CODEWITHSUNDEEP
winapintfs
user3161924
user3161924

Reputation: 2275

How do you get the list of files under the NTFS special $Extend folder?

I'd like to get the list the contents of the $Extend folder on NTFS drives. I am sure I've done it in the past but now I get nothing but Access Denied using FindFirstFile, even with the SE_BACKUP_NAME privilege and running as Administrator.

How do you get the list of files under that folder using C++?

Update: I also find I can't even do this:

 CreateFile(_T("C:\\$MFT"), GENERIC_READ, FILE_SHARE_READ|FILE_SHARE_WRITE, NULL, OPEN_EXISTING, FILE_FLAG_BACKUP_SEMANTICS, NULL);

I also tried $MFT::$DATA, same Access Denied (5) issue. If you read the MS documentation here, it mentions FSCTL_MOVE_FILE and all the special files that are supported, so you should be able to open them.

TIA!!

Upvotes: 0

Views: 95

Answers (0)

Related Questions