scrounge-ntfs is a utility that can rescue data from corrupted NTFS partitions. It writes the files retrieved to another working file system. Certain information about the partition needs to be known in advance. Data recovery program for NTFS file systems. Reads each block of the hard disk to and retrieves rebuilds file system tree on another partition. i wrote this program when one of my friends lost valuable data on an NTFS drive. It been used since then in several cases, but not thoroughly tested, especially not WRT the fact that it’s a data recovery program. other similar programs I’ve found: Get Data Back for NTFS, Salvage NTFS.
scrounge [-m mftoffset] [-c clustersize] [-o outdir] disk start end
-m Offset to mft (in sectors) -c Cluster size (in sectors, default of 8) -o Directory to put scrounged files in disk The raw disk partitios (ie: /dev/hda) start First sector of partition end Last sector of partition
cyborg@cyborg:~$ sudo scrounge-ntfs /dev/sda1 2048 206847 scrounge-ntfs: Scrounging via raw search. Directory info will be discarded. [Scrounging raw records...] \$TxfLog.blf \$TxfLogContainer00000000000000000001 \$TxfLogContainer00000000000000000002 \Boot \BOOTSTAT.DAT \en-US \bootmgr.exe.mui \memtest.exe.mui \memtest.exe