NTFS - Filename from block number

I am trying to recover an NTFS (Windows 7 x64) format drive with seven contiguous unreadable blocks.  I know the block numbers (from Acronis), but not what file(s) are stored in that range.  Does anyone know of a utility which can tell what file(s) are stored at specific disk address?
TBOlsonAsked:
Who is Participating?
 
TBOlsonAuthor Commented:
Early this morning I restored the backup.  It looked as usable as the original disk so I decided to risk losing the bad sector info and running a chkdsk /r on the original drive.  Luckily, it gave me good file name information as it replaced the bad clusters.  The two files were easy to get rid of so I'm all set.  I will take a look at the WinHex/EaseXP combo.  That could be very handy in the future.  Thanks...
0
 
ArneLoviusCommented:
The location of each file and directory is stored in the MFT
http://www.ntfs.com/ntfs-mft.htm

By the nature of the MFT there is no reverse lookup, so to determine if there was a file or folder using a specific block, one would have to enumerate the MFT.

You may also find this useful http://www.kes.talktalk.net/ntfs/
0
 
TBOlsonAuthor Commented:
Thank you for the response!  I'm familiar with the NTFS structure (I've read the Windows Internals books plus a few others).  I'm just looking for a utility that already does the lookup.  It's not worth the time to write one from scratch.  PerfectDisk actually comes close, but doesn't have the necessary resolution.
0
Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
Davis McCarnOwnerCommented:
I have used WinHex as a data recovery tool for over 15 years now and one of the features I very much like is that it gives me a text report of the unreadable sectors and fills those sectors on the destination drive with UNREADABLESECTOR.  I also found a utility ( http://www.easexp.com/xsearch/ ) which lets me search the entire destination drive for UNREADABLESECTOR and reports which files contain that string.
In most cases; though, I warn the client that there will be some damaged files; but, that the vast majority of their files are fine.
If Acronis filled the unreadable blocks with a known string, try XSearch to locate the files.
0
 
Davis McCarnOwnerCommented:
You need to close this question and award points, OK?
0
 
TBOlsonAuthor Commented:
Quickest/Easiest
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.