Knoppix & NTFS file recovery
I am trying to recover my mother's files from her XP install using my Knoppix cd. I can mount the drive with 'mount -t ntfs /dev/hda1 /mnt/hda1'. And I burned several directories (My Documents etc) safely to CDR. However, the one thing most important to her is email. If I could get her outlook.pst file I could just format the drive and reinstall.
When I try and 'ls' the Outlook directory the machine completely locks up. I left it that way for about an hour hoping it might recover. I tried a number of different things to get the file off the drive. scp'ing it to another linux box and cp -a the whole directory. Everything I try involving that file locks the machine up.
I installed ntfsprogs into the /home/knoppix dir and using ntfsls I can list the directory with the file I need. But I don't know how to recover it. ntfsclone was installed with the package but apparently it is only for imaging the whole drive. At the moment I don't have another drive to back 7 gigs up to so that's not an option.
Does anyone know if its possible to pull just one file off the drive using ntfsprogs. Or any other software for that matter. I've also installed scrounge-ntfs, but its not helping much either. I just found something called Paragon NTFS and am currently reading up on it.
As far as the drive goes I don't really know what happened to it. I think its dead. I ran the Maxtor Powermax utility on it and I get 'Too Many Errors Found'. Which is not very helpful at all. I'm hoping that if I can get the files I need backed up I can wipe it to zeros.
When I try and boot XP I get a wonderful BSOD that says "unbootable boot volume" and something about disabling caching and shadowing in the bios. Both of which are disabled and have never been enabled to my knowledge. (my mother doesn't exactly play around in BIOS's)
Anyway, any help is appreciated. I know this is kind of a Winblows problem. But as far as I can tell the way I'll save her data is with linux.