Last weekend I spend some good hours testing and digging out a hard disk that -I thought- had crashed. It turned out that Windows XP had some real problems with the disk, but Ubuntu was reading it correctly. Nevertheless I followed some guides on data recovery with Ubuntu and tried it on this disk.
The Windows XP filesystem is NTFS, which uses a table with all information about the files on the disk. If this table gets corrupted, Windows is not able to properly read the files anymore, but the files themselves are mostly still intact. There are some programs that ignore the table and look on the disk itself for the files.
Ubuntu has these programs in its software repository so I installed the required software with Synaptic which went easy. I tried Foremost and Scalpel, both read the disk entirely and check on header information. Foremost was originally developed by the United States Air Force Office of Special Investigations continue reading…
