Windows 团队^{(Windows Team)}在Microsoft Store中悄悄推出了文件恢复工具，可用于从Windows 10计算机中恢复已删除的文件。^{(recover deleted files)}根据描述，该工具不仅可以恢复已删除的文件，还可以擦除干净的硬盘驱动器、SD卡和损坏的存储。它可以恢复照片、文档、视频等。在这篇文章中，我们将讨论Windows 文件恢复工具^{(Windows File Recovery Tool)}并检查它的性能。

Windows文件恢复工具^{(File Recovery Tool)}恢复已删除的文件

令人惊讶的是，Windows File Recovery是一个命令行工具，即没有用户界面。启动它后，它将显示该工具随附的选项列表。它扩展到NTFS恢复之外，并适用于SSD（受TRIM限制）和其他存储设备。这是可用选项的完整列表。以下是我们将在这篇文章中讨论的内容列表：

1. 命令用法
2. 恢复模式的类型
3. 如何在Windows 10中使用^{(Windows 10)}Windows 文件恢复^{(Windows File Recovery)}？
4. 您应该使用哪种恢复模式以及何时使用？
5. ^(Which)签名^(Signature)模型支持哪些文件类型？
6. Windows 文件恢复^{(Windows File Recovery)}使用的恢复逻辑^(Logic)

1] 命令用法

winfr source-drive: destination-folder [/switches]

• /r – 段^{(– Segment)}模式（仅限NTFS，使用文件记录段恢复）
• /n> - 过滤搜索（默认或分段模式，允许通配符，文件夹尾随）
• /x – 签名^{(– Signature)}模式（使用文件头恢复）
• /y:–恢复^(Recover)特定的分机组（仅签名模式，逗号分隔）
• /# – 显示^{(– Displays)}签名模式扩展组和文件类型
• /？– 帮助文本
• /！- 显示高级功能

仅在签名模式下支持从非 NTFS 文件系统恢复文件。

2]恢复模式的类型

一些模式使用MFT文件，而另一些则需要分段，最后一种模式仅适用于大文件。

• 默认模式：^{(Default mode: )} 它使用主文件表^{(Master File Table)}( MFT ) 来定位丢失的文件。当MFT和文件段都存在时，它运行良好。
• Segment 模式： ^{(Segment mode: )}它使用 Segments，它携带NTFS存储在MFT中的文件信息的摘要，例如名称、日期、大小、类型和集群/分配单元索引。
• 签名模式：^{(Signature mode:)}  此模式仅要求数据存在并搜索特定文件类型。您可以使用此模式从USB^(USB)、存储卡等外部设备恢复文件。

3]如何^(How)在Windows 10中使用Windows 文件恢复^{(Windows File Recovery)}？

从开始^(Start)菜单打开文件恢复^{(File Recovery)}程序。它将立即启动命令提示符，UAC将提示许可。一旦允许，您应该会看到所有选项。请注意，您无法恢复到同一分区。如果您将其恢复到驱动器，它应该是一个不同的分区甚至更好。这里有些例子。

默认模式：^{(Default Mode: )}恢复特定文件

winfr C: D:\RecoveryDestination /n Users\<username>\Downloads\

winfr C: E: /n \Users\<username>\Pictures\*.JPEG /n \Users\<username>\Pictures\*.PNG

Segment mode (/r): 恢复文件类型

winfr C: D:\RecoveryDestination /x /y:PDF,JPEG

winfr C: E: /r /n *invoice*

Signature mode examples (/x): 使用签名模式时，首先查看支持的扩展组和相应的文件类型会很有帮助。

winfr C: D:\RecoveryDestination /r /n *.pdf /n *.jpg

在恢复过程中，系统会询问您是否要覆盖、保留副本以及将来使用的选项。您可以选择全部覆盖，但我建议您在目的地有足够的存储空间并保留所有副本。您永远不知道哪个文件已损坏。

4]您应该使用哪种^(Which)恢复模式以及何时使用？

5]签名^(Signature)模型支持哪些^(Which)文件类型？

该工具有一个默认的扩展过滤器列表，例如 adm、admx、appx、appx、ascx、asm、aspx、aux、ax、bin、浏览器。您可以使用 /e 开关启用它们。

6] Windows文件恢复^{(Windows File Recovery)}使用的恢复逻辑^{(Recovery Logic)}

这里使用的恢复逻辑与其他恢复程序使用的相同。该模式使用主文件表^{(Master File Tabel)}来查找已删除文件的记录以及  文件记录段^{(File Record Segment)}。还有一个额外的MFT副本，可以方便地找到已删除文件的确切物理位置。

这是通过Windows 文件恢复^{(Windows File Recovery)}工具进行的恢复的结果。

并非所有文件都有用，但很多文件都有用。这并不奇怪，因为很大程度上取决于物理覆盖了多少存储空间。

虽然该工具很有前景，但它仍然需要一个用户界面并且有其局限性。您可以从Microsoft Store下载它。

How to use Windows File Recovery Tool to recover deleted files

The Windows Team has quietly rolled out a file recovery tool in the Microsoft Store, which can be used to recover deleted files from your Windows 10 computer. According to the description, the tool can not only recover deleted files but also wiped clean hard drives, SD cards, and from corrupted storage. It can recover photos, documents, videos, and more. In this post, we will talk about the Windows File Recovery Tool and check how it performs.

