Questions tagged [mft]

The Master File Table (MFT) is the list maintained by Windows on any NTFS volume that describes the location of files at the block level.

Any question about working with the MFT in an administrative context, not a programming context should be tagged with this. More general questions should probably be tagged [NTFS] or just [file-system]. The most common problem users and administrators are likely to have to deal with is a corrupt MFT, however a very fragmented one might also cause trouble.

Further reading at Microsoft's MSDN: http://msdn.microsoft.com/en-us/library/aa365230%28v=VS.85%29.aspx and http://msdn.microsoft.com/en-us/library/bb470206%28v=VS.85%29.aspx

57 questions
30
votes
5 answers

How do you defragment the MFT on an NTFS disk?

A while ago, I nearly filled my hard drive, much more than the recommended maximum of 85% of capacity. I believe that NTFS started storing files in the space reserved for the Master File Table (MFT) and the MFT had to fragment elsewhere as it…
WBT
  • 1,922
13
votes
2 answers

Mark Deleted Files as Undeleted

The capacity of my hard drive is 500 GiB. 150 GB of data got deleted accidently. I didn't write any byte to the drive after that incident, so my data is guaranteed to be there. I have tried apps like Recuva, all apps show that the data is there and…
Elmo
  • 14,879
10
votes
7 answers

How can I move the MFT to end of contiguous used space?

I want to move the MFT to end of contiguous used space. Right now it is placed at the middle: I want to move it to the beginning. How can I do that?
8
votes
2 answers

Maximum size of file that can be stored entirely in NTFS Master File Table (MFT)

I'm using Windows 7 and NTFS. I've noticed the MFT is a huge security risk because it can store sensitive document files without user knowledge for a long time before they get overwritten. All tests I've run tell me that files smaller than 640 bytes…
Jeff
  • 81
6
votes
2 answers

Tool to repair MFT or NTFS journal on a disk which underwent failed hibernation

I've read through some of the posts related to corrupt or not working NTFS partitions, but without a proper solution for my case. Here it is: my system is SSD on mini PCI express (PCIe), with Windows 7 installed on it. Two partitions: one with Dell…
MrBrody
  • 445
6
votes
3 answers

Is is possible to restore the MFT of a NTFS partition after a format?

I've searched through several questions but didn't quite find anyone treating mine. So, I have a 1TB external hard drive I use for backup purposes with only 1 NTFS partition. Today using DiskPart I formated that partition by mistake (who would have…
5
votes
1 answer

Is there a copy of the main MBR and MFT on a drive?

I'm talking about something like a backup copy located on a drive, in addition to the main. If there is, how would I be able to retrieve it and write the backup back to the main partition?
xCare
  • 807
  • 3
  • 8
  • 18
5
votes
2 answers

Is it possible to backup the MFT in Windows? - NTFS

I experienced my first crashed Hard Drive a few days back, luckily it was not the primary disk and was just full of software which I could reinstall on. I tried several utilities like Easeus Partition Wizard - www.easeus.com/ TestDisk -…
5
votes
1 answer

NTFS partition no longer accessible, 3 MFT records corrupted, way to fix them?

I have a 2TB Seagate ST2000DM001 HDD with one NTFS partition. I hadn't used it in months, when I plugged it again this partition had inexplicably become inaccessible : the volume's letter appears in Windows Explorer, but the partition's size is no…
GabrielB
  • 893
4
votes
2 answers

High response times in HDD. MFT, fragmentation or even halted disk?

I am experiencing really high response times im my HDD, which can go around 13000ms (from Win8 Task Manager). This occurs when starting up windows and for at least 3-4 minutes, also when doing extensive copy (lots of files). The average read/write…
Odys
  • 1,711
  • 12
  • 36
  • 47
4
votes
1 answer

why don't file search utilities just load and parse the MFT?

I've noticed when I search for a file by name (in Windows or Linux) it's typically a disk-intensive process, especially in Windows. It seems that the utility (Windows Search, or "find" in Cygwin) scans the entire directory tree, considering each…
Stephen
  • 824
  • 4
  • 13
  • 24
4
votes
1 answer

Master File Table corrupt, any way to save data?

I've used search, but none of the results match my problem so I didn't have to ask separate question. I've installed Windows 7 RTM recently and since then partitions located on one of my HDDs have gone "crazy". They used to "freeze" and didn't open…
domen
  • 451
4
votes
2 answers

How to move MFT on Windows 7

I am currently in the process of cloning my HDD to a SSD. As the HDD (320 GB) is bigger than the SSD (120 GB) it was recommended that the HDD be shrunk to a smaller size than the SSD. Using Windows 7 built in disk management, it is unable to shrink…
4
votes
1 answer

How to deal with unmovable files like MFT when trying to shrink a partition?

I want to add more space to my Linux OS partition, but can't because of unmovable files on C:; I've tried several ways, yet am still unable to, including disabling paging files, system protection, kernel memory dumps, and hibernation mode. After…
4
votes
1 answer

How do you interpret the Cluster Chain Run in an NTFS MFT record?

For mostly academic reasons, I've been learning how to interpret the Cluster Chain Run from the Data Attribute Block from an MFT Record from a NTFS volume. I watched a video that walks through an example. Here's the example: Flags | Cluster count |…
1
2 3 4