file basic information comprises the initial low cluster number of the deleted file.
The file directory table is one of the core contents in the FAT32 system, and is mainly used for recording the basic information of files stored in the FAT32 system. The file directory table includes a plurality of file entries corresponding to storage files, where the file entries record the file basic information of each storage file, and the file basic information includes start address information of the file on a physical disk, where the start address information specifically includes a start high cluster number (high-order cluster number) and a start low cluster number (low-order cluster number). When the storage file is deleted, the initial high cluster number in the initial address information is cleared, so that the storage file cannot be searched due to the lack of the initial address information, and the storage file becomes a deleted file.
In one embodiment, as shown in FIG. 5, step S110 includes S111-S113.
And S111, acquiring a file record item from the file directory table corresponding to the target partition.
And acquiring a file record item from the file directory table corresponding to the target partition. The file entries in the file directory table are obtained according to a certain rule, for example, the time sequence, and the disk storage has a certain continuity, and the continuity is ordered according to the file generation time, so that the characteristics of the disk storage can be met to a certain extent according to the certain time sequence when the file entries are obtained, and the scanning efficiency is improved.
And S112, judging whether the file record item has a deletion mark or not.
And judging whether the file record item has a deletion mark or not. In this embodiment, the deletion flag is specifically a preset character "E5", and when a file becomes a deleted file after being deleted, the first character of the filename character string in the file entry corresponding to the deleted file is modified to "E5" according to the specific rule of the FAT32 system. The file name character string is a character string located at the head of the file entry in the content of the file entry, and further the first character of the content of the file entry corresponding to the deleted file is also "E5", that is, the deletion flag includes "E5" located at the first character of the file entry.
S113, if the file record item has a deletion mark, determining that the file record item is a record item of a deleted file, and acquiring basic file information from the file record item.
And if the file record item has a deletion mark, determining that the file record item is the record item of the deleted file, and acquiring basic file information from the file record item. The file basic information includes a start cluster low cluster number.
S120, acquiring a preset initial high cluster number as a temporary initial high cluster number, and constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number.
In the present embodiment, as shown in fig. 2, step S120 includes the following two steps: s121, acquiring a preset initial high cluster number as a temporary initial high cluster number; s122, constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number. In this embodiment, in the initial stage of scanning, the value of the preset initial high cluster number is initially set to 0, so as to start scanning from the minimum value of the target partition management high cluster number.
S130, judging whether the assumed initial cluster number is larger than the maximum management cluster number of the target partition.
And judging whether the assumed starting cluster number is larger than the maximum management cluster number of the target partition. If the starting cluster number is greater than the maximum management cluster number of the target partition, it indicates that the deleted file in the current cycle fails to be addressed, and the current cycle is skipped and the process returns to step S110.
S140, if the assumed initial cluster number is not larger than the maximum management cluster number of the target partition, judging whether the file corresponding to the assumed initial cluster number on the disk is the deleted file or not according to the file basic information.
In one embodiment, as shown in fig. 6, step S140 includes S141 and S142.
S141, judging whether the characteristics of the file corresponding to the assumed initial cluster number on the disk are matched with the file characteristics.
In this embodiment, whether the assumed start cluster number is the real start cluster number of the file is determined by comparing whether the file name corresponding to the assumed start cluster number on the disk is consistent with the file name in the file characteristics.
And S142, if the characteristics of the file corresponding to the assumed initial cluster number on the disk are matched with the file characteristics in the file basic information, determining that the file corresponding to the assumed initial cluster number on the disk is the deleted file.
S150, if the file corresponding to the assumed initial cluster number on the disk is the deleted file, recording the assumed initial cluster number as the real cluster number of the deleted file, and using the initial high cluster number in the assumed initial cluster number as the preset initial high cluster number of the next deleted file to realize the scanning of the next deleted file.
If the file corresponding to the assumed initial cluster number on the disk is the deleted file, recording the assumed initial cluster number as the real cluster number of the deleted file, and using the initial high cluster number in the assumed initial cluster number as the preset initial high cluster number of the next deleted file to realize the scanning of the next deleted file. And when the assumed initial cluster number is determined to be the real initial cluster number, the high cluster number in the assumed initial cluster number is the real initial high cluster number. Under the condition of acquiring deleted files according to a certain time sequence, the determined initial high cluster number of the deleted file is used as the preset initial high cluster number of the next undetermined deleted file, so that the scanning time of the next deleted file is saved.
In one embodiment, as shown in FIG. 2, it is a supplement to the previous embodiment. In step S140, it is determined whether the file corresponding to the assumed start cluster number on the disk is the deleted file, and if the determination result is no, the process proceeds to step S160.
S160, if the file corresponding to the assumed initial cluster number on the disk is not the deleted file, resetting the temporary initial high cluster number as a new temporary initial high cluster number according to a preset rule, and returning to the step of constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number.
