CN112835858A - Method, device and equipment for recovering non-continuously stored files and storage medium - Google Patents
Method, device and equipment for recovering non-continuously stored files and storage medium Download PDFInfo
- Publication number
- CN112835858A CN112835858A CN202110277968.9A CN202110277968A CN112835858A CN 112835858 A CN112835858 A CN 112835858A CN 202110277968 A CN202110277968 A CN 202110277968A CN 112835858 A CN112835858 A CN 112835858A
- Authority
- CN
- China
- Prior art keywords
- file
- cluster
- entry
- cluster block
- short
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 41
- 238000011084 recovery Methods 0.000 claims abstract description 25
- 238000006243 chemical reaction Methods 0.000 claims description 4
- 238000004590 computer program Methods 0.000 claims description 3
- 238000010586 diagram Methods 0.000 description 6
- 238000005516 engineering process Methods 0.000 description 1
- 239000012634 fragment Substances 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000002085 persistent effect Effects 0.000 description 1
- 230000011218 segmentation Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000001052 transient effect Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/10—File systems; File servers
- G06F16/16—File or folder operations, e.g. details of user interfaces specifically adapted to file systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/14—Error detection or correction of the data by redundancy in operation
- G06F11/1402—Saving, restoring, recovering or retrying
- G06F11/1446—Point-in-time backing up or restoration of persistent data
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Human Computer Interaction (AREA)
- Data Mining & Analysis (AREA)
- Databases & Information Systems (AREA)
- Quality & Reliability (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention provides a method, a device, equipment and a storage medium for recovering a non-continuously stored file, wherein the recovery method comprises the steps of scanning a DATA area to obtain a short file directory entry of the file; judging whether the file is a deleted file or not through the first byte of the short file directory entry; if the file is a deleted file, acquiring a first cluster block of the file according to file information recorded in the short file directory entry; converting the first cluster block to a position in a FAT table; circularly searching the table entry with the table entry value of zero in the FAT from the position backward, and acquiring a subsequent cluster block corresponding to the table entry; and restoring the file through the data in the first cluster block and the data in the subsequent cluster block. After the recovery method of the invention obtains the first cluster block, the table entry with the zero entry value after the table entry of the first cluster block in the FAT table is also searched to obtain the subsequent cluster block, thereby realizing better recovery of the non-continuously stored file data.
Description
Technical Field
The present invention relates to the field of data recovery technologies, and in particular, to a method, an apparatus, a device, and a storage medium for recovering a non-contiguously stored file.
Background
The FAT32 file system consists of three parts, namely a DBR, a FAT table and a DATA area, when a file/folder in the FAT32 file system is deleted, a corresponding cluster chain table in the FAT table is cleared, the file/folder can only know a first cluster block and a file length pointed by a directory entry after being deleted, and for continuous DATA, the prior art can read the cluster block backwards according to the position of the first cluster as long as the file length is met. However, for discontinuous data, only the first cluster block of a file restored by using the method is normal, and the rest is all garbage data, and the file restoration method in the prior art cannot meet the restoration requirement of the discontinuous storage file.
Accordingly, the prior art is yet to be improved and developed.
Disclosure of Invention
The invention mainly aims to solve the technical problem that the file recovery method in the prior art cannot realize the recovery of the non-continuously stored files.
The invention provides a method for recovering a discontinuous storage file, which is applied to a FAT32 file system, and comprises the following steps:
scanning a DATA area to obtain a short file directory entry of a file;
judging whether the file is a deleted file or not through the first byte of the short file directory entry;
if the file is a deleted file, acquiring a first cluster block of the file according to file information recorded in the short file directory entry;
converting the first cluster block to a position in a FAT table;
circularly searching the table entry with the table entry value of zero in the FAT from the position backward, and acquiring a subsequent cluster block corresponding to the table entry;
and restoring the file through the data in the first cluster block and the data in the subsequent cluster block.
In an optional implementation manner of the first aspect of the present invention, the determining, according to the first byte of the short file directory entry, whether the file is a deleted file includes:
if the first byte of the short file directory entry is E5, the file corresponding to the short file directory entry is a deleted file.
