Bad MFT. Can we restore using the MFT Mirror?

Data recovery from Hard Disk Drives with logical problems

Moderator: Nick_TS


jeyk
Newbie
Posts: 6
Joined: 13.04.16
Reputation: 1 / (6)

Bad MFT. Can we restore using the MFT Mirror?

Postby jeyk » 06.05.16, 23:04

In DE, can we write the MFT Mirror to the drive so it can create a file map? How do we do this?


rdallasb
Newbie
Posts: 9
Joined: 07.08.14
Reputation: 1 / (9)

Re: Bad MFT. Can we restore using the MFT Mirror?

Postby rdallasb » 07.05.16, 02:23

Hello jeyk, can you explain the situation and what you hope to accomplish?


jeyk
Newbie
Posts: 6
Joined: 13.04.16
Reputation: 1 / (6)

Re: Bad MFT. Can we restore using the MFT Mirror?

Postby jeyk » 08.05.16, 19:07

I have a drive that is having trouble reading the MFT. I know I have seen people restore the MFT by using the mirror, and was hoping there was a quick way to do it in DE, without looking manually for the MFT mirror, and editing it manually.


AJ2008
Posts: 1410
Joined: 25.11.08
Reputation: 12 / (116)

Re: Bad MFT. Can we restore using the MFT Mirror?

Postby AJ2008 » 07.06.16, 12:41

Pull MFT mirror location from boot sector properties, copy this MFT record and then write it to the position where primary MFT Record should reside, then save and refresh explorer view. You should now at least have option to scan MFT, though you will need to have majority of other file records accessible for any positive results.

User avatar
DataMedics
Advanced user
Posts: 619
Joined: 14.12.15
Reputation: 18 / (177)

Re: Bad MFT. Can we restore using the MFT Mirror?

Postby DataMedics » 08.06.16, 18:43

I don't think there's ever a good reason to write any data on the drive you are working on, EVER! Just run the "Scan MFT & Index" option and work from the results. Unless you're really trying to make a bootable system for some sort of machine I guess, but even then should only try it on the clone drive, not the original.


AJ2008
Posts: 1410
Joined: 25.11.08
Reputation: 12 / (116)

Re: Bad MFT. Can we restore using the MFT Mirror?

Postby AJ2008 » 09.06.16, 10:56

DataMedics wrote:Source of the post I don't think there's ever a good reason to write any data on the drive you are working on, EVER! Just run the "Scan MFT & Index" option and work from the results.


Scan MFT option is available only if MFT Record is intact and readable. Writing to source disk is never a good idea, you misunderstand my message; any changes made to the map in the DE task would be made upon destination media / image from within the task so source is never modified, only output media/image file.

User avatar
Amarbir[CDR-Labs]
Advanced user
Posts: 784
Joined: 03.08.09
Reputation: 8 / (80)

Re: Bad MFT. Can we restore using the MFT Mirror?

Postby Amarbir[CDR-Labs] » 14.06.16, 06:02

AJ2008 wrote:Source of the post
DataMedics wrote:Source of the post I don't think there's ever a good reason to write any data on the drive you are working on, EVER! Just run the "Scan MFT & Index" option and work from the results.


Scan MFT option is available only if MFT Record is intact and readable. Writing to source disk is never a good idea, you misunderstand my message; any changes made to the map in the DE task would be made upon destination media / image from within the task so source is never modified, only output media/image file.


Well,
The Idea Seems To Be Pretty Nice ,But There is a trick to this .If you do not follow the trick it will not work .The Trick is to copy to destination drive then change properties to work with copy only do what aj said then dump the mirror to the location he is saying then scan mft then change back to source drive and enjoy
Regards
Amarbir S Dhillon ,CDR Labs [ Chandigarh ,India ]
DataRecovery - The Affordable Way In India
Visit - > http://www.chandigarhdatarecovery.com My Facebook - > https://www.facebook.com/chandigarhdatarecovery


AJ2008
Posts: 1410
Joined: 25.11.08
Reputation: 12 / (116)

Re: Bad MFT. Can we restore using the MFT Mirror?

Postby AJ2008 » 17.06.16, 09:24

When working in DE with a Data copy enabled, any changes to the map are never made to the source so there is no need to switch to copy only mode. Modified sectors will show as blue in the map and reflect changes to the destination only.


Return to “Data Extractor”

Who is online

Users browsing this forum: No registered users and 11 guests