If the file corresponding to the assumed initial cluster number on the disk is not the deleted file, resetting the temporary initial high cluster number as a new temporary initial high cluster number according to a preset rule, and returning to the step of constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number, that is, returning to step S122. Specifically, the assumed start cluster number is reconstructed according to the preset rule, a new assumed start cluster number can be obtained, and if a corresponding deleted file cannot be obtained according to the new assumed start cluster number, the new assumed start cluster number is continuously reconstructed according to the preset rule. By repeatedly constructing the assumed start cluster number of the deleted file, the real start cluster number of the deleted file can be obtained step by step.
In one embodiment, as shown in fig. 3, step S160 further includes S161, S162, and S163.
S161, judging whether the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition.
And judging whether the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition. If the determination result is yes, the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition, then step S162 is executed; if the determination result is negative, the temporary starting high cluster number in the assumed starting cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition, then step S163 is executed.
And S162, if the initial high cluster number in the assumed initial cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition, adding one to the temporary initial high cluster number to serve as a new temporary initial high cluster number.
And if the initial high cluster number in the assumed initial cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition, adding one to the temporary initial high cluster number to serve as a new temporary initial high cluster number. Specifically, when the initial high cluster number in the assumed initial cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition, the number of the temporary initial high cluster number in the character is increased by 1, so that the temporary initial high cluster number obtained by adding 1 to the number in the character is different from the initial high cluster number in the current flow and advances by one bit from the number in the character.
And S163, if the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition, updating the maximum management cluster number of the target partition according to the preset initial high cluster number, and then setting the preset initial high cluster number to be zero as a new temporary initial high cluster number.
And if the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition, updating the maximum management cluster number of the target partition according to the preset initial high cluster number, and then setting the preset initial high cluster number to be zero as a new temporary initial high cluster number. Specifically, in the scanning process, a situation that an actual starting high cluster number of a small number of files is lower than a high cluster number of a previously scanned file may occur, and in order to eliminate the situation, after it is determined that the temporary high cluster number is equal to a high cluster number in the maximum management cluster number of the target partition, it indicates that the temporary starting high cluster number of the current process is scanned to a high cluster number ranging from the preset starting high cluster number to the maximum management cluster number of the target partition, and a deleted file corresponding to the temporary starting high cluster number is not found, so that the scanning range of the temporary high cluster number is changed to be from 0 to the preset starting high cluster number, specifically, the maximum management cluster number of the target partition is updated according to the preset starting high cluster number, and the preset starting high cluster number is set to zero as a new temporary starting high cluster number.
In an embodiment, as shown in fig. 4, in addition to the previous embodiment, before the step S161, a step S1610 is further provided.
S1610, determining whether the preset initial high cluster number is equal to zero, if so, executing step S163, and if not, executing step S161.
And judging whether the preset initial high cluster number is equal to zero or not, if so, executing the step S163, and if not, executing the step S161. Specifically, if the preset starting high cluster number is 0, it indicates that the scanning range of the temporary starting high cluster number of the current process is from 0; if the preset initial high cluster number is not 0, it indicates that the scanning range of the temporary initial high cluster number starts from the preset initial high cluster number.
The method of the invention is characterized in that a target partition file record item is traversed, when the record item of the deleted file is obtained, a temporary initial cluster number of the file is obtained by sequentially combining a preset initial high cluster number and an initial high cluster number managed by the target partition to the maximum with a low cluster number of a current deleted file record item, and whether the temporary initial cluster number is the real storage position of the target file is determined by combining format characteristics of the file or storage characteristics of the file. Because the disk storage files have certain continuity, and generally the next file to be searched and the current file are the same directory, the time is close, and the content storage address is also close, the initial high cluster number of the current file is also the initial high cluster number of the next file, so that in the traversing process, the position of a deleted file record item is confirmed every time, the determined initial high cluster number is used for filling the preset high cluster number of the next deleted file, thereby avoiding the next deleted file scanning process from zero to traverse the high cluster number again, improving the scanning efficiency, and shortening the scanning time.
As shown in fig. 7, corresponding to the above disk file scanning method, the present invention further provides an embodiment of a disk file scanning apparatus, which includes an obtaining unit 110, a constructing unit 120, a first judging unit 130, a second judging unit 140, and a recording unit 150.
The obtaining unit 110 is configured to obtain a file entry of a deleted file from the file directory table corresponding to the target partition, and obtain file basic information from the file entry, where the file basic information includes a starting low cluster number of the deleted file.