Windows File Recovery Tool recovers deleted files

What is surprising here is that Windows File Recovery is a command-line tool, i.e., no user interface. As soon as you launch it, it will display a list of options that come with the tool. It expands beyond NTFS recovery and works with SSD (limited by TRIM) and other storage devices. Here is the complete list of options available with it. Here is the list of things we will discuss in this post:

1. Command Usage
2. Types of Recovery Mode
3. How to use Windows File Recovery in Windows 10?
4. Which recovery model should you use and when?
5. Which file types are supported in the Signature model?
6. Recovery Logic used by Windows File Recovery

1] Command Usage

winfr source-drive: destination-folder [/switches]

• /r – Segment mode (NTFS only, recovery using file record segments)
• /n <filter> – Filter search (default or segment mode, wildcards allowed, trailing \ for folder)
• /x – Signature mode (recovery using file headers)
• /y:<type(s)> – Recover specific extension groups (signature mode only, comma separated)
• /# – Displays signature mode extension groups and file types
• /? – Help text
• /! – Display advanced features

Recovering files from non-NTFS file systems is only supported in signature mode.

2] Types of Recovery Mode

Some of the modes use the MFT file, while others require segments, and the last mode works only on large files.

• Default mode:  It uses the Master File Table (MFT) to locate lost files. It works well when MFT and file segments are both present.
• Segment mode: It uses Segments, which carries summaries of file information that NTFS stores in the MFT such as name, date, size, type, and the cluster/allocation unit index.
• Signature mode:  This mode only requires that the data is present and searches for specific file types. You can use this mode to recover files from external devices like USB, memory card, and so on.

3] How to use Windows File Recovery in Windows 10?

Open the File Recovery program from the Start menu. It will instantly launch the command prompt, and UAC will prompt for permission. Once allowed, you should see all the options. Do note that you cannot recover to the same partition. It should be a different partition or even better if you recover it to drive. Here are some examples.

Default Mode: Recover a specific file

winfr C: D:\RecoveryDestination /n Users\<username>\Downloads\

winfr C: E: /n \Users\<username>\Pictures\*.JPEG /n \Users\<username>\Pictures\*.PNG

Segment mode (/r): Recover types of file

winfr C: D:\RecoveryDestination /x /y:PDF,JPEG

winfr C: E: /r /n *invoice*

Signature mode examples (/x): When using the signature mode, it’s helpful first to see the supported extension groups and corresponding file types.

winfr C: D:\RecoveryDestination /r /n *.pdf /n *.jpg

During the recovery process, you will be asked if you want to overwrite, keep a duplicate, and the options to be used for the future. You can choose to overwrite all, but I would recommend you to have enough storage at the destination and keep all copies. You never know which file is corrupt.

4] Which recovery model should you use and when?

5] Which file types are supported in the Signature model?

The tool has a default filter list of extensions such as adm, admx, appx, appx, ascx, asm, aspx, aux, ax, bin, browser. You can enable them by using the /e switch.

6] Recovery Logic used by Windows File Recovery

The recovery logic used here is the same as used by other recovery programs.  The mode uses Master File Tabel to find records of the deleted files along with  File Record Segment. There is an additional copy of MFT which comes in handy to find the exact physical location of the deleted files.

Here is the result of a recovery made through Windows File Recovery tool.

Not all the files were useful, but many were. It is not surprising as a lot depends on how much of the storage space was physically overwritten.

While the tool is promising, it still needs a user interface and has its limitations. You can download it from the Microsoft Store.

Related posts

• Delete Files Permanently使用免费File Shredder software Windows

• 如何在Windows 11/10中更改File or Folder的Ownership

• Windows 10免费Best免费Universal File Viewer software

• File Blender是Windows 10 PC的便携式免费File Converter software

• 如何在Windows 10中重置File and Folder permissions默认值

• 什么是.aae File Extension？如何打开.AAE Files？

• Microsoft 的 Windows 文件恢复功能有效吗？我们测试了它。

• File or Folder不存在，无法在Windows中移动或重命名

• 如何在 Windows 中打开具有不同文件扩展名的文件

• 在Windows 10上打开带WinHlp32.exe的.hlp文件; Convert HLP到chm

• USB Flash Drive Remove virus采用Command Prompt or Batch File

• TreeSize Free：Display File & Folder在Windows中使用Context Menu尺寸

• 什么是PLS file？如何在Windows 11/10中创建PLS file？

• 免费Duplicate File Finder and Remover software Windows 10

• 如何批量更改 Windows 文件的文件扩展名

• Windows 10采用Encrypting File System（EFS）Encrypt Files and Folders

• 如何在Windows 10中编辑或添加Metadata到Photos & Video文件

• 如何改变default File or Folder Drag和Drop behavior在Windows 10

• 如何使用Windows USB/DVD Download Tool

• 从控制面板处理文件历史记录：您能做什么和不能做什么！