R-Undelete: Recovering files from a broken computer

(for example, when deleting files from Windows Explorer, you pressed the Shift+Del keys). Chances are that the files are still on the hard drive - you just need to find them.

To successfully recover lost files, you need to follow some steps. Don't despair - you don't have to be an expert in the field to do this. information technologies, you also won't have to pay hundreds of dollars to a specialist to recover your information. The R-Undelete utility is intended primarily for novice users. It uses the same technologies as our professional data recovery utility R-Studio, but it user interface is quite convenient and easy to use, which makes the program perfect solution for most users when recovering deleted files.

But before you download R-Undelete (or any other file recovery utility), it is imperative that you understand and adhere to a few important rules:

First of all
First of all, you need to minimize the information stored on your computer's disk. To understand why this is needed, let's consider what happens when files are deleted - both accidental and intentional. In reality, Windows does not delete data instantly. When data is deleted, the disk sectors where they were located are marked as “deleted” and become available for recording information by other applications (programs). Therefore, all your data, including information about file names, can partially or completely remain on the disk, and therefore can be recovered.

However, there is always a chance that Windows OS will require this disk space to write new data. And if the sectors where the “deleted” data was located are overwritten, then it will no longer be possible to restore them.

Therefore: the sooner you start the data recovery process, and the less data is written to the disk, the higher your chances of recovering .

So our main recommendation is this: do not use the computer on which the lost files were located. If you are downloading something to the system drive, then cancel the download. Do not run programs, create (save) any files, or use the Internet until you have restored the data. If possible, do not even turn off or restart the computer, as in the process of turning on/off Windows computer constantly writes information to the system disk.

Leave your computer on but don't use it. If you have another computer, then use it further - download the R-Undelete utility onto it and copy it to removable media, for example, on USB flash drive or on CD-RW

If you have an R-Undelete registration key, write it down or save a copy to text file on removable media.

If you do not have a registration key, you can run R-Undelete in demo mode. IN this mode All data recovery operations are available, including file search and disk scanning. The only limitation is that in this mode you cannot save recovered files larger than 256 KB. This allows you to evaluate the possibilities of data recovery before purchasing a license. If the lost files are found, you can immediately buy a license, enter the received registration key into the registration field of the program and immediately restore the files without losing what has already been done.

Below we discuss in detail the process of recovering deleted files from an external exFAT disk R-Undelete. IN in this example We will be recovering a folder (and all the files in it) called "Photos" that was deleted from the "MyVacation" folder.

Let's delete the "Photos" folder to the Recycle Bin (to demonstrate R-Undelete's data recovery capabilities only - you do not need to delete any files from your computer to study this tutorial).

Here you can see the "Photos" folder in the trash...

To enlarge the image, click on it.

Regardless of how the files were deleted, you need to recover them when help R-Undelete. Next, let's look at how this can be done.

Installation of R-Undelete
Download, install and run R-Undelete. If you are going to recover files from system disk, install R-Undelete on external removable media to avoid overwriting lost files. See webpage for more complete information.

Recovering Deleted Files Using R-Undelete
Select the drive where the deleted files were located. In our example this is external drive E:\.


To enlarge the image, click on it.
Hover over this disk and click on Show files. R-Undelete will begin searching for files on the disk. This may take some time, depending on how large your HDD.

After R-Undelete finishes searching for deleted files, view the files found on the external drive


To enlarge the image, click on it.

Now you need to find the files that you want to recover. To do this, R-Undelete gives you several options:

By sorting by file type
R-Undelete sorts files by the most common types and places them in the appropriate bookmarks. For our case, the corresponding tab is “Pictures”. This tab contains additional opportunity file display - "Tiles". Click on this tab, select Tiles and their size:


To enlarge the image, click on it.

By manually searching for individual files or groups of files:
You can find files by searching them manually. To do this, click on the Search button, specify a file name or file mask, click on the Start button, and only the corresponding files will be shown.

