Before Recovery
Recommended steps
- Install XFileRecover on a partition other than the one being recovered. If the lost file was on C:, install it on D: or an external drive when possible.
- Save recovered files to another disk or partition, not back to the source volume.
- Run the app as administrator when scanning system drives or low-level removable-drive data.
- For HDDs, start with the default asynchronous scan. Deep signature scanning is slower and is best used when earlier stages do not find the target.
Quick Start
- Open the app and select the partition that contained the deleted file from the left-side Select Volume panel.
- Keep the default scan mode: MFT metadata and residual MFT are enabled; file signature scan is off by default.
- Click Start Scan. The scan runs in the background, and the bottom status area shows progress for each step.
- Files found during scanning appear immediately; you do not need to wait for the full scan to finish.
- Use the left category list for images, documents, code, archives, and other types, or search by file name, extension, or path keyword.
- Click a file name to view details and preview on the right. After confirmation, tick the file and click Recover Selected Files.
- Choose an output folder, confirm the recovery file names, and start recovery.
Scan Mode Details
For NTFS partitions. Reads deleted records in the current file system first, usually preserving more complete name, directory, size, created time, and modified time information.
Used when MFT records have been released or fragments remain after partition rebuild or formatting. Hits may lack complete directories and receive more cautious quality marks.
The app attempts to identify deleted directory entries and usable structures in FAT16, FAT32, exFAT, ext3, ext4, and related file systems.
Searches unallocated space by file header/footer patterns. It helps when names or directories are lost, but takes longer and usually produces type-numbered file names.
When to enable file signature scan
File signature scan is disabled by default. Enable it for deeper searching when earlier stages do not find the target, or after quick format, damaged directory structures, or lost file names.
Review Scan Results
- The result list only shows deleted candidates, not active files still in use.
- The left categories group by file type: All, Directory, Image, Video, Document, Executable, Archive, Audio, Spreadsheet, Presentation, Code, and Other.
- File type uses both extension and content signature. If the file name is lost, the app still tries to classify by file header.
- The Quality column indicates recovery chance: Excellent, Partial, Overwrite risk, or Unsupported. Overwrite risk means the original location may have been reused.
- The Source column shows whether the candidate came from MFT, residual MFT, Recycle Bin clues, FAT/exFAT/ext directory entries, or file signatures.
Preview and File Details
Click a file name in the results to open details and preview on the right. The preview pane can be collapsed; a Preview marker remains for reopening it.
- Text and code files show readable content when possible.
- Image files are previewed after detecting their actual header format.
- Other files show readable hex snippets.
- If content mismatches or cannot be read, the record may remain while data is overwritten, offsets are incomplete, or the source volume refuses reads.
Recover Files
- Select the files to recover.
- Click Recover Selected Files.
- Choose the output folder in the dialog. The top shows the target folder, and the bottom shows the file names to recover.
- Confirm to start recovery. Recovered files appear on the Recovered Files page with output path, size, quality, and hash.
Account and VIP
The product page does not provide sign-in. In the desktop app, click Sign in / Account to register or sign in with an email verification code, or set a password and sign in with it later.
- Scanning, filtering, grouping, and preview can be used first.
- Account permissions are checked when recovering files. If VIP is inactive, the app prompts for purchase.
- Admins can adjust VIP status for registered users for support and manual activation.
FAQ
Why can’t I find a file just deleted from the desktop?
If the file was moved to the Recycle Bin, it may not behave like a permanently deleted file. After emptying the Recycle Bin, NTFS records and data areas can still be overwritten quickly by system activity. Stop writing to C: as soon as possible, run the default scan first, then consider file signature scan.
Why is the recovered file size or content wrong?
The deleted record may retain the size, but actual clusters may be overwritten, reused, or fragmented. Signature-scan files are length-estimated by recognizable boundaries, and some executables, videos, and archives need complete contiguous data to open normally.
Why are network or virtual drives not shown?
The app only lists volumes with local disk attributes that support low-level reads. Network mapped drives and some virtual drives cannot reliably expose file-system internals, so they are hidden by default.
Can files be recovered after formatting?
After quick format, old file-system records or file content may remain, so residual MFT and file signature scans are worth trying. Full format, SSD TRIM, or heavy new writes greatly reduce recovery chances.