The file directory table is one of the core contents in the FAT32 system, and is mainly used for recording the basic information of files stored in the FAT32 system. The file directory table includes a plurality of file entries corresponding to storage files, where the file entries record the file basic information of each storage file, and the file basic information includes start address information of the file on a physical disk, where the start address information specifically includes a start high cluster number (high-order cluster number) and a start low cluster number (low-order cluster number). When the storage file is deleted, the initial high cluster number in the initial address information is cleared, so that the storage file cannot be searched due to the lack of the initial address information, and the storage file becomes a deleted file.
In one embodiment, as shown in fig. 11, the obtaining unit 110 includes: a record item acquisition unit 111, an identification recognition unit 112, and a basic information acquisition unit 113.
The entry obtaining unit 111 is configured to obtain a file entry from the file directory table corresponding to the target partition.
And acquiring a file record item from the file directory table corresponding to the target partition. The file entries in the file directory table are obtained according to a certain rule, for example, the time sequence, and the disk storage has a certain continuity, and the continuity is ordered according to the file generation time, so that the characteristics of the disk storage can be met to a certain extent according to the certain time sequence when the file entries are obtained, and the scanning efficiency is improved.
The identification recognition unit 112 is used to determine whether a deletion flag exists in the file entry.
And judging whether the file record item has a deletion mark or not. In this embodiment, the deletion flag is specifically a preset character "E5", and when a file becomes a deleted file after being deleted, the first character of the filename character string in the file entry corresponding to the deleted file is modified to "E5" according to the specific rule of the FAT32 system. The file name character string is a character string located at the head of the file entry in the content of the file entry, and further the first character of the content of the file entry corresponding to the deleted file is also "E5", that is, the deletion flag includes "E5" located at the first character of the file entry.
The basic information obtaining unit 113 is configured to determine that the file entry is an entry of a deleted file if the file entry has a deletion flag, and obtain basic information of the file from the file entry.
And if the file record item has a deletion mark, determining that the file record item is the record item of the deleted file, and acquiring basic file information from the file record item. The file basic information includes a start cluster low cluster number.
The constructing unit 120 is configured to obtain a preset starting high cluster number as a temporary starting high cluster number, and construct a hypothetical starting cluster number of the deleted file according to the temporary starting high cluster number and the starting low cluster number.
And acquiring a preset initial high cluster number as a temporary initial high cluster number, and constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number. In this embodiment, in the initial stage of scanning, the value of the preset initial high cluster number is initially set to 0, so as to start scanning from the minimum value of the target partition management high cluster number.
The first judging unit 130 is configured to judge whether the assumed starting cluster number is greater than the maximum management cluster number of the target partition.
And judging whether the assumed starting cluster number is larger than the maximum management cluster number of the target partition. If the starting cluster number is greater than the maximum management cluster number of the target partition, it indicates that the deleted file in the current cycle fails to be addressed, and the current cycle is skipped and returned to the obtaining unit 110.
The second determining unit 140 is configured to determine, according to the basic file information, whether a file corresponding to the assumed starting cluster number on the disk is the deleted file, if the assumed starting cluster number is not greater than the maximum management cluster number of the target partition.
In one embodiment, as shown in fig. 12, the second determination unit 140 includes a feature matching unit 141 and an information transfer unit 142.
The feature matching unit 141 is configured to determine whether a feature of a file corresponding to the assumed start cluster number on the disk matches the file feature.
In this embodiment, whether the assumed start cluster number is the real start cluster number of the file is determined by comparing whether the file name corresponding to the assumed start cluster number on the disk is consistent with the file name in the file characteristics.
The information delivery unit 142 is configured to determine that the file corresponding to the assumed starting cluster number on the disk is the deleted file if the characteristics of the file corresponding to the assumed starting cluster number on the disk match the file characteristics in the file basic information.
The recording unit 150 is configured to record the assumed starting cluster number as a real cluster number of the deleted file if the file corresponding to the assumed starting cluster number on the disk is the deleted file, and use a starting high cluster number in the assumed starting cluster number as a preset starting high cluster number of a next deleted file to scan the next deleted file.
If the file corresponding to the assumed initial cluster number on the disk is the deleted file, recording the assumed initial cluster number as the real cluster number of the deleted file, and using the initial high cluster number in the assumed initial cluster number as the preset initial high cluster number of the next deleted file to realize the scanning of the next deleted file. And when the assumed initial cluster number is determined to be the real initial cluster number, the high cluster number in the assumed initial cluster number is the real initial high cluster number. Under the condition of acquiring deleted files according to a certain time sequence, the determined initial high cluster number of the deleted file is used as the preset initial high cluster number of the next undetermined deleted file, so that the scanning time of the next deleted file is saved.
In one embodiment, as shown in FIG. 8, this is in addition to the previous embodiment. The disk file scanning apparatus further includes a reset unit 160.
The resetting unit 160 is configured to, if the file corresponding to the assumed initial cluster number on the disk is not the deleted file, reset the temporary initial high cluster number as a new temporary initial high cluster number according to a preset rule, and return to the step of constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number.
