NO

Author Topic: Undelete files  (Read 5590 times)

Offline JohnF

  • Member
  • *
  • Posts: 1114
    • http://www.johnfindlay.plus.com/
Undelete files
« on: April 11, 2005, 07:39:23 AM »
I converted a C++ app that undeletes files on NTFS drives - made a few corrections and alterations to the original code. The original loaded the whole MFT into ram, this could be a problem when the MFT has become very large. Apparently one guy had an MFT record of 1 gig.

So now the app loads chunks sequentially from the MFT record until all the records have been read. This works fine on drives formatted either with the Windows formatter or with 'Partition Magic' but it does not work with drives formatted with 'Acronis Disk Director'. For some reason the data becomes corrupt after loading a few records.

Apparently one must read blocks in multiples of cluster size, which is what I'm doing, but this still does not work for drives formatted with 'Acronis'.

Does anyone know anything about this?

The original way of loading the whole MFT into ram works even with drives formatted with 'Acronis'.

John

Anonymous

  • Guest
Problem with Acronis
« Reply #1 on: December 30, 2005, 06:58:03 AM »
I am unfamiliar with Acronis but the following is a solution that 'will' work.  Have you tried creating a 'stored' carbon copy of the MFT on the harddrive and loading chunks into memory and manipulating it instead so that you are loading chunks from a static copy?  This is not a perfect solution but it is workable.

Paul

Offline JohnF

  • Member
  • *
  • Posts: 1114
    • http://www.johnfindlay.plus.com/
Re: Problem with Acronis
« Reply #2 on: December 30, 2005, 08:30:24 AM »
Quote from: "PBrennick"
I am unfamiliar with Acronis but the following is a solution that 'will' work.  Have you tried creating a 'stored' carbon copy of the MFT on the harddrive and loading chunks into memory and manipulating it instead so that you are loading chunks from a static copy?  This is not a perfect solution but it is workable.

Paul


Thanks for that advice.

John

hani118

  • Guest
Re: Undelete files
« Reply #3 on: January 13, 2015, 12:49:04 PM »
The original way of loading the whole MFT into ram works even with drives formatted with 'Acronis'.

Offline Bitbeisser

  • Global Moderator
  • Member
  • *****
  • Posts: 754
Re: Undelete files
« Reply #4 on: January 14, 2015, 02:32:37 AM »
The original way of loading the whole MFT into ram works even with drives formatted with 'Acronis'.
ICU!