In an optional implementation manner of the first aspect of the present invention, if the file is a deleted file, obtaining a first cluster block of the file according to file information recorded in the short file directory entry includes:
acquiring the low order of the initial cluster number in the short file directory entry, and assuming the high order of the initial cluster number;
reading data in the cluster block pointed to by the lower bits of the starting cluster number and the upper bits of the assumed starting cluster number;
and if the data is matched with the file extension name recorded in the short file directory entry, taking the cluster block as a first cluster block.
In an alternative implementation manner of the first aspect of the present invention, the converting the first cluster block into a position in a FAT table includes:
and acquiring the cluster number of the first cluster block, and acquiring the corresponding table entry number of the first cluster block in the FAT according to the cluster number.
In an optional implementation manner of the first aspect of the present invention, the circularly retrieving, from the position to the back, an entry whose entry value is zero in the FAT table, and acquiring a subsequent cluster block corresponding to the entry includes:
and circularly searching the table entry with the zero table entry value in the FAT table from the table entry number backward, and acquiring the subsequent cluster block corresponding to the table entry until the total length of the acquired first cluster block and the subsequent cluster block is more than or equal to the file length recorded in the short file directory entry or the table entry number is returned again.
In an optional implementation manner of the first aspect of the present invention, the method for recovering a discontinuous storage file further includes:
and if the file is not the deleted file, directly recovering the file through the cluster chain in the FAT table.
In an alternative embodiment of the first aspect of the present invention, the FAT table comprises an active FAT table and a backup FAT table.
The second aspect of the present invention provides a device for recovering a non-contiguously stored file, where the device for recovering a non-contiguously stored file comprises:
the scanning module is used for scanning the DATA area to obtain a short file directory entry of a file;
the judging module is used for judging whether the file is a deleted file or not through the first byte of the short file directory entry;
the acquisition module is used for acquiring a first cluster block of the file according to the file information recorded in the short file directory entry if the file is a deleted file;
the conversion module is used for converting the first cluster block into a position in the FAT table;
the retrieval module is used for circularly retrieving the table entries with the table entry values of zero in the FAT from the position and acquiring the subsequent cluster blocks corresponding to the table entries;
and the recovery module is used for recovering the file through the data in the first cluster block and the data in the subsequent cluster block.
A third aspect of the present invention provides a device for recovering a discontinuously stored file, where the device for recovering a discontinuously stored file includes: a memory having instructions stored therein and at least one processor, the memory and the at least one processor interconnected by a line;
the at least one processor calls the instruction in the memory to enable the recovery device of the discontinuous storage file to execute any one of the recovery methods of the discontinuous storage file.
A fourth aspect of the present invention provides a computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements the method for recovering a non-contiguously-stored file according to any one of the above.
Has the advantages that: the invention provides a method, a device, equipment and a storage medium for recovering a non-continuous storage file, wherein the method comprises the steps of scanning a DATA area to obtain a short file directory entry of the file; judging whether the file is a deleted file or not through the first byte of the short file directory entry; if the file is a deleted file, acquiring a first cluster block of the file according to file information recorded in the short file directory entry; converting the first cluster block to a position in a FAT table; circularly searching the table entry with the table entry value of zero in the FAT from the position backward, and acquiring a subsequent cluster block corresponding to the table entry; and restoring the file through the data in the first cluster block and the data in the subsequent cluster block. After the first cluster block is obtained, the recovery method of the invention also searches the table entry with zero value after the table entry of the first cluster block in the FAT table, obtains the subsequent cluster block and can adapt to the data recovery of the non-continuously stored file.
Drawings
FIG. 1 is a diagram of a FAT32 file system;
FIG. 2 is a flow chart of a recovery method for discontinuously stored files according to the present invention;
FIG. 3 is a diagram illustrating a FAT table entry and its stored table entry values when the file A is not deleted according to the present invention;
FIG. 4 is a diagram illustrating a FAT table entry and its stored table entry values after the file A is deleted according to the present invention;
FIG. 5 is a schematic diagram of an embodiment of a recovery apparatus for discontinuously stored files according to the present invention;
FIG. 6 is a diagram illustrating an embodiment of a recovery apparatus for discontinuously storing files according to the present invention.
