From owner-freebsd-questions@FreeBSD.ORG Wed Jul 11 19:32:41 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C548B106564A for ; Wed, 11 Jul 2012 19:32:41 +0000 (UTC) (envelope-from lokadamus@gmx.de) Received: from mailout-de.gmx.net (mailout-de.gmx.net [213.165.64.23]) by mx1.freebsd.org (Postfix) with SMTP id 142908FC12 for ; Wed, 11 Jul 2012 19:32:40 +0000 (UTC) Received: (qmail invoked by alias); 11 Jul 2012 19:32:31 -0000 Received: from d018117.adsl.hansenet.de (EHLO FBSD.lokilan) [80.171.18.117] by mail.gmx.net (mp031) with SMTP; 11 Jul 2012 21:32:31 +0200 X-Authenticated: #3333826 X-Provags-ID: V01U2FsdGVkX1/W6kdQOqLWBmNQBix5ceKZvJ0HCnyV34Jlq69p8c F37QszKg711HjG Message-ID: <4FFDD4CE.9040904@gmx.de> Date: Wed, 11 Jul 2012 21:32:30 +0200 From: "lokadamus@gmx.de" User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:12.0) Gecko/20120505 Thunderbird/12.0.1 MIME-Version: 1.0 To: Graeme Dargie References: <4C0F7421AA759346AF17299922AD57EB06286449@Mercury.universe.galaxy.lcl> In-Reply-To: <4C0F7421AA759346AF17299922AD57EB06286449@Mercury.universe.galaxy.lcl> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 Cc: "'freebsd-questions@freebsd.org'" Subject: Re: NTFS data recovery X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2012 19:32:41 -0000 On 07/09/12 18:01, Graeme Dargie wrote: > Hi All, > > I have been given a laptop to look at for a friend, the hard disk is close to death with a SMART error on POST. My initial thought was to just mount it on an Windows 7 machine and grab what I can from the drive. No joy Windows insists that the partition is RAW and I need to format it. I can however mount it under FreeBSD without any problems, the directory structure appears to be intact but there are no files in the places I would expect to find them under the Users directory, I am guessing that these have somehow been deleted or perhaps the victim of a partial OEM recovery process. Is there a way to scan the drive for deleted files from the command line or something from the ports tree that anyone can recommend to fulfil this requirement. > > Regards > > Graeme > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > You can use testdisk (opensource) http://www.getbackdata.net/ntfs.html (commercial) or http://www.pcinspector.de/ (free) Other programms: http://www.sleuthkit.org/ (opensource i think) http://sfdumper.sourceforge.net/ (opensource i think) http://www.ufsexplorer.de/products.php (commercial) For ufs i found only sfdumper for free, others are commercial.