From owner-freebsd-questions@FreeBSD.ORG Mon Jul 9 16:30:28 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9F439106564A for ; Mon, 9 Jul 2012 16:30:28 +0000 (UTC) (envelope-from arab@tangerine-army.co.uk) Received: from queueout04-winn.ispmail.ntl.com (queueout04-winn.ispmail.ntl.com [81.103.221.58]) by mx1.freebsd.org (Postfix) with ESMTP id 226BD8FC08 for ; Mon, 9 Jul 2012 16:30:27 +0000 (UTC) Received: from know-smtpout-1.server.virginmedia.net ([62.254.123.4]) by mtaout01-winn.ispmail.ntl.com (InterMail vM.7.08.04.00 201-2186-134-20080326) with ESMTP id <20120709160520.ZALB3118.mtaout01-winn.ispmail.ntl.com@know-smtpout-1.server.virginmedia.net> for ; Mon, 9 Jul 2012 17:05:20 +0100 Received: from [94.168.171.147] (helo=Mercury.universe.galaxy.lcl) by know-smtpout-1.server.virginmedia.net with esmtp (Exim 4.63) (envelope-from ) id 1SoGPP-00040f-7d for freebsd-questions@freebsd.org; Mon, 09 Jul 2012 17:01:59 +0100 Received: from Mercury.universe.galaxy.lcl ([fe80::b0b0:8497:b56e:9ced]) by Mercury.universe.galaxy.lcl ([fe80::b0b0:8497:b56e:9ced%11]) with mapi; Mon, 9 Jul 2012 17:01:58 +0100 From: Graeme Dargie To: "'freebsd-questions@freebsd.org'" Thread-Topic: NTFS data recovery Thread-Index: Ac1d623eycVRvMY3SpWZbRhnHzb5jw== Date: Mon, 9 Jul 2012 16:01:56 +0000 Message-ID: <4C0F7421AA759346AF17299922AD57EB06286449@Mercury.universe.galaxy.lcl> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: MIME-Version: 1.0 X-Cloudmark-Analysis: v=1.1 cv=JvdXmxIgLJv2/GthKqHpGJEEHukvLcvELVXUanXFreg= c=1 sm=0 a=OMdUhd4NiskA:10 a=xqWC_Br6kY4A:10 a=0_dOlrG_gunLyq4bkw8A:9 a=CjuIK1q_8ugA:10 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8 a=gKO2Hq4RSVkA:10 a=UiCQ7L4-1S4A:10 a=hTZeC7Yk6K0A:10 a=HpAAvcLHHh0Zw7uRqdWCyQ==:117 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: NTFS data recovery X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Jul 2012 16:30:28 -0000 Hi All, I have been given a laptop to look at for a friend, the hard disk is close = to death with a SMART error on POST. My initial thought was to just mount i= t on an Windows 7 machine and grab what I can from the drive. No joy Window= s insists that the partition is RAW and I need to format it. I can however = mount it under FreeBSD without any problems, the directory structure appear= s to be intact but there are no files in the places I would expect to find = them under the Users directory, I am guessing that these have somehow been = deleted or perhaps the victim of a partial OEM recovery process. Is there a= way to scan the drive for deleted files from the command line or something= from the ports tree that anyone can recommend to fulfil this requirement. Regards Graeme