Detailed Description
The embodiment of the invention provides a method, a device and equipment for recovering a non-continuous storage file and a storage medium.
The terms "first," "second," "third," "fourth," and the like in the description and in the claims, as well as in the drawings, if any, are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It will be appreciated that the data so used may be interchanged under appropriate circumstances such that the embodiments described herein may be practiced otherwise than as specifically illustrated or described herein. Furthermore, the terms "comprises," "comprising," or "having," and any variations thereof, are intended to cover non-exclusive inclusions, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
Referring to fig. 1, the FAT32 file system is composed of three parts, a DBR, a FAT table, and a DATA area. The term cluster is used in the FAT32 file system to describe a block, and all cluster blocks in a disk are assigned a cluster number, and the DATA area is composed of all cluster blocks. Every four bytes in the FAT table constitute an entry, and each entry sequentially corresponds to a cluster block in the disk one by one starting from entry number two. The FAT table forms a linked list by the sequence number of the entry itself and the sequence number of the next entry stored in the entry. All cluster blocks of a file, folder are known by a file/file directory entry pointing to an entry in the FAT table.
The FAT32 file system stores files in the basic unit of cluster blocks, and if the size of a file exceeds one cluster, the file is divided into many cluster blocks. Files are generally stored continuously, and when the number of disk fragments is large, the files are likely to be stored discontinuously. The cluster chain of the FAT table is used for recording the storage sequence and the position of the cluster block of the file, and the file can be read and written by accessing the cluster block corresponding to the chain table.
The attributes of the file are stored separately from the contents of the file. The content of the file is divided into cluster blocks and then stored in a DATA area, and an FAT table records the positions of the cluster blocks in sequence. The attributes of the file are stored by the short file directory entry, including information such as file name, file creation time, file size, cluster number of the first cluster block of the file, and the like. The short file directory entry can be associated with the content of the file by the cluster number of the first cluster block of the file and the corresponding linked list in the FAT table.
When the file/folder is deleted, the corresponding cluster chain table in the FAT table is cleared, and the first byte of the file short directory entry becomes a preset character. Only the low address and file length information of the first cluster block of the file/folder can be known from the short file directory entry after the file is deleted. The data of the continuously stored file can be read backwards according to the position of the first cluster, and the length of the file is only required. But the data of the discontinuously stored files are restored by using the method, only the first cluster block of the files is normal, and the rest of the files are all garbage data.
To solve the above technical problem, referring to fig. 2, a first aspect of the present invention provides a method for recovering a discontinuous storage file, which is applied to a FAT32 file system, where the method for recovering the discontinuous storage file includes:
s100, scanning a DATA area to obtain a short file directory entry of a file; the short file directory entry is an important data structure of the FAT32 file system, and stores information about the filenames, file extensions, starting cluster numbers, time values, file lengths and the like of subdirectories or files;
s200, judging whether the file is a deleted file or not through the first byte of the short file directory entry;
in this embodiment, after the file of the FAT32 file system is deleted, the first byte of the short file directory entry corresponding to the file will become E5, so that it can be determined whether the file is a deleted file by the first byte of the short file directory entry;
s300, if the file is a deleted file, obtaining a first cluster block of the file according to file information recorded in the short file directory entry;
in this embodiment, the file information recorded in the short file directory entry includes a file name, a file extension, a starting cluster high bit, a starting cluster low bit and a file length, and a first cluster block of a file may be determined according to the starting cluster high bit and the starting cluster low bit, but since the starting cluster high bit of a deleted file becomes zero, the first cluster block needs to be obtained by guessing the starting cluster high bit;
s400, converting the first cluster block into a position in a FAT table;