To enlarge the image, click on it.
Files are searched on the current bookmark. Select the All tab to search all files.

For more detailed instructions by sorting and manual search please refer to the R-Undelete help pages: and .

View files:
You can use the built-in file viewer to evaluate the chances of successful file recovery or to find the file you need to recover. Click right click by file to view it.


To enlarge the image, click on it.

Close the viewer to return to the remaining files.

Deep Scan
If quick search didn't find your deleted files, you can try deep scanning. During this procedure, R-Undelete deeply analyzes all data on the disk, including parsing information about files and searching for files based on their signatures. You can read more about the Deep Scan procedure and file signatures on the R-Undelete help page: .

Click the Deep scan button


To enlarge the image, click on it.

R-Undelete will begin scanning. The scanning process can be monitored while the disk is being analyzed.


To enlarge the image, click on it.

During scanning, additionally found files are automatically added to the corresponding bookmark. In this case, all settings for searching and marking files will be reset.

Depending on your hardware, scanning times may vary, even during the process, and may be quite long for large disks. Deep Scan can be interrupted and then resumed by pressing the Resume scan button.

When deleted files are found, mark them for recovery:


To enlarge the image, click on it.

When all necessary files marked for restoration, sufficient data must be available to preserve them large space on another disk.

Never save recovered files to the same location as they were, or you may lose them completely!

Choose how you want to save files: either in file type folders or in an actual folder structure.

After all necessary preparation, click on the Recover button to start recovering files. Wait while R-Undelete recovers the files and evaluate the results.


To enlarge the image, click on it.

After the recovery is complete, the folder with the recovered files will automatically open.


To enlarge the image, click on it.

The recovery session is now complete. Go to the Disks panel to start the next session or click the Exit button to exit the program.

Upgrade R-Undelete Home to R-UNDELETE
The free version of R-Undelete Home allows the user to evaluate how the program recovers files from file NTFS systems and ReFS, for which it has full functionality for saving files smaller than 256KB. Regardless of this limitation, all recovered files can be viewed in the built-in viewer to assess the chances of their recovery before you upgrade home version(R-Undelete Home) to recover files from NTFS drives and ReFS.

You need to purchase a license for R-UNDELETE if you want to recover files from NTFS and ReFS drives. Moreover, R-UNDELETE can recover files from any volumes visible to the operating system. This could be software or hardware RAIDs, Windows Storage Spaces, etc.

This can be done on the fly, even while performing file recovery operations, and the program does not need to be restarted. For more detailed information refer to the R-Undelete help page: .

Conclusion
You can see that recovering files using R-Undelete is quite easy even for a novice user. Using this utility will not damage your hard drive or affect the performance of your PC. Therefore, it is quite reasonable to try using this program before turning to the services of specialists.

Undelete 360 ​​is a file recovery program. Undelete 360 ​​is completely free (for home use) and has high-quality translation into Russian. To scan and recover data unlike any other similar programs, the application uses more efficient algorithm search, which can significantly reduce the time spent on preliminary scanning hard drives. The application can work with flash media, memory cards, CD\DVD, ZIP, external HDDs etc.

Working with the program is organized in the simplest form - you just need to select a disk and start the preliminary scanning process. When finished, a list of deleted files that can be recovered will be displayed. There is also a very convenient filter that will allow you to display the results, sorting them by type or in a tree view. Besides brief information displayed for each element (name and path), it is possible to view its properties in more detail in detail. Besides, interesting function is the presence of a built-in module preview recoverable information, since sometimes it is quite difficult to remember the contents of a file by its name. Also, another addition to the standard functionality of the program is an integrated hexadecimal viewer, which allows for byte-by-byte analysis of the content.

Undelete 360 ​​allows you not only to recover data, but also to permanently delete it. For removal, one of two algorithms can be used - in one pass (for standard mode removal) and in three passes (for irreversible). This utility can be used to clean up the file system and system areas (MFT, boot areas, etc.), for example, when disposing of a disk or selling it, to prevent unwanted information leakage.

