TOC · Work · Menu · Tools

Virtual File System Reconstruction

Open virtual directory [All Found / Virtual FS] in the File Panel to virtually reconstruct directory structure and prepare found and removed files and directories for recovery. You may reopen the directory again to get more or less results in the reconstruction depending on your need.

The results of the Full Scan are used (if the scan was performed). If files are recovered incorrectly you should try found different volumes - return to the results of the Full Scan or to the window Partitions and open the next volume.

FAT/exFAT

Rescan current file system

Rescan the entire volume if the results within the current FS format only are needed and Full Scan is not fulfilled.

Default reconstruction

Use the results of the Full Scan.

FAT Tables Options ("Parameters")

FAT tables contain cluster chains to assemble fragmented files and directories. By testing tables the software selects which table to use or not to use both. However you may try different options to achieve better results of the reconstruction and data recovery in the whole or for specific files.

You may choose which table copy to use (FAT1 or FAT2) or not to use both. The option check (do not use bad sectors) may allow avoiding some wrong chains if there is some damage in tables. ExFAT has only one FAT table which cannot be properly tested (values are correctly defined for fragmented file chains only).

Non-FAT File Systems

Pure FS Reconstruction

The option provides results within the original FS only. For slightly damaged FS these are enough and the most accurate results.

Default Reconstruction, Less (--) or More (++) Results

Use the results of Full Scan. You may decrease and increase the number of results with buttons -- and ++. The color indicator schematically shows the quality and the number of the selected results (the more additional results the worse their quality).

Advanced

Advanced parameters are primarily for specialists to make some corrections for the reconstruction if a file system is significantly damaged.

MFT Numbers (NTFS)

Filter files by MFT numbers for a partial reconstruction (can be useful if there is not enough RAM for the entire reconstruction).

prevent wrong merging

Prevent possible wrong merging of directory branches by considering time stamps.

process INDX'es (NTFS)

Better (but slower) directory structure reconstruction using information from INDX'es on top of omitted MFT info (max - force INDX processing).

Shifted (NTFS)

Include shifted MFT records (Full Scan must be performed before).

Extra Found (NTFS)

Include extra found files into the reconstruction (may contain more garbage but may help if some file is not recoverable other ways).

Tech. Records (NTFS)

Include special MFT records into the reconstruction for analysis.

MFT / FS Fragments

Manually select FS fragments to use in the reconstruction. Fragments are grouped by the relevance to the opened volume (calculated statistically):
the best, correct - most relevant and relevant,
related - may be relevant to the opened volume variants (cf. Full Scan),
unknown - relevant volume is not detected,
extraneous - relevant to a different volume,
small (extra found) - too small for statistics,
disabled - incompatible due to different FS parameters.

ReFS

In ReFS v3 any directory node contains a volume id. Other nodes in the FS Fragments list are nodes with an id which is different from the opened volume id.

In a correct FS top nodes contain links for all rest nodes (intermediate and leaf nodes). Upon any change ReFS writes new node versions in a new location and update links so there may be many old directory nodes without references. However for a damaged FS there may be also lost nodes among them. By default old directory nodes are processed as well but a file version control is used to exclude old file refernces (unless the option include all old file entries is turned on).