Sunday, February 1, 2009

Get data from busted ntfs partition.

Found a very cool and handy utility to recover data from an ntfs drive that was reformatted to FAT32.

http://memberwebs.com/stef/software/scrounge/

No need for me to explain the workings the documentation is good.

A friend was migrating from a Windows XP Laptop to a nice new Shiny MacBook. In the process he reformatted one of his USB 500GB drives, was NTFS, to FAT32 for cross compatibility. Unfortunately the backups of the drive was not good. So there we were a few Gig's of very good high quality photos gone. 

A hand full of standard unix tools and scrounge-ntfs has helped me to recover the data. Scrounge takes a few simple parameters one being the drive to scan and another a destination directory to dump the recovered file. 

for reference here is my executed command.
scrounge-ntfs -m 6291456 -o /data/d5/rescue /dev/sdf 63 1953546210

All in all scrounge-ntfs was easy to compile, clear documentation, simple parameter options and it works well, It saved the day.