Windows 7 Forums


Windows 7: Locating $mft

17 Apr 2011   #1
mjf

Windows 7x64 Home Premium SP1 x 2
Australia
 
 
Locating $mft

I'm trying to locate some files including $mft.
Can anyone tell me how to locate $mft

My System SpecsSystem Spec

17 Apr 2011   #2

Windows 7 x64 (SP1)
 
 

And how are you going about locating these files?
My System SpecsSystem Spec
17 Apr 2011   #3
mjf

Windows 7x64 Home Premium SP1 x 2
Australia
 
 

Quote   Quote: Originally Posted by logicearth View Post
And how are you going about locating these files?
that's basically the question
My System SpecsSystem Spec
.


17 Apr 2011   #4

Windows 7 Home Premium 64bit
California
 
 

Why don't you just go to start/type in $mft in search box?
Maybe you don't have any in your system.
I have several as they are from dump files doing BSODs
My System SpecsSystem Spec
17 Apr 2011   #5
mjf

Windows 7x64 Home Premium SP1 x 2
Australia
 
 

I've searched at the command prompt
dir /a
as I thought these meta files were accessible from the root.

Also used "(Search) Everything"

Physically I thought the Master File table followed the Boot sector of the volume.
My System SpecsSystem Spec
17 Apr 2011   #6

Windows 7 x64 (SP1)
 
 

You will not see these files though explorer or the command line, you have to go deeper into the kernel of Windows. Talk directly with the file system driver. I know of no program that would do that.
My System SpecsSystem Spec
18 Apr 2011   #7

Windows 7 Home Premium 64bit
UK
 
 

Quote   Quote: Originally Posted by logicearth View Post
You will not see these files though explorer or the command line, you have to go deeper into the kernel of Windows. Talk directly with the file system driver. I know of no program that would do that.
The program Directory Snoop (not free) allows the user to view the content of metafiles like $mft and others. Quite useful as it also can recover deleted files and wipe files where necessary.
My System SpecsSystem Spec
18 Apr 2011   #8

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

The closest I've found is ntfsinfo tool from sysinternals. This is the kind of report it generates.

Locating $mft-capture.png

Download link here:

NTFSInfo
My System SpecsSystem Spec
18 Apr 2011   #9

Windows 7 Home Premium 64bit
UK
 
 

Quote   Quote: Originally Posted by mjf View Post
I'm trying to locate some files including $mft.
Can anyone tell me how to locate $mft
If you mean the physical location on the disk then some defraggers might do this - PerfectDisk will for instance.
My System SpecsSystem Spec
18 Apr 2011   #10
mjf

Windows 7x64 Home Premium SP1 x 2
Australia
 
 

@Bill2
thanks. I had ntfsinfo.
I thought it basically read the hidden file $mft in c:\
I wanted to be able to see it and read it. I can't do either.

@Scotiny,
thanks, "defraggler" shows the physical location (like ntfsinfo).

My initial post did just says locate - my fault.

Last edited by mjf; 18 Apr 2011 at 04:29 AM..
My System SpecsSystem Spec
Reply

 Locating $mft problems?



Thread Tools



Similar help and support threads for: Locating $mft
Thread Forum
Locating Specific Files General Discussion
[Help locating cause] BSOD Windows 7 Pro 64Bits BSOD Help and Support
Locating my users desktop folder General Discussion
Help needed locating what process is using a port Network & Sharing
locating hidden files Music, Pictures & Video


All times are GMT -5. The time now is 12:16 PM.


Seven Forums Android App Seven Forums IOS App Follow us on Facebook

Windows 7 Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows 7" and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32