By mistake deleted some LBAs (some MB), which files?

[fartinger]

Hi,
shit happens, once again in one year I deleted some LBAs (66881536 to 66979071) on my "good" 500 GB disk. This happened me again some months before and by chance I could determine which had zero-bytes in it (this was a big image what I find by chance).

But now it's more complicated and I remembered I searched the web for hours for a solution but couln't find one.

The final question on all gurus now: How can I determine which files were stored between LBA 66881536 and 66979071
Thanks in advance to all people, this forum helps me a lot the last months!

[hddguy]

Why did you delete LBA's? What did you use to do this?

Maybe you could try clearing defect table to view the contents of the data that occupies these sectors.

[fartinger]

So far about that: The "IS"-condition is, that it's happened because of stupidity, simply the false switch

I checked it with an hex-edit and exactly this range is zero. I used Drevitalize but could also do this mistake with HDDScan or other tools (OK, HDDScan so far writes something like ###HDDSCAN Sector x###"). Please don't hit me, I know that this kind of tools are more garbage than useful. But my last "LBA-loose" was with HDDScan some months ago, also the false selection in combo-box.

I know it's hard to find a cheap (or open source) disk analysis-tool what checked the filesystem and outputs which files uses which LBAs (unless I didn't clean the meta-data about files itself, I hope not).

This tool must exist, nowadays every useful und useless tool for hard disks exist

[drc]

What filesystem? NTFS?

[fartinger]

Yes. NTFS

[drc]

Winhex can do this if you let it parse the partition, then move to the empty sectors. The file that the sectors belong to (if any) will show in the info pane. I also remember some other command-line based utility but can't put my finger on it at the moment.

[fartinger]

@drc: Thank you so much! It does exactly what I want! I remembered to use this tool years ago, but for other reasons.

[fzabkar]

Winhex can do this if you let it parse the partition, then move to the empty sectors. The file that the sectors belong to (if any) will show in the info pane. I also remember some other command-line based utility but can't put my finger on it at the moment.

Microsoft has a free Win2K OEM support tool called nfi.exe.

Tip: How to determine which file occupies a particular sector:
http://forums.seagate.com/t5/Barracuda- ... /m-p/35567

[loki]

Winhex can do this if you let it parse the partition, then move to the empty sectors. The file that the sectors belong to (if any) will show in the info pane. I also remember some other command-line based utility but can't put my finger on it at the moment.

Microsoft has a free Win2K OEM support tool called nfi.exe.

Tip: How to determine which file occupies a particular sector:
http://forums.seagate.com/t5/Barracuda- ... /m-p/35567

Just to let you know that the link http://download.microsoft.com/download/win2000srv/​utility/3.0/nt45/en-us/oem3sr2.zip doesnt work

[fzabkar]

The following link still works for me:

http://download.microsoft.com/download/ ... em3sr2.zip

You appear to have an extraneous character before "utility".

[loki]

The following link still works for me:

http://download.microsoft.com/download/ ... em3sr2.zip

You appear to have an extraneous character before "utility".

Hmm its the link from the website you said & I just copied & pasted it in to IE8?
If you paste the shortcut text from yours & the sites they are the same? Weired?

[fartinger]

For me the link also works fine. Great tools !!