in this embodiment, each cluster block in the DATA area has a corresponding cluster number, the first cluster block is one of the cluster blocks, and after determining which cluster block the first cluster block is, the cluster number of the first cluster block can be known, and the cluster number of the first cluster block corresponds to the table entry number of the table entry in the FAT table, that is, starting from the table entry No. 2 in the FAT table, the table entry number of the table entry will be the same as the cluster number of the cluster block, that is, the table entry No. 2 corresponds to the cluster block No. 2, the table entry No. 3 corresponds to the cluster block No. 3, and so on;
s500, circularly searching the table entry with the zero table entry value in the FAT from the position back, and acquiring a subsequent cluster block corresponding to the table entry;
in this embodiment, for example, it is determined that the cluster block 3 is the first cluster block, and the table entry 3 in the FAT table corresponding to the cluster block 3, then starting from the table entry 3, it is sequentially determined whether the table entry values of all table entries from the table entry 4, the table entry 5, and the table entry 6 to the table entry 3 are zero, and if the table entry values of the table entry 5 and the table entry 6 are zero, the data in the cluster block 5 and the cluster block 6 corresponding to the table entry 5 and the cluster block 6 are obtained as the recovery data of the file;
s600, restoring the file through the data in the first cluster block and the data in the subsequent cluster block.
For example, referring to fig. 3, the undeleted file a is saved in the following manner: the first cluster is a cluster No. 3, a table entry value 5 is stored in a table entry No. 3 corresponding to the cluster No. 3, then the next cluster block of the file A is the cluster No. 5, a table entry value 7 is stored in a table entry No. 5 corresponding to the cluster No. 5, then the next cluster of the file A is the cluster No. 7, a terminal is stored in a table entry No. 7 corresponding to the cluster No. 7, and then the file A consists of the cluster No. 3, the cluster No. 5 and the cluster No. 7; referring to fig. 4, after the file a is deleted, the entry values of the entry 3, the entry 5, and the entry 7 are all cleared, and when the file a is restored, the first cluster is guessed as the cluster 3 according to the file information recorded in the short file directory entry, and then the entry values of the entry 5 and the entry 7 in the FAT table are retrieved in a backward loop manner and are all zero (the entry value being zero indicates that the entry is not reallocated for use, and the restoration data of the file may be stored therein).
In an optional implementation manner of the first aspect of the present invention, the determining, according to the first byte of the short file directory entry, whether the file is a deleted file includes:
if the first byte of the short file directory entry is E5, the file corresponding to the short file directory entry is a deleted file.
In an optional implementation manner of the first aspect of the present invention, if the file is a deleted file, obtaining a first cluster block of the file according to file information recorded in the short file directory entry includes:
acquiring the low order of the initial cluster number in the short file directory entry, and assuming the high order of the initial cluster number;
reading data in the cluster block pointed to by the lower bits of the starting cluster number and the upper bits of the assumed starting cluster number;
and if the data is matched with the file extension name recorded in the short file directory entry, taking the cluster block as a first cluster block.
In an alternative implementation manner of the first aspect of the present invention, the converting the first cluster block into a position in a FAT table includes:
and acquiring the cluster number of the first cluster block, and acquiring the corresponding table entry number of the first cluster block in the FAT according to the cluster number.
In an optional implementation manner of the first aspect of the present invention, the circularly retrieving, from the position to the back, an entry whose entry value is zero in the FAT table, and acquiring a subsequent cluster block corresponding to the entry includes:
and circularly searching the table entry with the zero table entry value in the FAT table from the table entry number backward, and acquiring the subsequent cluster block corresponding to the table entry until the total length of the acquired first cluster block and the subsequent cluster block is more than or equal to the file length recorded in the short file directory entry or the table entry number is returned again.
In this embodiment, if the total length of the first cluster block and the subsequent cluster block is always smaller than the file length recorded in the short file directory entry after the last entry number in the FAT table is retrieved, then the entry number before the entry number corresponding to the first cluster block needs to be retrieved until the entry number corresponding to the first cluster block.
