| Author |
Message |
   
Jimmy Weg (Jw)
| | Posted on Wednesday, Aug 11, 2004 - 18:35: | |
On one drive, I have spanned image set of an NTFS partition. Actually, it's a type 0x44, or GoBack partition. When I eccess the NTFS partition, which WinHex evidently sees through the GoBack configuration, I receive a message of "The location of [empty space] on the disk cannot be be determined correctly." After clicking Okay through three of such messages, the partition opens. I have another drive that has the GoBack overlay, and another tool shows one underlying NTFS partition and one FAT partition. The NTFS partition starts at Sector 63, and the FAT at 20,479,620. WinHex reports one NTFS partition when opening the spanned image set and trying to access the partitions. If I navigate to the latter sector, I can see the FAT partition information. I'd like to access the FAT partition normally, if possible. I hope my explanation makes sense. |
   
Stefan Fleischmann (Admin)
| | Posted on Wednesday, Aug 11, 2004 - 18:48: | |
The message "The location of x on the disk cannot be be determined correctly.", where x is a filename (unless WinHex does not know the filename yet), indicates that the current WinHex version cannot tell which clusters the file or directory utilizes, due to a bizarre way how NTFS stores that information. That means, the details panel will incorrectly display these clusters as empty, the directory browser will not be able to move to the beginning of the file on the disk, to create a clusters list, to open or copy the file, and Create Drive Contents Table will not be able to analyze the contents of the file. There is a chance that the names of the affected files can be displayed when creating a drive contents table. I guess you could access the FAT partition normally if you copy all the sectors that belong to that partition off the image into a new separate image and interpret that one instead. |
   
rjohnson
| | Posted on Wednesday, Aug 25, 2004 - 3:45: | |
[Moved from Error Reports | "The location of ... cannot be determined" by admin ] Please relocate this message as needed. WinHex 11.65-SR8 (and earlier) has a message I have only been seeing recently and I am not sure what it means and am asking for clarification. There is a yellow triangle with an exclamation mark and a message similar to this: "The location of on the disk cannot be determind correctly." In the above message no file is named but a space is where a filename has appeared in previous messages (e.g. outlook.pst). ------------------------------ also, There is a check box for: "Do not display this hint again" Question: when checking the "do not display" box, does that apply to just the currently referenced file or the current activity (e.g. search) or the current case or current session or imperpetuity? |
   
Stefan Fleischmann (Admin)
| | Posted on Wednesday, Aug 25, 2004 - 10:51: | |
If WinHex fails to specify the name of the file when traversing the cluster chains to generate a cluster map, there is still a chance to be told the name of the affected file when creating a drive contents table. The "Do not display this hint again" checkbox affects all such files and all kinds of activities on all drives until WinHex is restarted. |
|