NTFS索引项里的 MFT参考号神马时候为0
按说ntfs的存储是按ID号进行排序生成的但是在win7的盘符根目录的里面遍历时遇到了索引项结构异常
即文件的mft参考号为0
数据如下:
Offset 0 1 2 3 4 5 6 7 8 9 A B C D E F
00002CC90 00 00 00 00 00 00 00 0010 00 00 00 02 00 00 00 ................
00002CCA0 00 00 00 00 00 00 00 0000 00 00 10 00 00 00 00 ................
00002CCB0 07 00 57 00 69 00 6E 0064 00 6F 00 77 00 73 00 ..W.i.n.d.o.w.s.
00002CCC0 00 00 00 00 00 00 00 0010 00 00 00 02 00 00 00 ................
00002CCD0 60 00 50 00 00 00 00 0005 00 00 00 00 00 05 00 `.P.............
00002CCE0 45 14 19 FA 2B 04 CA 017A 9D 8C 58 3E FB CC 01 E..?.?z.孹>?.
00002CCF0 7A 9D 8C 58 3E FB CC 017A 9D 8C 58 3E FB CC 01 z.孹>?.z.孹>?.
00002CD00 00 00 00 00 00 00 00 0000 00 00 00 00 00 00 00 ................
00002CD10 00 00 00 10 00 00 00 0007 00 57 00 69 00 6E 00 ..........W.i.n.
00002CD20 64 00 6F 00 77 00 73 0000 00 00 00 00 00 00 00 d.o.w.s.........
00002CD30 10 00 00 00 02 00 00 00 ........
请大侠指点如何继续解析 多谢（2： 这个记录不在2个扇区的交界区 所以不用考虑USA等问题 怎么还有刷版的...无语
页:
[1]