wanted: NTFS disk editor

[sobriquet]

Hi.
In the past, I remember using the disk editor from norton utilities,
to explore the disk, and I would be able to browse the FAT32
filetables and the directory structure, to figure out which particular
file was located on a particular sector on disk where a section of
text or sequence of bytes was found.
I've found a nice free diskeditor HxD (http://mh-nexus.de/en/hxd/),
and this allows me to search the complete harddisk to find the sector
where a particular section of text or sequence of bytes is found, but
I can't figure out how to see if there is an actual file that occupies
a particular sector.
Does anyone know of a utility or method that allows me to identify
whether or not a file occupies a particular sector on disk and if so,
where this file is located on disk in the filesystem?
Something to analyse the NTFS file allocation tables I reckon, that
associates files and folders with (linked lists of) sectors.

Thanks in advance for any suggestions, greetings, Niek

 

[mscotgrove]

Hi.
In the past, I remember using the disk editor from norton utilities,
to explore the disk, and I would be able to browse the FAT32
filetables and the directory structure, to figure out which particular
file was located on a particular sector on disk where a section of
text or sequence of bytes was found.
I've found a nice free diskeditor HxD (http://mh-nexus.de/en/hxd/),
and this allows me to search the complete harddisk to find the sector
where a particular section of text or sequence of bytes is found, but
I can't figure out how to see if there is an actual file that occupies
a particular sector.
Does anyone know of a utility or method that allows me to identify
whether or not a file occupies a particular sector on disk and if so,
where this file is located on disk in the filesystem?
Something to analyse the NTFS file allocation tables I reckon, that
associates files and folders with (linked lists of) sectors.

Thanks in advance for any suggestions, greetings, Niek

The demo of my software answers your question

You will need to do a dummy recover of the disk (the demo will not
save any files), and then the log can be viewed, and the Search
function will let you enter a sector number. It will then display the
file (or files if previously deleted) that the sector has been used
in. It will allow for up to 80 fragments a file.

The log also lets you display file fragments. Thus you can look at
file 1234.xxx and see which sectors it uses. You click on the Frags
column in the log.

It may not be the quickest solution, but it works

Michael
www.cnwrecovery.com

 

[sobriquet]

The demo of my software answers your question

You will need to do a dummy recover of the disk (the demo will not
save any files), and then the log can be viewed, and the Search
function will let you enter a sector number.  It will then display the
file (or files if previously deleted) that the sector has been used
in.  It will allow for up to 80 fragments a file.

The log also lets you display file fragments.  Thus you can look at
file 1234.xxx and see which sectors it uses.  You click on the Frags
column in the log.

It may not be the quickest solution, but it works

Michaelwww.cnwrecovery.com- Tekst uit oorspronkelijk bericht niet weergeven -

- Tekst uit oorspronkelijk bericht weergeven -

Somehow it seems like the program doesn't recognize my NTFS SATA
Drive.
Screenshot:
http://img16.imageshack.us/img16/6914/recoverya.jpg

 

[mscotgrove]

Somehow it seems like the program doesn't recognize my NTFS SATA
Drive.
Screenshot:http://img16.imageshack.us/img16/6914/recoverya.jpg- Hide quoted text -

- Show quoted text -

It is basically a data recovery program. I assume you are trying to
investigate your 'C:' drive

Data recover must never recover files to the original drive, and you
never load anything onto the original drive. Hence, I lock out drive
'C'.

You will need to try on a diferent PC, with your drive as an external
drive

Michael

 

[Joep]

runtime's disk thing. www.runtime.org

 

[Joep]

diskexplorer they call it ..

 

[sobriquet]

diskexplorer they call it ..

Works like a charm. Thx!

 

[sobriquet]

The old MS tool nfi.exe can do this. It is part of the OEM Support Tools
for W2K:http://support.microsoft.com/kb/253066/en-us
It also works on XP and 2003.

Christian

Ah thx. That's a useful utility as well.