For those who have difficulty learning and working with the utility, a video course and quick start materials are available on the developer’s website. Two versions of the program are available for download - portable for use from removable media, and standard version with the installer.

Separately, I would like to note that having this program on your computer is highly desirable, especially if you do not use any tools Reserve copy. You can download portable version, for example, on a flash drive and keep it handy - no one knows when it might come in handy. And if this suddenly happens, then the quality of file recovery depends on the speed of your reaction - the more time passes from the moment of accidental deletion, the higher the likelihood of overwriting data on the disk, which will entail only partial recovery (in best case scenario).

1. Selecting a scan partition on the HDD

When you launch the eSupport UndeletePlus utility, the application will open a panel on the left side of the window for selecting a drive. In this panel, select the drive to scan (for example, it could be a flash drive, digital camera, SD card or other devices), by checking the box next to the required letter file volume where you want to restore files.

2. Scan disk

Click the Start Scan button to search for files on the selected partition.

  • To scan the specified partition, click Start Scan
  • At the beginning of the disk scan, the progress bar displays the time remaining to complete the disk scan

3. Manage search results

Once the scan is complete, UndeletePlus displays the following information and options that can be used to convenient search files that you want to recover - in full or at least partially:

The Folders panel displays the folder structure for deleted files on the drives you have selected. In some cases, the file name may be corrupted, in which case the name format may appear as "Deleted XXXX".

Note: subdirectories tend to retain their original names after recovery.

Folders and file types

  • Folders: Displays the folders found by scanning
  • File Types: Files found during scanning are stored in categories and file type. All other files for which no match was found file extension, are located in the Other Files category. When a file type is selected, files found in the category are displayed in the Results Pane. You can freely sort the list of files in this panel by clicking on the column header. WHEN you click on a file name, its contents can be seen in the Preview panel.

To display all found files, click on My Computer in file types or the Folders panel.

Filtering search results

Filtering in UndeletePlus is available by clicking on the Filter button at the top of the application. Define the filtering method by clicking the Set Filter button. To remove a filter or cancel its effect, click the Clear button.

Note: the filter based on the entered text works not only for file names, but also for extensions.

Example: doc. If you enter the text “doc”, then deleted files with such names will be displayed in the list of the results panel

  • todolist.doc
  • todolist.doc.old
  • documentation.txt
  • WomanDoctor.jpg
  • MyResume.docx
  • Option When was it modified? (When was the file modified?). Check this box to filter results by file creation or modification date. Select the file type, creation or modification time (Created / Modified) from the drop-down list, then specify the required time range to search for deleted files for the specified period of time.
  • What size is it? (“What size is the file?”). Select this option to filter files by size. The options "at least" and "at most" (minimum and maximum, respectively) allow you to limit the file size in kilobytes.
  • Hide overwritten files – remove unnecessary duplicate files from the results
  • Hide temporary files(“Hide temporary files") – remove temporary files from search results

4. Saving recovered files

When eSupport UndeletePlus saves a recovered file, it reads its contents and then writes that content to separate file with the same name. Be sure to save the files you recovered to another drive to avoid the recovered files from being overwritten by the ones you are recovering. Later, you can always copy the received files to where they were erased from.

To complete the process of recovering a deleted file, in the Results Pane, check the file to be recovered.

To select all files, right-click on the file name and then select "Select All Items" from the menu.

Click on the Recover File button.

Final stage data recovery

Confirm the operation by checking the Possible box Data Loss (Possible removal data).

The recovered files will be copied to the folder you specified at the beginning of the process.

Almost any user one day discovers that his computer refuses to work anymore. Well, a computer can be repaired or replaced, but how do you get everything out of it? valuable files, such as family photographs, music and film collections along with financial documents? This article gives you detailed step by step guide on how to get them again using a file recovery program.

