Locating $mft

Page 1 of 2 12 LastLast

  1. mjf
    Posts : 5,969
    Windows 7x64 Home Premium SP1
       #1

    Locating $mft


    I'm trying to locate some files including $mft.
    Can anyone tell me how to locate $mft
      My Computer


  2. Posts : 5,642
    Windows 10 Pro (x64)
       #2

    And how are you going about locating these files?
      My Computer


  3. mjf
    Posts : 5,969
    Windows 7x64 Home Premium SP1
    Thread Starter
       #3

    logicearth said:
    And how are you going about locating these files?
    that's basically the question
      My Computer


  4. Posts : 9,537
    Windows 7 Home Premium 64bit
       #4

    Why don't you just go to start/type in $mft in search box?
    Maybe you don't have any in your system.
    I have several as they are from dump files doing BSODs
      My Computer


  5. mjf
    Posts : 5,969
    Windows 7x64 Home Premium SP1
    Thread Starter
       #5

    I've searched at the command prompt
    dir /a
    as I thought these meta files were accessible from the root.

    Also used "(Search) Everything"

    Physically I thought the Master File table followed the Boot sector of the volume.
      My Computer


  6. Posts : 5,642
    Windows 10 Pro (x64)
       #6

    You will not see these files though explorer or the command line, you have to go deeper into the kernel of Windows. Talk directly with the file system driver. I know of no program that would do that.
      My Computer


  7. Posts : 30
    Windows 7 Home Premium 64bit
       #7

    logicearth said:
    You will not see these files though explorer or the command line, you have to go deeper into the kernel of Windows. Talk directly with the file system driver. I know of no program that would do that.
    The program Directory Snoop (not free) allows the user to view the content of metafiles like $mft and others. Quite useful as it also can recover deleted files and wipe files where necessary.
      My Computer


  8. Posts : 5,056
    Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
       #8

    The closest I've found is ntfsinfo tool from sysinternals. This is the kind of report it generates.

    Locating $mft-capture.png

    Download link here:

    NTFSInfo
      My Computer


  9. Posts : 30
    Windows 7 Home Premium 64bit
       #9

    mjf said:
    I'm trying to locate some files including $mft.
    Can anyone tell me how to locate $mft
    If you mean the physical location on the disk then some defraggers might do this - PerfectDisk will for instance.
      My Computer


  10. mjf
    Posts : 5,969
    Windows 7x64 Home Premium SP1
    Thread Starter
       #10

    @Bill2
    thanks. I had ntfsinfo.
    I thought it basically read the hidden file $mft in c:\
    I wanted to be able to see it and read it. I can't do either.

    @Scotiny,
    thanks, "defraggler" shows the physical location (like ntfsinfo).

    My initial post did just says locate - my fault.
    Last edited by mjf; 18 Apr 2011 at 04:29.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 18:40.
Find Us