[NTLUG:Discuss] Needles in a haystack

[Robert Citek]

Lenrek Xunil wrote:
> My bro's wife asked me to look at the Windows XP PC.

I read that sentence and immediately thought "Oh, no.  This can't be
good."  Sure enough, it got worse.

If I understand correctly, you've got a drive that was NTFS, that was
possibly corrupted, that was then re-formatted as NTFS using Windows,
and now you want to recover the files from it.

The first thing I would do is image that drive to another drive using dd
or partimage.  After that, I'd try testdisk and gpart.  If anything goes
wrong, you can restore the data from your image.

Good luck and let us know how it goes.

Regards,
- Robert