Problem identification
The first step is to find the source of the problem. Is it faulty computer hardware or a program (operating system crash, for example)?

  • Signs that your computer won't start due to faulty programs: the computer starts, the boot procedure begins, Windows begins to load, but then stops, and the computer freezes or goes into reboot. In this case, files can be recovered using R-Studio Emergency. Our article Data Recovery Using R-Studio Emergency explains how to do this. In addition to this article, we recommend that you check the status of your S.M.A.R.T. settings. before files are restored.
  • Signs that your computer won't start due to faulty hardware: the computer does not turn on, you hear unusual beeps when you turn it on, the boot procedure ends suddenly, the computer displays warnings about faulty components in the computer, etc. In this case, file recovery requires some steps with computer hardware. You will need to remove the disk from faulty computer and connect it to the working machine.

Preparing your work computer for file recovery
1. Download and install R-Undelete. There is no need to buy the program immediately. You can wait until it becomes clear that the files can be recovered. R-Undelete can then be registered on the fly.
2. Make sure there is enough space to save the recovered files. R-Undelete can save files to any local or remote disk, which is visible to the operating system.

Preparing the disk for file recovery
1. Open the computer case and remove the disk. It's pretty easy for desktop computer, but may cause difficulties when opening the laptop case.

Fig.1. Hard drive in laptop

2. Connect the drive to your work computer. You can use a USB/SATA adapter,


Fig.2. Disk connected to the computer via a USB/SATA adapter
To enlarge the image, click on it.
or connect it directly via a SATA cable.


Fig.3. Disk connected to computer via SATA cable
To enlarge the image, click on it.
Please note that you can only connect the drive via a SATA cable to a switched off computer.

Recovering files from an ejected disk
1. Start your computer.
Make sure that the disk does not show any signs of hardware failure:

  • The system does not detect the drive, or it appears under an unusual name.
  • The hard drive makes unusual sounds, clicks, and starts very slowly.
  • Control programs SMART parameters report severe disk iron failure

Important! If you think the hard drive is faulty, DO NOT DO ANYTHING ELSE WITH IT! Do not attempt to run a scan or data recovery procedure. Do not try to use any other data recovery program. Remember that playing with the disc in this condition will definitely cause even more damage to your files. At best you will have to pay extra money professional service for data recovery. At worst, you will lose your files forever. Take the drive to qualified data recovery specialists. They have special equipment and, more importantly, the required skills to work with such discs.

2. Try to find the drive in Windows Explorer.
If the file system is not damaged, Windows Explorer it will show folders and files, and they can be copied without using file recovery programs. But before that, we highly recommend checking your S.M.A.R.T. at the disk to determine whether it can be worked with. You can use R-Undelete for this. Below we will show you exactly how.

3. If Windows Explorer cannot show the files on the disk, run R-Undelete.
Find the disk with the damaged file system. Most likely R-Undelete will not show any file system on it. You can also check the disk size to identify it.


Fig.4. Disk with damaged file system in R-Undelete
To enlarge the image, click on it.

It would be wise to check the S.M.A.R.T. attributes of the drive to ensure it is good condition. Right-click the drive and select Show S.M.A.R.T. in the context menu.


Fig.5. S.M.A.R.T. attributes of a disk with a damaged file system
To enlarge the image, click on it.

If the disk condition is Caution, minor problems with the disk are possible in the future, you can work with it, but carefully and with regular check these parameters. It is recommended to create a disk image, although this will require extra bed for storing it.

If the condition disk Bad, his condition is critical and the chances of his hardware failing are very high. Best recommendation in this case, we will stop working with the disk and give it to professional data recovery specialists. You can, of course, continue to work with it at your own peril and risk, but then it is extremely necessary to create a disk image.

After checking the status of the S.M.A.R.T. parameters. select the disk and click the Next button.

