Update September 17, 2016: This is tool no longer free.

We all know that backing up our data is essential. Data backup usually it isn’t something we have to worry about; centralized backup is found even in small companies, and if the backup policy doesn’t protect all of our files we do manual backups. So in theory there shouldn’t be a market for applications that recover deleted files. But we also know that backups can be out of date or the backup process could have failed completely.

Many applications exist that try to recover deleted files in these situations. Most professional recovery software is pretty pricey, though—it’s almost as if their producers want to make some extra bucks from your misery. If you ever find yourself in the unpleasant situation where you lost some files and don’t have an up-to-date backup, you might not care much about the price to get these files back. However, powerful recovery tools are available for free. One of them is NTFS Undelete. As the name implies it can recover deleted files from NTFS formatted drives.

The tool provides three functions: browse, search, and recover marked files. You can choose between them by selecting the corresponding tab. The preselected tab, Browse, shows an Explorer-like interface. When you click a drive on the left side to expand its view, a window pops up indicating that the drive is being scanned for deleted files.

NTFSundelete scans for deleted files

The tool marks your deleted files and folders with a red X.

NTFSundelete displays deleted files

To undelete them just check the box next to each file or folder you want to recover. Then, click the tab “Recover marked files” and select a destination folder. Be careful here: Don’t recover files to the drive where the undeleted files lie or some of the deleted files could be overwritten with the recovered data. The recover tab offers some useful options, as e.g. unmarking the recovered file, and a recovery log. The search option comes in handy if you are looking for a specific file. It isn’t very sophisticated but it should fulfill your needs.

NTFS Undelete can only revive deleted files if they haven’t been overwritten. That’s a major drawback, but all other recovery applications suffer from the same limitation. Only highly specialized laboratories are able to recover physically overwritten data. Their service is far from free, as you can imagine.

The tool’s inability to recover deleted but overwritten files is especially problematic if the lost data lies on the system drive, where Windows constantly saves data. In that case downloading and installing NTFS Undelete is not an option as every further activity bears the risk of overwriting the deleted data. The best practice would be to shut down the computer immediately and recover the file without using the Windows installation on your hard disk. Fortunately the developers of NTFS Undelete also provide a bootable ISO image. When you burn this image to disk and boot from it, no data will be written to your hard disk until you restore the deleted data to another hard disk.

NTFS Undelete

  1. David Finster 14 years ago

    “Only highly specialized laboratories are able to recover physically overwritten data.”

    Please provide information about anyone who claims to recover physically overwritten data. I’ve worked in a data recovery lab. I’ve never seen even one example of this in the real world. I know all about the theoretical ways it might be possible – however I’m not aware of anyone that actually offers this as a service or claims to be able to do it.

  2. Author
    Alexander Weiß 14 years ago

    I never bothered to look up a lab which is able to recover physically overwritten data. It can be done, though, a few years ago scientists proved it.

  3. suriyaprakash. k 7 years ago


    How to recover or restore the deleted files and the folders from my server. I am using microsoft windows server 2012. Pls guide.

  4. Jose Luis Malaquias 7 years ago

    I got burned by this post. I went after the title, that said FREE: NTFS Undelete.

    I was in a bind, because I had just deleted a critical file, and time was of the essence, before the deleted file got overwritten by something else. So, I rushed to install NTFSUndelete, thinking I was saved.

    The software found the deleted file alright, but when I asked to recover, I got asked for 59 USD, or no dice.

    Not only that, they surrepticiously included another program I didn’t ask for, for an extra 10 USD.

    So, I ended up paying 69 USD for a “FREE” solution.

    I can’t understand why you would title the post like this, unless you are in cohoots with the seller.

    • Jose, you can’t seriously assume that a blog post that has been written more than six years ago is still 100% valid. I added a note now at the beginning.

  5. Allan 7 years ago

    Recuva from Piriform is free.  They also have a Pro version.



Leave a reply

Your email address will not be published. Required fields are marked *


© 4sysops 2006 - 2023


Please ask IT administration questions in the forums. Any other messages are welcome.


Log in with your credentials


Forgot your details?

Create Account