In an optional implementation manner of the first aspect of the present invention, the method for recovering a discontinuous storage file further includes:
and if the file is not the deleted file, directly recovering the file through the cluster chain in the FAT table. In this embodiment, for the recovery of the undeleted file, since the entry of the FAT table stores the entry value of the next entry (i.e., the cluster chain), the file can be recovered directly through the cluster chain.
In an alternative embodiment of the first aspect of the present invention, the FAT table comprises an active FAT table and a backup FAT table.
Referring to fig. 5, a second aspect of the present invention provides an apparatus for restoring a non-contiguously stored file, including:
the scanning module 10 is configured to scan the DATA area to obtain a short file directory entry of a file;
a judging module 20, configured to judge whether the file is a deleted file according to a first byte of the short file directory entry;
an obtaining module 30, configured to obtain a first cluster block of the file according to file information recorded in the short file directory entry if the file is a deleted file;
a conversion module 40, configured to convert the first cluster block into a position in a FAT table;
a retrieval module 50, configured to retrieve, in a cycle from the position to the back, a table entry with a zero table entry value in the FAT table, and obtain a subsequent cluster block corresponding to the table entry;
a restoring module 60, configured to restore the file according to the data in the first cluster block and the data in the subsequent cluster block.
In an optional implementation manner of the second aspect of the present invention, the determining module is further configured to determine that the file corresponding to the short file directory is a deleted file if a first byte of the short file directory entry is E5.
In an optional implementation manner of the second aspect of the present invention, the obtaining module is further configured to obtain a lower order of a start cluster number in the short file directory entry, and assume a higher order of the start cluster number;
reading data in the cluster block pointed to by the lower bits of the starting cluster number and the upper bits of the assumed starting cluster number;
and if the data is matched with the file extension name recorded in the short file directory entry, taking the cluster block as a first cluster block.
In an optional implementation manner of the second aspect of the present invention, the conversion module is further configured to obtain a cluster number of the first cluster block, and obtain, according to the cluster number, an entry number of a corresponding entry of the first cluster block in the FAT table.
In an optional implementation manner of the second aspect of the present invention, the retrieving module is further configured to retrieve, in a backward loop from the location, an entry whose entry value is zero in the FAT table, and acquire a subsequent cluster block corresponding to the entry until a total length of the acquired first cluster block and the acquired subsequent cluster block is greater than or equal to a file length recorded in the short file directory entry or the entry number is returned again.
In an optional implementation manner of the second aspect of the present invention, the restoring module is further configured to restore the file directly through a cluster chain in the FAT table if the file is not a deleted file.
In an alternative embodiment of the second aspect of the present invention, the FAT table comprises an active FAT table and a backup FAT table.
Fig. 6 is a schematic structural diagram of a recovery apparatus for discontinuously stored files, which may have a relatively large difference due to different configurations or performances, and may include one or more processors 70 (CPUs) (e.g., one or more processors) and a memory 80, and one or more storage media 90 (e.g., one or more mass storage devices) for storing applications or data according to an embodiment of the present invention. The memory and storage medium may be, among other things, transient or persistent storage. The program stored on the storage medium may include one or more modules (not shown), each of which may include a series of instruction operations in a recovery apparatus for non-contiguously stored files. Still further, the processor may be configured to communicate with a storage medium to execute a series of instruction operations in the storage medium on the answer sheet segmentation apparatus.
The restore device for non-contiguously stored files may also include one or more power supplies 100, one or more wired or wireless network interfaces 110, one or more input-output interfaces 120, and/or one or more operating systems, such as Windows Server, Mac OS X, Unix, Linux, FreeBSD, and the like. Those skilled in the art will appreciate that the recovery device structure for non-contiguously stored files shown in FIG. 6 does not constitute a limitation to recovery devices for non-contiguously stored files, and may include more or fewer components than shown, or some components in combination, or a different arrangement of components.