4. Select Detailed Scan for the lost files and Enable File Types.


Fig.6. Scan disk
To enlarge the image, click on it.

It may make sense to select only those types of files that could conceivably be on damaged disk. Most likely, these are files with music, photos, movies and documents and Microsoft Office. To do this, click on the Known File Types button,

Fig.7. List of known file types to search
To enlarge the image, click on it.

Click on Clear button All and select only the file types you want to find and recover.

Then click on the Next button. R-Undelete will begin scanning the drive, showing its progress. Scanning large disk may be lengthy, so patience may be required.


Fig.8. Disk scan results
To enlarge the image, click on it.
When scanning is complete, click the Next button to continue.

5. Find the original logical drive
(If R-Undelete finds only one partition, it will skip this step.)


Fig.9. Detected logical drives
To enlarge the image, click on it.

When R-Undelete finishes scanning, it will show the partitions found (drives that R-Undelete considers to exist or existed on the hard drive).

R-Undelete shows them different colors, depending on which partition elements were detected.

An existing logical drive or partition.
Found for this section boot records and file records.
Only file entries were found for this partition.
Only boot entries were found for this partition.

If R-Undelete finds multiple recognized partitions, you need to determine which one corresponds to the real one. logical drive, on which they were necessary files. IN general case, you can use the following recommendations:

  • If you want to recover files from a disk with a damaged file system, then most likely it will be a green partition found.
  • If you want to recover files from a previously deleted or reformatted partition, then most likely it will be a yellow partition found.

However, this is not always the case. Always check the file system, the beginning and size of the found partition. These characteristics must match the found partition and the actual logical disk/partition.

You may select the wrong section, but you can always return to this panel and select another.

After selecting a partition, click the Next button and R-Undelete will begin listing the files on it.

6. Will find lost files and mark them for recovery
This can be done in the following ways:

* Moving through the folder tree.


Fig. 10. Files and folders marked for recovery
To enlarge the image, click on it.

* Sorting them by file types (extensions) and timestamps.


Fig. 11. Files sorted by their types (extensions)
To enlarge the image, click on it.
Such file searches are very important, since in a damaged file system files can be found in any, sometimes even very strange, place on the disk.

* Direct search for individual files.


Fig. 12. Search for individual files
To enlarge the image, click on it.
See R-Undelete help: for more information.

Note that a file or folder marked for recovery remains marked even when you switch from, say, the actual folder tree to files sorted by their permissions. It is necessary to specially unmark the file if it does not need to be restored.

While marking files for recovery, you can also evaluate the chances that R-Undelete can successfully recover them. Double-click on the file to preview it and look at the result.


Fig. 13. JPG file preview
To enlarge the image, click on it.

8. File recovery
Now, if you decide that R-Undelete is able to recover lost files, you can buy a license and register it on the fly without restarting the program.

After marking all files for recovery, click on the Next button and select a location to save them.


Fig. 14. Location to save recovered files and recovery options
To enlarge the image, click on it.
If necessary, you can set file recovery parameters and processing options bad sectors on disk. See the R-Undelete help for more information.

Click on the Recover button to start the recovery process.

Once the process is complete, R-Undelete will display a short report of its results.


Fig. 15. File recovery results
To enlarge the image, click on it.

File recovery results
Now you can go to the folder with the recovered files and view them.

Sitting at the computer, we exchange information, communicate with each other, work with files and documents... Let's focus on the latter. We download information from worldwide network Internet, we distribute it into folders, look through it, leave what we need, and delete what we don’t need. We often delete it because free space There is not enough disk space or the computer is simply a mess, and we decide to unload our machine. One way or another, everything deleted ends up in the trash... Some people clean it right away, while others accumulate all the garbage and “throw away” this trash in a free moment.

