Windows File Recovery: Regular vs Extensive Modes
Windows File Recovery supports two scanning modes—Regular and Extensive—and the one you need depends on the file system and the state of the drive. Regular mode is faster and works on healthy NTFS volumes, while Extensive mode performs a deeper scan that can recover from formatted, corrupted, or non-NTFS drives. This article explains the difference, when to use each, and how to get the best results.
Background: Why Two Modes Exist
Windows File Recovery is a command-line tool built into Windows 10 and Windows 11. It was introduced in 2020 as a free utility to recover deleted files without third-party software. The tool works by scanning the Master File Table (MFT) on NTFS drives or by searching for file signatures on other file systems.
The two modes exist because a quick scan is not always enough. When a file is deleted, Windows marks the space as free but does not immediately erase the data. A Regular scan looks at the MFT and can quickly find recently deleted files. However, if the MFT entry is gone—due to formatting, corruption, or a different file system—a deeper scan is required. Extensive mode reads the entire volume sector by sector, looking for known file signatures.
How Regular Mode Works
Regular mode is the default and fastest option. It relies on the NTFS file system’s metadata. When you delete a file on an NTFS drive, Windows removes the directory entry but keeps the file record in the MFT until it is overwritten. Regular mode reads these records and can restore the file if the record is still intact.
- Speed: Usually completes in minutes, even on large drives.
- File systems: NTFS only.
- Best for: Recently deleted files on a healthy drive that has not been heavily used since deletion.
- Limitations: Cannot recover files after formatting, severe corruption, or on FAT/exFAT drives.
Regular mode is also the only mode that supports the /segment and /signature switches, which let you narrow the search to specific file types or locations.
How Extensive Mode Works
Extensive mode performs a full volume scan. It ignores the MFT and instead looks for file signatures—unique byte patterns at the start of known file types (e.g., PNG, JPEG, DOCX). This allows it to recover files even when the file system metadata is gone.
- Speed: Much slower—can take hours depending on drive size and speed.
- File systems: NTFS, FAT, exFAT, and ReFS (on Windows 11).
- Best for: Formatted drives, corrupted file systems, or when Regular mode fails.
- Limitations: Recovered files may be renamed (e.g.,
file0001.jpg) and may not be in their original folders. It also cannot recover files that have been overwritten.
Extensive mode is the only option for a drive that was formatted or for a memory card that uses FAT32/exFAT.
How to Choose the Right Mode
Start with Regular mode unless you have a clear reason to skip it. If the drive is NTFS and the files were just deleted, Regular mode is likely to work and is much faster. If Regular mode finds nothing, or if you are dealing with a formatted or non-NTFS drive, switch to Extensive.
- Open Command Prompt as Administrator.
- Type
winfr C: D:(replace C: with the source drive and D: with the destination).
ecovery /regular - If Regular fails, run
winfr C: D:.
ecovery /extensive
You can also use the /n switch to filter by file name or extension, which speeds up both modes. For example, /n *.jpg searches only for JPEG files.
Common Problems and Misconceptions
One common mistake is running the tool on the same drive where the files were deleted. This can overwrite the very data you are trying to recover. Always save the recovered files to a different drive.
Another misconception is that Extensive mode can recover everything. It cannot. If the data has been overwritten—for example, by installing new software or copying new files—the old data is gone. Extensive mode works best when the drive has been idle since deletion.
Also, note that Windows File Recovery does not recover files from the Recycle Bin. The Recycle Bin is a system folder, and the tool is designed for files that were permanently deleted (e.g., with Shift+Delete).
Comparison with Third-Party Tools
Windows File Recovery is free and built-in, but it has a steep learning curve because it is command-line only. Third-party tools like Recuva or Disk Drill offer graphical interfaces and sometimes better recovery rates for non-NTFS drives. However, they often come with a price tag or limit on file size for free versions.
For most users, Windows File Recovery is sufficient, especially on NTFS drives. The main advantage of third-party tools is ease of use and the ability to preview files before recovery. If you are not comfortable with the command line, a GUI tool may be worth the cost.
Safety and Best Practices
To maximize your chances of recovery:
- Stop using the drive immediately after deletion.
- Use a different physical drive for the recovery output.
- Run the tool as Administrator.
- If the drive is external, connect it via USB 3.0 for speed.
- Do not defragment or run disk cleanup before recovery.
If the drive has physical damage (e.g., clicking sounds), stop using it and consider professional data recovery services. Software tools cannot fix hardware issues.
Frequently Asked Questions
Can Windows File Recovery recover files from a formatted drive?
Yes, but only if you use Extensive mode. Formatting rebuilds the file system, erasing the MFT entries that Regular mode relies on. Extensive mode scans for file signatures and can often recover files after a quick format. However, a full format (which writes zeros) will make recovery impossible.
How long does Extensive mode take?
It depends on the drive size and speed. A 1 TB external HDD can take several hours, while a small USB stick may take under an hour. The tool shows progress as a percentage, so you can estimate the remaining time.
Does Windows File Recovery work on SSDs?
Yes, but with a caveat. SSDs use TRIM, which immediately erases deleted data blocks. If TRIM is enabled (default on most systems), deleted files may be unrecoverable even with Extensive mode. For best results, disable TRIM temporarily, but be aware that this is not always possible.
What file types can Extensive mode recover?
It supports a wide range of common formats, including photos (JPEG, PNG), documents (DOCX, PDF), videos (MP4, AVI), and audio (MP3). The full list is available in the tool’s help (winfr /?). Files with unusual or proprietary extensions may not be recognized.
Why does the tool rename recovered files?
In Extensive mode, the tool cannot read the original file names because the file system metadata is gone. It assigns generic names like file0001.jpg. You can often identify the content by opening the file or using a preview tool.
Is Windows File Recovery available on Windows 10?
Yes, it is available on Windows 10 version 2004 and later, and on all versions of Windows 11. It is installed via the Microsoft Store, so you may need to update the app to get the latest features.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.