Microsoft KB Archive/934978

= Description of the influence that file placement in the master file table has when you recover data by using Administrator's Pak =

Article ID: 934978

Article Last Modified on 7/25/2007

-

APPLIES TO


 * Winternals Administrator's Pak 4.2
 * Winternals Administrator's Pak 5.0

-



Introduction
This article describes the influence that file placement in the master file table (MFT) has when you recover data by using Winternals Administrator's Pak.



MORE INFORMATION
The MFT keeps a list of entries for the files on the disk. Every file has at least one corresponding entry. The MFT does not remove an entry from the disk. When files are deleted from an NTFS disk, the corresponding entries are marked as &quot;free.&quot; These entries can be overwritten when a new write operation to the disk occurs. The more recent the file entry in the MFT, the more likely it will be overwritten when the next write operation to the disk occurs. If you create a file and then immediately delete it, the file is likely to be immediately overwritten when the next write operation occurs on the disk.

Additional query words: Winternals KB#: 30079 MFT data recovery FileRestore

Keywords: kbtshoot kbexpertiseinter KB934978

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.