It happens that important file You completely accidentally selected it along with everyone else and placed it in the trash, or your Small child I became curious and erased the information without the owner’s permission. When there are many files there, the user usually does not check the contents and clear them. So, you accidentally deleted a file from the Recycle Bin. Do not despair! There is still a chance (albeit small) that needs to be taken advantage of! There are a couple of dozen programs to recover a permanently deleted file (or files). Some of them are effective, some are not.

At first I tried "Recuva", "GetDataBack", "EasyDriveDataRecovery" and many others. All of them are paid, but not all users want to pay, and some are simply pressed for time. For example, you deleted new game downloaded from the web. Buying a license and acquiring a key will take no less time than downloading the files again! What to do? I found a solution and it's called "Undelete Plus Portable"!

It has been noticed that on many sites this is the name hiding installation file an updated version of the program that requires registration for a lot of money: "undeleteplus_setup.exe". Although the description says that the version is free and is in free access(freeware). Don't fall for this trick. This program is free, you can find it on the Internet, although not without problems. The main thing is that it must be in an archive and weigh less than 1 MB, inside of which there is one file “undelete_plus.exe”.

However, you can download the program that I use (posted on YandexDisk) - http://yadi.sk/d/As-BANn5HbqBi (it has been tested and is virus-free: o)

The portable status of undelete plus tells us that the program does not need to be installed on operating system. Agree, a very convenient feature. It allows you to immediately begin resuscitation of files.

The program was downloaded, unpacked, and launched. Here is its start window:

Let's get acquainted with the program interface. As you can see, it is initially configured to English language. Therefore, let's change it to Russian in the vertical column of flags (Lng - abbreviated English language - language)! - you must select an icon with the image of the Russian flag
Below is the program version: 2.9.8.0 (I have more than a new version 3.0.2.209).; filter status: OFF - disabled and the number of files found - there are none now, therefore zero (0). In the "Status" section the time the program was launched is indicated, that is, March 13, 2011 at 11 hours 43 minutes 06 seconds.

Next, in the “Disks” column, mark the disk you need. There may be one, or there may be several. Depending on where you were deleted file. If you are on the list disk devices If you can’t find the one you need, then click the “Update” button.
For example, I have a drive under the letter "D:\\".
Before resuscitating deleted data, we must configure the path for saving information (Open): choose where your recovered files will be saved ( to a disk different from the original one used to find! ).

I would like to draw your attention to the “Save folder structure” item. Let me explain with an example: before deleting the file was in “D:\\Folder\\Important”, then “\\Folder\\Important\\” will be added to the directory specified in the item “Save selected files in:” and in the latter it will be located Your file. You can use a filter, but I won't do it:

Now you can start scanning (searching) for the file you are looking for. To do this, click in the upper left corner green button"Scan". Let's wait until the program goes through all the files. Here's what happened:

The lower section shows statistics and progress of all resuscitation processes. The program informs us that it was able to find more than 3 thousand different format files that it can now recover.

The "Types" column presents the formats of the found files. Click on the required file type to discard unnecessary ones. My video is in .avi format, so I chose "Avi Multimedia". Then, in the list I find the file I need "GEOGRAFIA.avi". In the "Status" column I see information about the status of the file: "Excellent":

Now I will click on the "Restore" button, and all the files I have selected will be restored. This is evidenced by the inscription “GEOGRAFIA.avi was successfully restored” (the result of the work done is described in the status message of the working window).

Now let’s follow the path specified before the files were restored. Here it is our file!

Finally, check the files
Like this! It turns out that the impossible is possible! Unfortunately, not all recovered files are playable. Some, in whose place the file has already been overwritten, are definitely not subject to “revival”. They may not be included in the search list or simply will not be restored. Of course, a lot can be judged by status, but not everything! However, “trying is not torture”, you can try, so try!

The conclusion is obvious - undelete plus portable has proven to all of us in practice that the size software should not be of paramount importance. Even compact utilities are quite capable of solving the most serious problems.

The program is convenient, Russian-language, does not require cash investments and does not violate copyright!
www.znaikak.ru

Happy data recovery!