|
Recover NTFS MFT
Hi,
I have raised this question in the WinXP Support Thread, but I think this thread is more appropriate. I will close the other thread.
I have a WD HDD of 200GB. I split it into 3 partitions of 20GB, 100GB and 80GB respectively. The 20GB is mainly for OS, and the other 2 partitions are used for my photos. All of them are in NTFS Format.
Recently, I had decided to reformat my 20GB partition due to a lot of installation and uninstallation of software done on my Win XP system. But I am not able to install WinXP due to 1 of my other hdd (Seagate) giving problem. So I chose to use the Image created by Norton Ghost quite a long time back to restore my C:\ drive. Instead of restoring partition, I restored drive, and end up the whole WD HDD becomes 1 huge partition. I used the Partition magic to restore back my C:\ drive size, and used some freeware (I cannot remember which software, as I have downloaded quite a number of them). I manage to recover the partition, and later on, recover the files in the partition.
However, when I browse through the photos, a number of them are corrupted, as in I cannot open the images or the images are corrupted.
Here are my queries:
1) Is there any software that is able to link back the file in MFT automatically, or I need to manually edit the MFT to link the fragmented files back? If manually edit, is there any freeware to do the editing? What precautions do I need to take?
2) I used the nfi to browse my system, and discovered that MFT contains the following records:
fileXXXX
g:\....\image09-32.tif
it display the 4 attributes of the file, i.e. 10, 20, 30, 30, and not data (80)
fileYYYY
g:\....\m~879.TIF
it contains only the data portion.
Is fileXXXX considered corrupted and file YYYY consider lost file? Is yes, how shall I link back the fileYYYY to fileXXXX?
3) If I am able to edit the MFT, is the amendment immediate? do I need to handle the freespace issues in NTFS?
Thanks in advance.
Regards.
|