DiskView

Description

DiskView is a tool for browsing NTFS partition directly. DiskView is suitable if you want to look directly to disk but not using file manager. You can display content of any free or occupied cluster. DiskView shows that free space on disk is not continuous area and also bigger files are not in continuous area but in several blocks. DiskView also shows whether data of file are stored inside Master File Table (MFT) or not. DiskView can be also used to verify whether secure deleting works properly.

DiskView can be used in NTFS based Windows - Windows NT, Windows 2000, Windows XP, Windows 2003 etc. This program cannot be used in Windows 95, Windows 98 or in Windows ME.

DiskView cannot change content of any cluster or cause any damage of data because DiskView using only read access.

Most of DiskView's function needs full control (administrator rights) of used disk.

DiskView has 5 basic functions:
Show free clusters
DiskView shows free and allocated clusters. DiskView displays list of free blocks in format: number of first free cluster and number of free clusters. DiskView also displays disk map where free clusters are marked by number 0 and allocated clusters are marked by number 1. You can set number of searched free blocks and since which cluster should start searching. This function can take a little bit longer if there are used big values.
Show where is placed specified file
Specify filename including path of any file. DiskView displays list of blocks where is stored content of specified file. The item of list has format: virtual cluster number (VCN), logical cluster number (LCN) = order nuber of cluster on disk, length of block (LEN) = count of clusters in block.
It is not possible to get placement of some system files and files which are whole stored in MFT. It is typical for files with file size 550 bytes and smaller.
Show content of cluster
This function displays content of any required count clusters from specified order number of cluster (LCN). It is also possible to save content of one ore more clusters into file.
Show NTFS informations
Displays informations about any disk drive.
Show MFT records
DiskView goes through MFT and search and displays MFT records. MFT record is displayed as MFT record number, LCN, filename, information whether file data are inside or outside MFT record and MFT record attributes.

How to verify that a file is secure deleted
1. Run DiskView and switch to second tab - Location file.
2. Fill field File and press button Show. Location of verification file is displayed in edit area.
3. Switch on third tab - Content of cluster and copy LCN number into field From cluster and pressbutton Show. Content of file is displayed in edit area.
4. Press button Clear to clear edit area and Delete verification file and press button Show again. Content of cluster is displayed again and if the same data are displayed then file was deleted unsecure.

This secure deleting verification can be used for normal and compressed files but not for files which are whole stored in MFT (very small files).

Download and screenshots


Click to enlarge

Click to enlarge

Click to enlarge

Download:
DiskView 2.0 size 0.4 MB

Licencing

Freeware