If the file corresponding to the assumed initial cluster number on the disk is not the deleted file, resetting the temporary initial high cluster number as a new temporary initial high cluster number according to a preset rule, and returning to the step of constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number. Specifically, the assumed starting cluster number is reconstructed according to the preset rule, a new assumed starting cluster number can be obtained, and if the new assumed starting cluster number does not satisfy the preset condition, the new assumed starting cluster number is continuously reconstructed according to the preset rule. By repeatedly constructing the assumed start cluster number for which the deleted file cannot be restored, the real start cluster number of the deleted file can be acquired step by step.
In one embodiment, as shown in fig. 9, the reset unit 160 includes a maximum value judging unit 161, an updating unit 162, and an incrementing unit 163.
The maximum value judging unit 161 is configured to judge whether the temporary starting high cluster number in the assumed starting cluster number is equal to the high cluster number in the maximum management cluster number of the target partition.
The maximum value judging unit 161 is configured to judge whether the temporary starting high cluster number in the assumed starting cluster number is equal to the high cluster number in the maximum management cluster number of the target partition. If the determination result is yes, the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition, and the updating unit 162 is triggered; if the determination result is negative, the temporary starting high cluster number in the assumed starting cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition, and then the increment unit 163 is triggered.
The updating unit 162 is configured to add one to the temporary initial high cluster number to serve as a new temporary initial high cluster number if the initial high cluster number in the assumed initial cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition.
And if the initial high cluster number in the assumed initial cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition, adding one to the temporary initial high cluster number to serve as a new temporary initial high cluster number. Specifically, when the initial high cluster number in the assumed initial cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition, the number of the temporary initial high cluster number in the character is increased by 1, so that the temporary initial high cluster number obtained by adding 1 to the number in the character is different from the initial high cluster number in the current flow and advances by one bit from the number in the character.
The increment unit 163 is configured to, if the temporary starting high cluster number in the assumed starting cluster number is equal to the high cluster number in the maximum management cluster number of the target partition, update the maximum management cluster number of the target partition according to the preset starting high cluster number, and then set the preset starting high cluster number to zero as a new temporary starting high cluster number.
If the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition, the maximum management cluster number of the target partition is updated according to the preset initial high cluster number, and then the preset initial high cluster number is set to be zero to serve as a new temporary initial high cluster number. Specifically, in the scanning process, a few files may have a starting high cluster number lower than a high cluster number of a previously scanned file, and in order to eliminate such a situation, after it is determined that the temporary high cluster number is equal to a high cluster number in the maximum management cluster number of the target partition, it indicates that the temporary starting high cluster number of the current process is scanned to a high cluster number in a range from the preset starting high cluster number to the maximum management cluster number of the target partition, and a deleted file corresponding to the temporary starting high cluster number is not found, so that the scanning range of the temporary high cluster number is changed to be from 0 to the preset temporary high cluster number, specifically, the maximum management cluster number of the target partition is updated according to the preset starting high cluster number, and the preset starting high cluster number is set to zero as a new temporary starting high cluster number.
In an embodiment, as shown in fig. 10, in addition to the previous embodiment, the reset unit 160 further includes a zero value judgment unit 1610.
The zero value determining unit 1610 is configured to determine whether the preset starting high cluster number is equal to zero, trigger the incrementing unit 163 if the preset starting high cluster number is zero, and trigger the maximum value determining unit 161 if the preset starting high cluster number is not zero.
If the preset initial high cluster number is equal to zero, the incremental unit 163 is accessed, and if not, the maximum value determining unit 161 is accessed. Specifically, if the preset starting high cluster number is 0, it indicates that the scanning range of the temporary starting high cluster number of the current process is from 0; if the preset initial high cluster number is not 0, it indicates that the scanning range of the temporary initial high cluster number starts from the preset initial high cluster number.
It should be noted that, as can be clearly understood by those skilled in the art, the specific implementation processes of the file recovery apparatus and each unit may refer to the corresponding descriptions in the foregoing method embodiments, and for convenience and brevity of description, no further description is provided herein.
The above-described file restoration apparatus may be implemented in the form of a computer program that can be run on a computer device as shown in fig. 13.
Referring to fig. 13, fig. 13 is a schematic block diagram of a computer device according to an embodiment of the present invention.
Referring to fig. 13, the computer device 200 includes a processor 202, memory, and a network interface 205 connected by a system bus 201, wherein the memory may include a non-volatile storage medium 203 and an internal memory 204.
The non-volatile storage medium 203 may store an operating system 2031 and computer programs 2032. The computer program 2032, when executed, may cause the processor 202 to perform a file recovery method.
The processor 202 is used to provide computing and control capabilities that support the operation of the overall computer device 200.
The internal memory 204 provides an environment for the execution of a computer program 2032 on the non-volatile storage medium 203, which computer program 2032, when executed by the processor 202, causes the processor 202 to perform a file recovery method.
