CODEWITHSUNDEEP
cwindowssystemntfslow-level
Zola Man
Zola Man

Reputation: 113

is it possible to overwrite MFT file table in windows api?

is it possible to overwrite MFT file table in windows api. When windows is up and ready?

I know we can read MFT but I ask about write.

Upvotes: 1

Views: 737

Answers (1)

Anders
Anders

Reputation: 101736

Vista restricted raw access but you can probably still do it if you unmount the volume first.

Changes to the file system and to the storage stack to restrict direct disk access and direct volume access in Windows Vista and in Windows Server 2008.

I don't know the type of program you are writing but it might fit in this category:

Backup programs must unmount the volume before they write to the volume. Otherwise, the program writes will collide with file system writes. Such collisions will result in corruption or in system instability.

Writing to a live volume might be possible if you jump trough all their hoops but the risk of corruption is probably too high, you might want to investigate obscure and/or undocumented NTFS IO control codes instead.

Upvotes: 3

Related Questions