Video files of surveillance cameras frequently play a role of major evidence for criminals or accidents. But, if the video file containing the evidence is deleted, we need to recover it if possible. In this paper, we propose a recovery scheme for deleted video files with AVI format on FAT32 file system. The proposed scheme first recovers deleted video files from unallocated storage space exploiting both signatures of video frames and behaviours of file systems. The scheme finds fragments of deleted video files based on the start indicator of video frames or the file header signature, and connects the found fragments based on the file allocation patterns of FAT32 file system. Next, if a recovered video file is partially corrupted, the scheme automatically reconstructs the corrupted AVI video file so that the video file can be played back. The lost file header of the corrupted video file is reconstructed based on the file header of a reference video file, and the lost data multimedia data is filled with zero. Through practical implementation, we show that the proposed scheme recovers deleted video files from unallocated storage space and reconstructs corrupted AVI video files.

监视摄像机的视频文件经常扮演着犯罪分子或事故的主要证据的角色。但是，如果删除了包含证据的视频文件，我们将在可能的情况下将其恢复。在本文中，我们针对FAT32文件系统上的AVI格式的已删除视频文件提出了一种恢复方案。提出的方案首先利用视频帧的签名和文件系统的行为从未分配的存储空间中恢复已删除的视频文件。该方案根据视频帧的开始指示符或文件头签名查找删除的视频文件的片段，并根据FAT32文件系统的文件分配模式连接找到的片段。接下来，如果恢复的视频文件部分损坏，则该方案会自动重建损坏的AVI视频文件，以便可以播放该视频文件。基于参考视频文件的文件头来重建损坏的视频文件的丢失的文件头，并且丢失的数据多媒体数据填充为零。通过实际的实现，我们证明了该方案从未分配的存储空间中恢复了已删除的视频文件，并重建了损坏的AVI视频文件。