The network interface 205 is used for network communication. It will be appreciated by those skilled in the art that the configuration shown in fig. 13 is a block diagram of only a portion of the configuration associated with the inventive arrangements and does not constitute a limitation of the computer device 200 to which the inventive arrangements may be applied, and that a particular computer device 200 may include more or less components than those shown, or may combine certain components, or have a different arrangement of components.
Wherein the processor 202 is configured to run a computer program 2032 stored in the memory to implement the following functions: acquiring a file record item of a deleted file from a file directory table corresponding to a target partition, and acquiring file basic information from the file record item, wherein the file basic information comprises the initial low cluster number of the deleted file; acquiring a preset initial high cluster number as a temporary initial high cluster number, and constructing a supposed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number; judging whether the assumed initial cluster number is larger than the maximum management cluster number of the target partition or not; if the assumed initial cluster number is not larger than the maximum management cluster number of the target partition, judging whether the file corresponding to the assumed initial cluster number on the disk is the deleted file or not according to the basic file information; if the file corresponding to the assumed initial cluster number on the disk is the deleted file, recording the assumed initial cluster number as the real cluster number of the deleted file, and using the initial high cluster number in the assumed initial cluster number as the preset initial high cluster number of the next deleted file to realize the scanning of the next deleted file.
In an embodiment, after performing the step of determining whether the file corresponding to the assumed starting cluster number on the disk is the deleted file, the processor 202 further performs the following operations: if the file corresponding to the assumed initial cluster number on the disk is not the deleted file, resetting the temporary initial high cluster number as a new temporary initial high cluster number according to a preset rule, and returning to the step of constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number.
In an embodiment, when the step of resetting the temporary initial high cluster number as a new temporary initial high cluster number according to the preset rule is executed, the processor 202 specifically executes the following operations: judging whether the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition; if the initial high cluster number in the assumed initial cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition, adding one to the temporary initial high cluster number to be used as a new temporary initial high cluster number; and if the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition, after updating the maximum management cluster number of the target partition according to the preset initial high cluster number, setting the preset initial high cluster number to be zero as a new temporary initial high cluster number.
In an embodiment, when the step of resetting the temporary initial high cluster number as a new temporary initial high cluster number according to the preset rule is executed, the processor 202 specifically executes the following operations: judging whether the preset initial high cluster number is equal to zero or not; if the preset initial high cluster number is not equal to zero, executing the step of judging whether the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition; and if the preset initial high cluster number is equal to zero, adding one to the temporary initial high cluster number to be used as a new temporary initial high cluster number.
In an embodiment, when the processor 202 executes the following operation of obtaining a file entry of a deleted file from the file directory table corresponding to the target partition, and obtaining basic information of the file from the file entry, specifically: acquiring a file record item from a file directory table corresponding to the target partition; judging whether a deletion mark exists in the file record item; and if the file record item has a deletion mark, determining that the file record item is the record item of the deleted file, and acquiring basic file information from the file record item.
In an embodiment, when the processor 202 executes the step of determining whether the deletion flag exists in the file entry, the following operations are specifically executed: judging whether the first byte character in the file entry is a preset character or not; and if the first byte character in the file entry is a preset character, judging that a deletion mark exists in the file entry.
In an embodiment, when the processor 202 performs the step of determining whether the file corresponding to the assumed start cluster number on the disk is the deleted file, the following operations are specifically performed: judging whether the characteristics of the file corresponding to the assumed initial cluster number on the disk are matched with the file characteristics; and if the characteristics of the file corresponding to the assumed initial cluster number on the disk are matched with the file characteristics in the file basic information, determining that the file corresponding to the assumed initial cluster number on the disk is the deleted file.
Those skilled in the art will appreciate that the embodiment of a computer device illustrated in fig. 13 does not constitute a limitation on the specific construction of the computer device, and that in other embodiments a computer device may include more or fewer components than those illustrated, or some components may be combined, or a different arrangement of components. For example, in some embodiments, the computer device may only include a memory and a processor, and in such embodiments, the structures and functions of the memory and the processor are consistent with those of the embodiment shown in fig. 13, and are not described herein again.
