Patent ID: 8650229

Claim:
A computer implemented method, comprising the steps of: directing a physical storage device, a memory, and a processor in accessing a Master File Table ($MFT) associated with a New Technology File System (NTFS) volume to remove a File Record Segment (FRS) from the SMFT residing in the physical storage device: identifying at least one said File Record Segment to be removed from said Master File Table ($MFT) associated with said New Technology File System (NTFS) volume; reading a New Technology File System (NTFS) volume Boot Sector; loading a Bios Parameter Block (BPB) data structure; determining a position of said Master File Table ($MFT) Physical Disk Address starting cluster; determining said Master File Table ($MFT) Valid Data Length; determining wherein said Master File Table ($MFT) associated with said New Technology File System (NTFS) volume is fragmented, to translate and parse a $BITMAP attribute data runs inside said Master File Table ($MFT); extract a fragmented cluster within said Master File Table ($MFT); scan a bit array; determine said File Record Segment to be removed; load a File Record Segment sector byte offset; verify if said File Record Segment is currently in use; set a file pointer at a File Record Segment starting sector byte offset; lock said File Record Segment; move said file pointer from said File Record Segment starting sector byte offset continuous to a File Record Segment end of sector byte offset, while overwriting each byte on a last overwrite pattern with a byte character 0 ; wherein said Master File Table ($MFT) associated with said New Technology File System (NTFS) volume is not fragmented, to read a File Record Segment header flag parameter at a File Record Segment sector offset 22 ; determine said File Record Segment to be removed; load a File Record Segment sector byte offset; verify if said File Record Segment is currently in use; set a file pointer at a File Record Segment starting sector byte offset; lock said File Record Segment; and move said file pointer from said File Record Segment starting sector byte offset continuous to a File Record Segment end of sector byte offset, while overwriting each byte on a last overwrite pattern with a byte character 0 .