Well, if you completed reading the post, you would have seen the links to Google results for examples. There is no way you can explain all of the ins and outs of NTFS, how to read and interpret MFTs, search for and recover the "lost" chains, and put them back into the tables as a coherent file, all in a couple of forum posts. I gave him exactly what he asked for - hints. If you want to try and explain all that without writing a small book, be my guest. All you have to do is reply to the OP.
A guide to posting questions on CodeProject[^]
Dave Kreskowiak Microsoft MVP Visual Developer - Visual Basic
2006, 2007, 2008
But no longer in 2009...