[wplug] Data Recovery Utility

[fobitt]

Ok I think I can help on this one.
Your best bet for simply recovering the data would be to use Autopsy  
and The Sleuth Kit which is a forensics tool kit. It will go through  
the drive and look for the data structure in all the blocks rather  
than relying on the MFT info. The easiest way to use it is to  
download the Helix live CD available here http://www.e-fense.com/ 
helix/.  Just boot from that disk and point Autopsy towards the  
drive. It'll let you salvage it without too much of a problem.
It can take a little while to get use to the program so if you get  
stuck somewhere just send me an email.

The second way you could try is to have gparted try to guess the  
partition information but that is a bit riskier since you will  
actually be writing to the drive.


On Sep 17, 2006, at 9:24 PM, Kevin Scheetz wrote:

> I have a slave drive ntfs formatted that I believe I messed up the
> partition table (it happened a long time ago but I'm positive that's
> what I did).  In short, I was learning the ropes of fdisk and actually
> deleted the ntfs partition and then repartitioned the drive thinking
> that would fix the problem :-P.
>
> Can anyone recommend a method or program for recovering my data from
> this drive?  I have probably 1 or 2 GB of actually data that I would
> really like to recover from this drive before I can reformat (though
> all of it would be nice).
> -- 
> Kevin Scheetz
> _______________________________________________
> wplug mailing list
> wplug at wplug.org
> http://www.wplug.org/mailman/listinfo/wplug