Recovering files from an NTFS partition?
 

Hi :)

A few days ago, errors began appearing in Windows, and yesterday I called HP, who directed me to Dell, who then directed me back to HP...long story short, I can't start up Windows now...but this gave me a good excuse to reinstall linux ;)

Using a few old Partition Magic boot disks and some RedHat CDs I had lying around, I finally got this thing up and running this morning before I left for school.

Anyway, there's a large amount of information on the Windows partition that is of a great amount of value to myself, and the other members of my family (photos, resumes, documents, etc) that I'd really like to get back. Is there a way to get those files back using some command, or is there some kind of tool that will help me? :confused:

Well. The first thing to try would be to mount the
drive read-only from DeadRat ..


That failing you may want to look at those projects:
http://linux-ntfs.sourceforge.net/
http://www.sleuthkit.org/


Cheers,
Tink

well, if you know how to recompile a kernel, you can just recompile with ntfs read support. You could then put your info on the RedHat partition or burn some cd's. Since you said you had some old RH cd's im assuming its an older version. If you upgrade to the 2.6 kernel it has better support for NTFS.

My educated guess is that compiling sleuthkit
would be faster than building a custom kernel ;)

600K of source vs. 30000K of source ... (rough
estimation of compressed file sizes)


Cheers,
Tink

Perhaps you can boot your machine with a live-cd version of Linux (Knoppix or Gnoppix) and mount your NTFS partition read-only. This way, you won't have to write to your hard drive and worry about data loss.