It should be understood that, in the embodiment of the present invention, the Processor 202 may be a Central Processing Unit (CPU), and the Processor 202 may also be other general-purpose processors, Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), Field Programmable Gate Arrays (FPGAs) or other Programmable logic devices, discrete Gate or transistor logic devices, discrete hardware components, and the like. Wherein a general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
In another embodiment of the invention, a computer-readable storage medium is provided. The computer readable storage medium may be a non-volatile computer readable storage medium. The computer-readable storage medium stores a computer program, wherein the computer program when executed by a processor implements the steps of: acquiring a file record item of a deleted file from a file directory table corresponding to a target partition, and acquiring file basic information from the file record item, wherein the file basic information comprises the initial low cluster number of the deleted file; acquiring a preset initial high cluster number as a temporary initial high cluster number, and constructing a supposed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number; judging whether the assumed initial cluster number is larger than the maximum management cluster number of the target partition or not; if the assumed initial cluster number is not larger than the maximum management cluster number of the target partition, judging whether the file corresponding to the assumed initial cluster number on the disk is the deleted file or not according to the basic file information; if the file corresponding to the assumed initial cluster number on the disk is the deleted file, recording the assumed initial cluster number as the real cluster number of the deleted file, and using the initial high cluster number in the assumed initial cluster number as the preset initial high cluster number of the next deleted file to realize the scanning of the next deleted file.
In an embodiment, after the step of determining whether the file corresponding to the assumed starting cluster number on the disk is the deleted file, the method further includes: if the file corresponding to the assumed initial cluster number on the disk is not the deleted file, resetting the temporary initial high cluster number as a new temporary initial high cluster number according to a preset rule, and returning to the step of constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number.
In an embodiment, the step of resetting the temporary starting high cluster number as a new temporary starting high cluster number according to a preset rule includes: judging whether the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition; if the initial high cluster number in the assumed initial cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition, adding one to the temporary initial high cluster number to be used as a new temporary initial high cluster number; and if the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition, after updating the maximum management cluster number of the target partition according to the preset initial high cluster number, setting the preset initial high cluster number to be zero as a new temporary initial high cluster number.
In an embodiment, the step of resetting the temporary starting high cluster number as a new temporary starting high cluster number according to a preset rule further includes: judging whether the preset initial high cluster number is equal to zero or not; if the preset initial high cluster number is not equal to zero, executing the step of judging whether the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition; and if the preset initial high cluster number is equal to zero, adding one to the temporary initial high cluster number to be used as a new temporary initial high cluster number.
In an embodiment, the step of obtaining a file entry of a deleted file from a file directory table corresponding to the target partition, and obtaining basic information of the file from the file entry includes: acquiring a file record item from a file directory table corresponding to the target partition; judging whether a deletion mark exists in the file record item; and if the file record item has a deletion mark, determining that the file record item is the record item of the deleted file, and acquiring basic file information from the file record item.
In one embodiment, the step of determining whether a deletion flag exists in the file entry includes: judging whether the first byte character in the file entry is a preset character or not; and if the first byte character in the file entry is a preset character, judging that a deletion mark exists in the file entry.
In an embodiment, the step of determining whether the file corresponding to the assumed starting cluster number on the disk is the deleted file includes; judging whether the characteristics of the file corresponding to the assumed initial cluster number on the disk are matched with the file characteristics; and if the characteristics of the file corresponding to the assumed initial cluster number on the disk are matched with the file characteristics in the file basic information, determining that the file corresponding to the assumed initial cluster number on the disk is the deleted file.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described apparatuses, devices and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again. Those of ordinary skill in the art will appreciate that the elements and algorithm steps of the examples described in connection with the embodiments disclosed herein may be embodied in electronic hardware, computer software, or combinations of both, and that the components and steps of the examples have been described in a functional general in the foregoing description for the purpose of illustrating clearly the interchangeability of hardware and software. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
In the embodiments provided by the present invention, it should be understood that the disclosed apparatus, device and method can be implemented in other ways. For example, the above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units is only a logical division, and there may be other divisions when the actual implementation is performed, or units having the same function may be grouped into one unit, for example, a plurality of units or components may be combined or may be integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may also be an electric, mechanical or other form of connection.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment of the present invention.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.
The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention essentially contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product stored in a computer-readable storage medium, which includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned computer-readable storage media comprise: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a magnetic disk, or an optical disk.
While the invention has been described with reference to specific embodiments, the invention is not limited thereto, and various equivalent modifications and substitutions can be easily made by those skilled in the art within the technical scope of the invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.
