What do you mean by "some entries for the file name"? Actual MFT records in unallocated or something else?
What you also could do is scan the drive for $LogFile fragments in unallocated, using the signature RCRD. Procedure after that might not be straight forward, but lets take that if you find any.
↧