Data Recovery Case File · Formatted & Logical Faults · The Install Is the Damage
The Format Was Survivable and the Installation That Followed Was Not Kind
His enquiry describes a sequence carried out in the wrong order. He "reinstalled the system from scratch and formatted the drive before securing data that was stored on the desktop of the machine", and would like as much of it back as possible. The format alone would have left almost everything in place — what determines the outcome is the installation that was written onto the drive afterwards, and where on the drive it landed.
| Media | Hard drive formatted and reinstalled with an operating system — user content previously held in the desktop folder; drive in service since |
| Reported situation | Operating system reinstalled from scratch · drive formatted as part of that process · user content held in the desktop folder not secured beforehand · recovery of as much as possible sought · drive not otherwise faulty |
| Fault class | Format followed by system installation — index replaced and content partially displaced by installed files; prospects governed by installation size and placement |
| Equipment used | Format and subsequent installation assessed as separate degradations · machine removed from use before assessment · imaged write-blocked before any scanning · signature carving performed against unallocated regions · recovered files validated by opening |
The decode: two events, and only one of them was serious
What the format did: wrote a fresh empty index and marked the whole capacity as available. The desktop files were not erased at that moment — they remained exactly where they had been written, unreferenced but intact.
Why that alone would have been recoverable: had the machine been switched off at that point, this would be a straightforward carve. A formatted drive that has had nothing written to it holds essentially everything, and the loss would have been the arrangement rather than the content.
What the installation then did: wrote a complete operating system into the space the format had marked as free. That is many gigabytes of files placed wherever the installer chose, and wherever it chose was on top of something.
Why the installer's placement decides a great deal: installations generally write from the beginning of the available space onwards. Content that sat near the start of the drive is the most likely to have been displaced, and material further in has a better chance — which is why the outcome varies by file rather than being all or nothing.
Why desktop files are an awkward case specifically: the desktop folder sits within the user area of the previous installation, which is itself near the start of the volume. That is precisely the region a new installation is most likely to occupy, so the location is unfavourable.
Why it is nevertheless worth attempting: an installation is a fraction of a modern drive's capacity. On a large drive most of the surface is untouched by it, and files that happened to sit beyond the installed region survive complete.
What is actually done: the drive is imaged and the unallocated regions searched for recognisable file structures. Documents, photographs and video are found by their own openings rather than through any index, which no longer describes them.
What must stop immediately, and this is the part still in his control: use of the machine. The newly installed system is writing continuously — updates, temporary files, caches — into the same free space, and every hour of running displaces more of what remains.
Why that matters more here than in most cases: the drive is now the system drive of a working computer. It is not idle storage; it is the most heavily written device in the machine, so the position deteriorates faster than it would on an external drive.
What the honest expectation is: partial. Some files complete, some fragmentary, some gone — determined by where each sat relative to what the installation wrote, which is established by looking rather than by predicting.
On the bench
Format and subsequent installation were assessed as separate degradations — a format writing an empty index and marking capacity available while leaving content in place, so a formatted drive with nothing written since retains essentially all of it, whereas an operating system installation writes many gigabytes into that space, generally from the beginning of the volume onwards. Desktop content sits within the previous user area near the start of the volume and is therefore in the region most likely displaced. Carving was performed against unallocated regions.
The outcome
The format and installation assessed as separate degradations, the machine removed from use, and carving performed against unallocated regions. Free assessment, one fixed written figure including VAT. The decode: the format left your files where they were. What displaced them is the installation written afterwards — and because it writes from the start of the volume, the desktop area is the unlucky place for content to have been.
Formatting before you have secured what was on the drive
Stop using the machine now — the newly installed system is the most heavily written device in the computer, so the position deteriorates faster than it would on idle storage. Understand the two events separately: the format only wrote an empty index and marked the space available, leaving your files exactly where they were. It's the installation that displaced them, writing many gigabytes into that free space, generally from the start of the volume onwards. That makes desktop content unlucky, since it sat in the previous user area near the beginning. Expect partial results determined by where each file sat.
Stop using the machine — call Easy Data Recovery on 028 9002 0144; format and installation assessed as separate degradations, imaged before any scanning, carving performed against unallocated regions.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.