Claims (7)
1. A method for scanning a disk file, comprising:
acquiring a file record item of a deleted file from a file directory table corresponding to a target partition, and acquiring file basic information from the file record item, wherein the file basic information comprises the initial low cluster number of the deleted file;
acquiring a preset initial high cluster number as a temporary initial high cluster number, and constructing a supposed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number;
judging whether the assumed initial cluster number is larger than the maximum management cluster number of the target partition or not;
if the assumed initial cluster number is not larger than the maximum management cluster number of the target partition, judging whether the file corresponding to the assumed initial cluster number on the disk is the deleted file or not according to the basic file information;
if the file corresponding to the assumed initial cluster number on the disk is the deleted file, recording the assumed initial cluster number as the real cluster number of the deleted file, and using the initial high cluster number in the assumed initial cluster number as the preset initial high cluster number of the next deleted file to realize the scanning of the next deleted file;
the step of judging whether the file corresponding to the assumed initial cluster number on the disk is the deleted file or not according to the file basic information comprises the following steps of;
judging whether the characteristics of the file corresponding to the assumed initial cluster number on the disk are matched with the file name, the file size and the file format;
if the characteristics of the file corresponding to the assumed initial cluster number on the disk are matched with the file name, the file size and the file format in the file basic information, determining that the file corresponding to the assumed initial cluster number on the disk is the deleted file;
after the step of determining whether the file corresponding to the assumed starting cluster number on the disk is the deleted file, the method further includes:
if the file corresponding to the assumed initial cluster number on the disk is not the deleted file, resetting the temporary initial high cluster number as a new temporary initial high cluster number according to a preset rule, and returning to the step of constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number;
the step of resetting the temporary starting high cluster number as a new temporary starting high cluster number according to a preset rule includes:
judging whether the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition;
if the initial high cluster number in the assumed initial cluster number is not equal to the high cluster number in the maximum management cluster number of the target partition, adding one to the temporary initial high cluster number to be used as a new temporary initial high cluster number;
and if the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition, after updating the maximum management cluster number of the target partition according to the preset initial high cluster number, setting the preset initial high cluster number to be zero as a new temporary initial high cluster number.
2. The method of claim 1, wherein the step of resetting the temporary starting high cluster number as a new temporary starting high cluster number according to a preset rule further comprises:
judging whether the preset initial high cluster number is equal to zero or not;
if the preset initial high cluster number is not equal to zero, executing the step of judging whether the temporary initial high cluster number in the assumed initial cluster number is equal to the high cluster number in the maximum management cluster number of the target partition;
and if the preset initial high cluster number is equal to zero, adding one to the temporary initial high cluster number to be used as a new temporary initial high cluster number.
3. The method according to claim 1, wherein the step of obtaining a file entry of a deleted file from the file directory table corresponding to the target partition, and obtaining basic information of the file from the file entry comprises:
acquiring a file record item from a file directory table corresponding to the target partition;
judging whether a deletion mark exists in the file record item;
and if the file record item has a deletion mark, determining that the file record item is the record item of the deleted file, and acquiring basic file information from the file record item.
4. The method of claim 3, wherein said step of determining whether a deletion flag is present in said file entry comprises:
judging whether the first byte character in the file entry is a preset character or not;
and if the first byte character in the file entry is a preset character, judging that a deletion mark exists in the file entry.
5. A hard disk file scanning device, comprising:
an obtaining unit, configured to obtain a file entry of a deleted file from a file directory table corresponding to a target partition, and obtain basic file information from the file entry, where the basic file information includes a starting low cluster number of the deleted file;
a constructing unit, configured to obtain a preset initial high cluster number as a temporary initial high cluster number, and construct a presumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number;
a first judging unit, configured to judge whether the assumed starting cluster number is greater than a maximum management cluster number of a target partition;
a second determining unit, configured to determine, according to the basic file information, whether a file corresponding to the assumed initial cluster number on a disk is the deleted file if the assumed initial cluster number is not greater than a maximum management cluster number of a target partition;
a recording unit, configured to record the assumed initial cluster number as a real cluster number of the deleted file if a file corresponding to the assumed initial cluster number on a disk is the deleted file, and use an initial high cluster number in the assumed initial cluster number as a preset initial high cluster number of a next deleted file to scan the next deleted file;
the second judgment unit comprises a first judgment unit and a second judgment unit, wherein the first judgment unit comprises a first judgment unit and a second judgment unit;
the characteristic matching unit is used for judging whether the characteristics of the file corresponding to the assumed initial cluster number on the disk are matched with the file name, the file size and the file format;
an information transfer unit, configured to determine that the file corresponding to the assumed starting cluster number on the disk is the deleted file if the characteristics of the file corresponding to the assumed starting cluster number on the disk match the file name, the file size, and the file format in the file basic information;
after the second determining unit, the apparatus further includes:
a resetting unit, configured to, if the file corresponding to the assumed initial cluster number on the disk is not the deleted file, reset the temporary initial high cluster number as a new temporary initial high cluster number according to a preset rule, and return to the step of constructing the assumed initial cluster number of the deleted file according to the temporary initial high cluster number and the initial low cluster number;
the reset unit includes:
a maximum value judging unit, configured to judge whether a temporary initial high cluster number in the assumed initial cluster number is equal to a high cluster number in a maximum management cluster number of a target partition;
an updating unit, configured to add one to the temporary initial high cluster number to serve as a new temporary initial high cluster number if an initial high cluster number in the assumed initial cluster number is not equal to a high cluster number in a maximum management cluster number of the target partition;
and an increment unit, configured to, if a temporary initial high cluster number in the assumed initial cluster number is equal to a high cluster number in a maximum management cluster number of a target partition, update the maximum management cluster number of the target partition according to the preset initial high cluster number, and then set the preset initial high cluster number to zero as a new temporary initial high cluster number.
