Search files, directory structures reconstruction and recovery.
Program Fomsoft Recovery NTFS uses its own mechanism to access the file system.
This mechanism does not use the Windows file system functions. The program does not have high access speed, but allows access
information in cases of bad disk sector portions problem space and fracture the logical structure of the index file on the basis of which
built binary search mechanism in the Windows file system.
For full access to the data, the program Fomsoft Recovery NTFS you want to set one of the parameters:
This information the user must specify the program by calling the menu item [Restore NTFS files] , Fig. 6.
Fig. 6. Function Menu [Restore NTFS files].
By reading these elements of the file structure, the program Fomsoft Recovery NTFS it calculates the desired parameters, determines
location Master File Table (MFT) and its fragments. Next the program reads the entire table MFT into RAM and
It extracts the information in catalogs and user-defined files.
If the user specifies a drive letter, it appears on the screen dialog box, shown in Figure 7.
Fig. 7. Enter a drive letter and the job search filter parameters necessary files.
n the case of a user setting the physical address of the boot sector of the logical sector, the dialog box appears on the screen to
entering the physical address, Figure 8.
Fig. 8. Assignment of the physical address (LBA) of the boot sector of the simulated logical drive
The user must specify the program number of the physical disk problem and enter the physical address (LBA) of the boot sector. example
specified physical disk HD0 and put the boot sector of the simulated LBA logical disk.
If the user wants to set the physical address of the beginning of the Master File Table (MFT), dialog box appears on the screen, Fig. 9.
Fig. 9. Setting the physical address of the beginning of the Master File Table (MFT) of the problem disc.
Fig. 10. A dialog box is presented to indicate the physical address of the recording FILE Record that describes a file on the affected disk.
Рис. 10. Specify physical FILE Record write address that describes a file on the affected disk.
After you specify the file system address elements, the program asked for clarification filtration and selection of parameters relevant to the user
files, Fig. eleven.
Fig. 11. Query selection and filtering options to find the right user files.
To search for all available files have to check the box on the problematic disc:
If you want to restore the executable and system files, you have to uncheck the checkbox:
- Disable filtering files by extension, to search for all.
- In addition to system files.
When the checkbox "Create analytical TXT-file" ,
program creates a text file FomsoftRecoveryNTFS.txt ,
containing information about the selected files, which can be viewed in any editor. However, it is more convenient to download it
file as a spreadsheet, use as a separator character "|". In this case, you can sort and
perform contextual search relevant user files. Fig. 12 shows a fragment of such review.
Рис. 12. Example FomsoftRecoveryNTFS.txt file viewing.
After clarification of relevant user search settings dialog and clicking the button [ APPLY ],
reconstruction program produces a directory tree, and then displays the search results.
Figure 13 is an example screen output licensed program.
Рис. 13. Reconstructed directory tree.
Free version of Fomsoft Recovery NTFS allows accurate the same screen. But instead of an interactive button
[marked RESET] , the button appears [REQUEST RESTORATION SERVICES]] .
The result of the reconstruction of the directory tree is made in terms of Windows Explorer.
The following information is displayed for each file or folder:
- Name the file or the folder.
- File size in bytes.
- The date and time of creation.
- The date and time of modification.
- three-character extension in DOS format.
- mark removal, the symbol "Y", for deleted items or a space for the existing relevant
- Own ID FILE Record the serial number of the record in the MFT.
- parent directory identifier FILE Record the serial number of the record that describes the folder - parent .
- Number of cluster beginning of the data file, in case of non-resident location on the media.
- The number of fragments of the file on disk.
Restoring files found program Fomsoft Recovery NTFS .
Using install or remove the checkmark next to the name of the file or folder, as well as interactive buttons
[Select All] and [Extinguish all] , a user may be interesting to note files and clicking the dialog
The [TRIAL EJECTING] , check the level of data recovery possible.
The program warns that the recovery will be a test carried out not only for the length of fragmented files
from 1 to 64 Kbytes, Fig. 14.
Рис. 14. An example of a directory tree reconstructed.
After pressing the interactive button [Yes] , the program will ask her to indicate the location of the recording folder
Рис. 15. Request packs here to write the extracted files.
After analyzing the test results data retrieval, the user may decide to further their actions.
In the case of a licensed version, the user can press the interactive button [marked RESET] .
The program will give the server Laboratories Fomsoft hard drive serial number from which it is necessary to restore
files. If the serial number of the drive in the list of licensed disks not, the program will ask the user to confirm and
licensing of the disc, Fig. 15a.
Рис. 15a. Request a free use license.
If the serial number of the hard drive is present in the list of licensed disks, the program prompts to specify logical or
network drive where and write to files marked.
In cases of using the free version of the program FomsoftRecoveryNTFS , the user can
- Give the program a command to transfer the Laboratory Fomsoft request for production of the extraction program all found her files
on the affected drive by pressing the interactive button [REQUEST RESTORATION SERVICES] . Which files you need
restore the user program will indicate Fomsoft Restore NTFS to send him on his e
mail in accordance with the specified tariff plan.
- To get a licensed version by activating the main menu item - [Order licensed version] .