Apparatus and method for protecting data on computer hard-disk and computer readable recording medium having computer readable programs stored therein for causing computer to perform the method

Provided are data protection apparatus and method for protecting and recovering system data and user data stored in a computer hard disc from infection of a virus, a user's careless treatment, or intentional damage to a computer system, and a computer readable recording medium in which a program for performing the method in a computer system is recorded. The apparatus includes a hard disc dividing unit for dividing a hard disc area in the computer system into a system protection area, a user data area, and a system change area; a data protection unit for storing changed content in the system change area in response to a write request with respect to data stored in the system protection area and accessing both data stored in the system protection area and the changed content stored in the system change area in response to a read request with respect to data stored in the system protection area so as to determine the data corresponding to the read request, during operation of the computer system; and a data recovery unit for recovering the hard disc by deleting content from the system change area when the computer system satisfies a predetermined condition.