6. A computer arrangement, characterized in that the computer arrangement comprises a memory having stored thereon a computer program and a processor implementing the method according to any of claims 1-4 when executing the computer program.
7. A storage medium, characterized in that the storage medium stores a computer program comprising instructions that, when executed by a processor, implement the method according to any one of claims 1-4.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811435150.XA CN109614370B (en) | 2018-11-28 | 2018-11-28 | Disk file scanning method and device, computer equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811435150.XA CN109614370B (en) | 2018-11-28 | 2018-11-28 | Disk file scanning method and device, computer equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109614370A CN109614370A (en) | 2019-04-12 |
| CN109614370B true CN109614370B (en) | 2021-11-09 |
Family
ID=66006458
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811435150.XA Active CN109614370B (en) | 2018-11-28 | 2018-11-28 | Disk file scanning method and device, computer equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109614370B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112835858A (en) * | 2021-03-15 | 2021-05-25 | 深圳软牛科技有限公司 | Method, device and equipment for recovering non-continuously stored files and storage medium |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1773462A (en) * | 2005-10-17 | 2006-05-17 | 珠海金山软件股份有限公司 | Method for recovering deleted file of FAT32 partition |
| JP2006318016A (en) * | 2005-05-10 | 2006-11-24 | Sony Corp | Information processor, information processing method, and program |
| CN100407159C (en) * | 2006-08-01 | 2008-07-30 | 珠海金山软件股份有限公司 | Method for recovering files deleted from FAT32 document system |
| CN104331348A (en) * | 2014-11-27 | 2015-02-04 | 四川效率源信息安全技术有限责任公司 | Method for recovering file by reducing initial cluster number of FAT32 directory entry |
-
2018
- 2018-11-28 CN CN201811435150.XA patent/CN109614370B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2006318016A (en) * | 2005-05-10 | 2006-11-24 | Sony Corp | Information processor, information processing method, and program |
| CN1773462A (en) * | 2005-10-17 | 2006-05-17 | 珠海金山软件股份有限公司 | Method for recovering deleted file of FAT32 partition |
| CN100407159C (en) * | 2006-08-01 | 2008-07-30 | 珠海金山软件股份有限公司 | Method for recovering files deleted from FAT32 document system |
| CN104331348A (en) * | 2014-11-27 | 2015-02-04 | 四川效率源信息安全技术有限责任公司 | Method for recovering file by reducing initial cluster number of FAT32 directory entry |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109614370A (en) | 2019-04-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8234468B1 (en) | System and method for providing variable length deduplication on a fixed block file system | |
| US20180107402A1 (en) | System and method for data storage using log-structured merge trees | |
| CN110998537B (en) | Expired backup processing method and backup server | |
| US20050055360A1 (en) | System and method for managing file system extended attributes | |
| US9442807B1 (en) | Handling data segments in deduplication | |
| CN110569147B (en) | Deleted file recovery method based on index, terminal device and storage medium | |
| US11409766B2 (en) | Container reclamation using probabilistic data structures | |
| CN111125298A (en) | Method, equipment and storage medium for reconstructing NTFS file directory tree | |
| CN109582501B (en) | File recovery method and device, computer equipment and storage medium | |
| US11093453B1 (en) | System and method for asynchronous cleaning of data objects on cloud partition in a file system with deduplication | |
| CN110888603A (en) | High-concurrency data writing method and device, computer equipment and storage medium | |
| CN110352410B (en) | Tracking access patterns of index nodes and pre-fetching index nodes | |
| CN109614370B (en) | Disk file scanning method and device, computer equipment and storage medium | |
| CN111104377A (en) | File management method, electronic device and computer-readable storage medium | |
| CN111104249A (en) | Method, apparatus and computer program product for data backup | |
| CN104035822A (en) | Low-cost efficient internal storage redundancy removing method and system | |
| CN114020522A (en) | Data backup method and device, electronic equipment and system | |
| CN113767378A (en) | File system metadata deduplication | |
| CN110659295B (en) | Method, apparatus and medium for recording valid data based on HAWQ | |
| CN106844091A (en) | One kind compression, restoring method and terminal | |
| CN109271383B (en) | Dynamic label processing method and device, computer equipment and storage medium | |
| US10949088B1 (en) | Method or an apparatus for having perfect deduplication, adapted for saving space in a deduplication file system | |
| CN115543918A (en) | File snapshot method, system, electronic equipment and storage medium | |
| CN110990640B (en) | Data determination method, device, equipment and computer readable storage medium | |
| CN111831617B (en) | Method for guaranteeing uniqueness of log data based on distributed system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |