Reading MFT
Hi,WOW, It has been a very long time but I have finally got back to the investigation of this MFT vs File System Scanner issue. Take a look at http://mftscanner.codeplex.com . The new version will...
View ArticleReading MFT
Has anyone accomplished the getdirectory described in this thread?If so....Please let me know by writing a note.VBGEEK, if you are still around, all of that is standard informaton in the VB...
View ArticleReading MFT
AlexBB zre you still on the MSDN? Unfortunately, haven't seen him posting for a very long time. :pEyal (http://shilony.net), Regards.
View ArticleReading MFT
Note: The author failed to specify what versiom OS he was runnins under. This DOES NOT work om WIN7 run with admin.The other version DID work on XP.Renee"MODERN PROGRAMMING is deficient in elementary...
View ArticleReading MFT
AlexBB zre you still on the MSDN?Renee"MODERN PROGRAMMING is deficient in elementary ways BECAUSE of problems INTRODUCED by MODERN PROGRAMMING." Me
View ArticleReading MFT
This is the API definition in vb.net to access the master file table Imports System.Runtime.InteropServices Module APIDefination #Region "Functions to declared" Public Declare Auto Function CreateFile...
View ArticleReading MFT
Hi,I've setup http://usnjournal.codeplex.comPlease do contact me if you wish to use it. I am happy to maintain it also if you wish.Cheers.That is a very good work. I have some related questions about...
View ArticleReading MFT
i used the code in the mft scanner project to play around with some stuff and it is stupid fast to bring back a list of files, faster than anything else i have seen. However, it does little good to get...
View ArticleReading MFT
EDIT: SOLUTION: The answer is that MftValidDataLength needs to be divided by MFT record length which is 1024 giving total number of MFT records making progress feedback trivial. Hi, Could someone help...
View ArticleReading MFT
i used the code in the mft scanner project to play around with some stuff and it is stupid fast to bring back a list of files, faster than anything else i have seen. However, it does little good to get...
View ArticleReading MFT
I have since fixed this speed issue. it now takes about 1500 - 1600 milliseconds to enumerate 235,000 files on my C:\ Drive.That's fast ;)thats nice John!I also hit the 'no entry' gate at this speed...
View ArticleReading MFT
Dear StCroixSkipper,The piece of code on USN journal that you given is very helpfull. Thanks for that.I have some doubt regarding USN journal records. Please help me out.I am working on VC++ and trying...
View ArticleReading MFT
I have since fixed this speed issue. it now takes about 1500 - 1600 milliseconds to enumerate 235,000 files on my C:\ Drive.That's fast ;)
View ArticleReading MFT
John,I’ve never done a thorough check but it would be an interesting test. I think I’ve always found more files and folders with the Master File Table than with FindFirst/FindNext. If you use the...
View ArticleReading MFT
Skipper and Erik,I really like the work you've done here! I too am interested in reading from the MFT, from the Journal, and getting into VSS and Restore points. My biggest problem...I;m a noobie! :)...
View ArticleReading MFT
skipper. Impressive code work. I was wondering if I could talk to you outside of the forums about a problem I am having and see if you can offer any insight. It is off-topic to the MFT and this...
View ArticleReading MFT
Hi, I am stopping in to share a how to calculate the progress when enumerating the MFT with FSCTL_ENUM_USN_DATA. In the DeviceIoControl call you specify a buffer that is to be filled with UsnRecords...
View ArticleReading MFT
Thanks, eriklitze,I think you are right. I haven't had time to try your suggestion but I'll bet it is right on. Thanks for the response...StCroixSkipper
View ArticleReading MFT
I forgot to mention that you have to be careful especially for x64 or AnyCPU compiled. For example a pointer is 4 bytes when your process is running under x86 and pointer is 8 bytes when running...
View ArticleReading MFT
My version works on Windows 7 maybe you use READ access and the file is locked. My version uses FILE_READ_ATTRIBUTESAlso check the IoStatusBlock [out] members to see the final statusFILE_CREATED...
View Article