[ILUG] Recovering data from a corrupt hard drive

[James Galvin]

Hello,

I'm having some trouble recovering data off a corrupt ntfs hard drive.
I can mount the drive and browse folders and get some of the data, but
some of the important data I need (including Outlook.pst) cannot be
copied over.

I tried using dd_rhelp to get an image of the hard drive, but when I
attempt to mount that with "mount -o loop -t ntfs hda1_rescue.img
mountdir" it tells me there is a bad superblock on /dev/loop1, and I get
the following output from dmesg:

[4817414.003000] NTFS-fs error (device loop1): ntfs_attr_find(): Inode
is corrupt.  Run chkdsk.
[4817414.004000] NTFS-fs error (device loop1): ntfs_read_inode_mount():
Failed to lookup attribute list attribute. You should run chkdsk.
[4817414.004000] NTFS-fs error (device loop1): ntfs_read_inode_mount():
Failed. Marking inode as bad.
[4817414.004000] NTFS-fs error (device loop1): ntfs_fill_super(): Failed
to load essential metadata.

At the moment I'm writing the image to a spare hard drive in the hope
that I might have more luck.  Any ideas on where to go from here?

Thanks,
James