The present invention also provides a computer-readable storage medium, which may be a non-volatile computer-readable storage medium, or a volatile computer-readable storage medium, wherein instructions are stored in the computer-readable storage medium, and when the instructions are executed on a computer, the instructions cause the computer to execute the steps of the method for restoring a non-contiguous storage file.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described systems, apparatuses, and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a read-only memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
The above-mentioned embodiments are only used for illustrating the technical solutions of the present invention, and not for limiting the same; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.
Claims (10)
1. A method for recovering a discontinuous storage file is applied to a FAT32 file system, and is characterized in that the method for recovering the discontinuous storage file comprises the following steps:
scanning a DATA area to obtain a short file directory entry of a file;
judging whether the file is a deleted file or not through the first byte of the short file directory entry;
if the file is a deleted file, acquiring a first cluster block of the file according to file information recorded in the short file directory entry;
converting the first cluster block to a position in a FAT table;
circularly searching the table entry with the table entry value of zero in the FAT from the position backward, and acquiring a subsequent cluster block corresponding to the table entry;
and restoring the file through the data in the first cluster block and the data in the subsequent cluster block.
2. The method for recovering the discontinuously stored file as claimed in claim 1, wherein said determining whether the file is a deleted file according to the first byte of the short file directory entry comprises:
if the first byte of the short file directory entry is E5, the file corresponding to the short file directory entry is a deleted file.
3. The method for recovering a discontinuously stored file as claimed in claim 1, wherein said obtaining a first cluster block of the file according to the file information recorded in the short file directory entry if the file is a deleted file comprises:
acquiring the low order of the initial cluster number in the short file directory entry, and assuming the high order of the initial cluster number;
reading data in the cluster block pointed to by the lower bits of the starting cluster number and the upper bits of the assumed starting cluster number;
and if the data is matched with the file extension name recorded in the short file directory entry, taking the cluster block as a first cluster block.
4. The method for recovering the discontinuous storage file according to claim 1, wherein the converting the first cluster block into a position in a FAT table comprises:
and extracting the cluster number of the first cluster block, and obtaining the corresponding table entry number of the first cluster block in the FAT according to the cluster number.
5. The method for recovering a discontinuously stored file according to claim 4, wherein the circularly retrieving, from the position to the back, entries in the FAT table whose entry values are zero, and acquiring subsequent cluster blocks corresponding to the entries includes:
and circularly searching the table entry with the zero table entry value in the FAT table from the table entry number backward, and acquiring the subsequent cluster block corresponding to the table entry until the total length of the acquired first cluster block and the subsequent cluster block is more than or equal to the file length recorded in the short file directory entry or the table entry number is returned again.
6. The method for recovering a discontinuous storage file according to claim 1, further comprising:
and if the file is not the deleted file, directly recovering the file through the cluster chain in the FAT table.
7. The method for recovering the discontinuous storage file according to claim 1, wherein the FAT table comprises an active FAT table and a backup FAT table.
8. An apparatus for restoring a file stored discontinuously, the apparatus comprising:
the scanning module is used for scanning the DATA area to obtain a short file directory entry of a file;
the judging module is used for judging whether the file is a deleted file or not through the first byte of the short file directory entry;
the acquisition module is used for acquiring a first cluster block of the file according to the file information recorded in the short file directory entry if the file is a deleted file;
the conversion module is used for converting the first cluster block into a position in the FAT table;
the retrieval module is used for circularly retrieving the table entries with the table entry values of zero in the FAT from the position and acquiring the subsequent cluster blocks corresponding to the table entries;
and the recovery module is used for recovering the file through the data in the first cluster block and the data in the subsequent cluster block.
9. A recovery apparatus for discontinuously stored files, the recovery apparatus comprising: a memory having instructions stored therein and at least one processor, the memory and the at least one processor interconnected by a line;
the at least one processor invokes the instructions in the memory to cause the recovery device of the non-contiguously stored file to perform the recovery method of the non-contiguously stored file of any of claims 1-7.
