Linux-based Data Recovery

I have a Windows IDE drive that has crashed. I could not get the Windows XP operation system on another computer to recognize it, so R-studio was of no use. I tried detecting it on Mac OSX as well to no avail. I tried booting {Comment edited out} into a Linux session and the drive shows up there. Is there a data recovery program that runs under Linux that I can use to recover the data from this (I assume) NTFS drive? If so, what is it and where may it be found?
adande3Asked:
Who is Participating?
 
darrickhartmanConnect With a Mentor Commented:
You also may want to try a utility such as ddrescue (or dd_rescue) to extract as much information as possible.  This will allow you to backup the existing data (as much as can be accessed) prior to doing anything else on the hard drive which may be destructive.

ddrescue can be run in two steps.  A first pass which reads as much information as possible and a second pass which uses information collected in the first pass to drill down into problem areas of the hard drive using as many re-tries as you specify.  

Here's a link that explains in more detail how to use ddrescue.
http://www.forensicswiki.org/wiki/Ddrescue
0
 
rindiCommented:
Boot the PC using PartedMagic, and then run the TestDisk utility on against the bad HD. It should be able to recover data if it is still available. It also contains "PhotoRec" which can sometimes also recover data from corrupt disks:

http://partedmagic.com
0
 
adande3Author Commented:
rindi: I just happened to be in PartedMagic when I got your message. I found the two apps you mentioned and ran Photorec. I do not see a way to tell the software where to store the recovered data. I have working NTFS drives that are recognized in PartedMagic. How do I point to one of them in Photorec?

In the meantime, I am running a partition discovery in TestDisk. Thanks for the help so far!
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
rindiCommented:
Mount the partition you want to save to before starting photorec. Then start the tool, and during the selection process it also will ask you where found files should be saved. Here you can then navigate to the partition you mounted and select the directory. Mounted partitions you should find within /media/sdxx.
0
 
adande3Author Commented:
OK, I clicked media and there they are. Thanks again. I'll post again after I try these two apps. Looks like it's going to run for a long time. I suppose it would be unwise to run Photorec while TestDisk is still running, right?
0
 
rindiCommented:
Right. It would just cause disk thrashing and take forever.
0
 
adande3Author Commented:
So TestDisk is done and found no partition. Do you recommend using the deep search?
0
 
rindiConnect With a Mentor Commented:
If you have the time and the PC you are running the tests on isn't needed for other things, why not? Chances though are probably not too good.

Maybe what ought to be done first is to run the HD manufacturer's diagnostic utility to get some info on the drive itself (you'll find those tools on the UBCD):

http://ultimatebootcd.com

A really good tool, if the disk has errors, is to run the HF regenerator on it. The free trial can repair the first bad sector it finds, but for more you'd have to register it. I really recommend it. Maybe if it finds bad sectors and can repair them, it may be possible to read the data later:

http://www.dposoft.net/
0
 
adande3Author Commented:
Thanks guys. I'll be spending my weekend on this! will post updates at least by Monday. Oh by the way the deep search with TestDisk yielded nothing. Maybe once I verify the geometry things will go better.
0
 
adande3Author Commented:
Project was unsuccessful. Drive was probably just too far gone.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.