10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, implements a method for restoring a file stored contiguously as claimed in any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110277968.9A CN112835858A (en) | 2021-03-15 | 2021-03-15 | Method, device and equipment for recovering non-continuously stored files and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110277968.9A CN112835858A (en) | 2021-03-15 | 2021-03-15 | Method, device and equipment for recovering non-continuously stored files and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112835858A true CN112835858A (en) | 2021-05-25 |
Family
ID=75930161
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110277968.9A Pending CN112835858A (en) | 2021-03-15 | 2021-03-15 | Method, device and equipment for recovering non-continuously stored files and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112835858A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113468123A (en) * | 2021-06-30 | 2021-10-01 | 深圳软牛科技有限公司 | Folder de-duplication recovery method, device, equipment and storage medium |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102937924A (en) * | 2012-10-30 | 2013-02-20 | 厦门市美亚柏科信息股份有限公司 | File allocation table (FAT) data recovery method based on file characteristic and file system |
| CN109471756A (en) * | 2018-11-16 | 2019-03-15 | 深圳市得微电子有限责任公司 | Data reconstruction method, device and computer readable storage medium |
| CN109614370A (en) * | 2018-11-28 | 2019-04-12 | 万兴科技股份有限公司 | Disk file scan method, device, computer equipment and storage medium |
-
2021
- 2021-03-15 CN CN202110277968.9A patent/CN112835858A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102937924A (en) * | 2012-10-30 | 2013-02-20 | 厦门市美亚柏科信息股份有限公司 | File allocation table (FAT) data recovery method based on file characteristic and file system |
| CN109471756A (en) * | 2018-11-16 | 2019-03-15 | 深圳市得微电子有限责任公司 | Data reconstruction method, device and computer readable storage medium |
| CN109614370A (en) * | 2018-11-28 | 2019-04-12 | 万兴科技股份有限公司 | Disk file scan method, device, computer equipment and storage medium |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113468123A (en) * | 2021-06-30 | 2021-10-01 | 深圳软牛科技有限公司 | Folder de-duplication recovery method, device, equipment and storage medium |
| CN113468123B (en) * | 2021-06-30 | 2024-02-20 | 深圳软牛科技有限公司 | File duplicate removal recovery method, device, equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10795812B1 (en) | Virtual copy forward method and system for garbage collection in cloud computing networks | |
| US10108544B1 (en) | Dynamic duplication estimation for garbage collection | |
| US6615224B1 (en) | High-performance UNIX file undelete | |
| US7934064B1 (en) | System and method for consolidation of backups | |
| CN100524285C (en) | Bill processing device and method | |
| US20020129028A1 (en) | System and method for managing file system extended attributes | |
| US8095678B2 (en) | Data processing | |
| CN110569147B (en) | Deleted file recovery method based on index, terminal device and storage medium | |
| US10496612B2 (en) | Method for reliable and efficient filesystem metadata conversion | |
| CN112115002B (en) | Method and device for recovering file from damaged or untrusted mechanical hard disk | |
| US9886446B1 (en) | Inverted index for text searching within deduplication backup system | |
| EP1845461A1 (en) | Fast file attribute search | |
| CN115840731A (en) | File processing method, computing device and computer storage medium | |
| CN112835858A (en) | Method, device and equipment for recovering non-continuously stored files and storage medium | |
| CN113419897A (en) | File processing method and device, electronic equipment and storage medium thereof | |
| CN117667481A (en) | Nef file repairing method, device, equipment and storage medium | |
| CN107220146B (en) | File scanning recovery method and device | |
| CN112905546A (en) | Deleted file recovery method, device, equipment and storage medium | |
| KR20110023580A (en) | The method and system for recovering data | |
| CN114328031B (en) | Metadata organization method, system, storage medium, backup method and retrieval method | |
| CN116150093A (en) | Method for realizing object storage enumeration of objects and electronic equipment | |
| KR101111400B1 (en) | Apparatus and method for recovering the data of embeded system | |
| JP2003337822A (en) | Compression retrieval archive processing method, compression retrieval archive processing program and recording medium with its program recorded | |
| CN108021472A (en) | The formatting restoration methods and storage medium of ReFS file system | |
| US7720805B1 (en) | Sequential unload processing of IMS databases |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |