Questions about recovering data. Includes data loss due to hardware failure, software failure, and user or administrator failure (accidental delete). Please also add tags for the specific things involved, such as /raid, /ext4, /hard-disk, /rm, etc.

learn more… | top users | synonyms

0
votes
1answer
20 views

How to issue a tar command when you restore your system

I've recently created a tarball backup of my Ubuntu system (/ and /home partitions both ext4). When I was creating a backup I booted off Live DVD and I used a tar command. Now I wonder which would be ...
0
votes
1answer
8 views

why lsdel in debugfs doesn't work?

I have a partition (/dev/sdb1) with filesystem (ext3) and mounted in (/mnt/folder). I touch a file in /mnt/folder and remove that file. now i use (debugfs /dev/sdb1) and then I type ( lsdel ). but it ...
0
votes
1answer
25 views

What format gives photorec to files?

I have to recover a file from my usb. I didn't find it on the net. How does photorec call files of unknown format? For instance, I have a file named *.jks . How can I find it in the recovered ...
0
votes
1answer
35 views

DDRescue taking months but no errors?

'm having a hard time finding others with the same error, and I'm trying to figure out the best path forward. I have a hard drive that was unusably slow, and then stopped booting. The clonezilla ...
3
votes
1answer
97 views

Recover LVM (on RAID1): No volume groups found. Partition table erased?

I'm trying to recover a LVM (no encryption) on a RAID1 using Debian Live. Apparently, the RAID1 can be assembled without issue, but the LVM is broken. You may skip to LVM section. The RAID part is ...
1
vote
0answers
11 views

Snapper - how to undo changes, preserving timestamps?

I've damaged modification dates of files on my drive and I wanted to revert them using snapper snapshots but it doesn't seem to work, snapper only reverts content of files not modification dates. ...
0
votes
0answers
17 views

How to recover data from an SD card with incorrectly detected size?

How can I recover a SD card with incorrectly reported size? (The answer to this question is not given in How to recover data from a bad SD card? ) This question is specific to recovering an SD card ...
1
vote
1answer
28 views

destroyed folder now without directory attribute

I tried to read some videos from the memory card of my digital camera. It wasn't possible to access the DCMI Folder, because there was no directory attribute. The expecting DCIM folder was a 0-byte ...
1
vote
0answers
33 views

Bulk move files back to where they came from

What happened I'm in quite a mess right now after having clamscan scan over my windows part of the system and move all found files (which apparently includes PUA's) to a directory on another drive. ...
2
votes
2answers
40 views

Accidentally installed Linux Mint over Windows/Ubuntu. How do I recover data (SSD)?

I had Ubuntu and Windows installed on this 480Gb drive (on my laptop) and decided I'd like to try Linux Mint. One of the options given in the Linux Mint installation Wizard was to delete Ubuntu ...
1
vote
1answer
41 views

Retrieve data from free space on 600Go disk after this disk have been dd of=/dev/{this disk} with 4Go data

I'm stuck in a tricky problem. Context : Yesterday I made a cloning script for my raspberry pi that dd a whole running pi filesystem into a local sdcard on a computer connected through ethernet. It ...
3
votes
3answers
92 views

How can I read a linux hard disk from Windows?

I have a PC with Ubuntu (I think it's 14.4). Pretty recently it completely broke down (motherboard (again)). I want to get rid of it, but on the hard disk there are a lot of photos I want to keep. I ...
1
vote
0answers
53 views

Which sector size shall I choose to run ddrescue with direct access on an Advanced Format drive?

I started the imaging of an AF/512e HDD by first running a following command: ddrescue -n /dev/sdb2 drive_c.img mapfile.log Upon its completion I made a backup of mapfile.log and decided to run ...
0
votes
0answers
12 views

Restore partition/block after wiping from Android recovery

I'm not sure if this is the right place but as its very unix like in the possible solution but: I wiped all my data on my android phone via recovery including my sdcard partition - which contained my ...
0
votes
1answer
26 views

How to recover a node/content from a tarfile that's been overwritten

Disclaimer: I'm not very good at writing questions, and mine is a very specific scenario. So I'm just going to jump straight into the situation: I was browsing my filesystem, and somehow managed to ...
0
votes
0answers
21 views

Refind only boots OSX off of Recovery HD

(Apple Partition) - First time Linux User/ First Download (My external) Linux Mint 17.2 Okay, I used a Live USB to download Linux to an external hard drive. On that hard drive is a back up - ...
-1
votes
3answers
73 views

Check if a plain text contains some bytes of binary data

How to determine in Bash if a file is 100% text file or if it contains some binary data? I'm doing data recovery and this is useful to check if text files recovered (mail messages, SQL dumps, source ...
12
votes
2answers
268 views

Deleted first 512 bytes of disk; how can I recover my data?

I accidentally wrote a 512 bytes binary to the wrong USB disk with dd and the device doesn't show any partitions with fdisk anymore. I thought all the data was gone, but dd if=/dev/sdx | strings ...
1
vote
1answer
48 views

ddrescue image too large

3Tb HDD is corrupt. I tried using ddrescue to create an image and a logfile on another 3TB HDD (only one I had). I got a write error after about 2.7T (actual capacity of the 3TB). Image file and log ...
0
votes
1answer
167 views

File type inode/x-corrupted

My system had an unexpected shutdown. Now when I open the file from pcmanfm or nautilus I get file corrupted error. Strangely the files are accessible just fine if I launch pcmanfmas root user. The ...
0
votes
0answers
91 views

Can't mount my NTFS partition on Windows or Linux

During my formatting, I did some move on my partitions, and the one with all my data to keep can't be mount any more (/dev/sdc1). On Windows 8.1 I got a "You need to format this partition" message. ...
4
votes
1answer
34 views

Ext4: I/O errors on a clean external drive

So I've an external Seagate hard disk that I used to mount on my Mac through Paragon ExtFS. For some unknown reason it stopped to mount on my Mac due to I/O errors - I may have removed the drive ...
0
votes
1answer
16 views

fat32 partition overwritten by Mint image

Was Running Mint 17.1 Two Kingston USB devices attached accidentally written a Mint image the the archive Kingston by the image writer, and lost my fat32 partition with important data collection. ...
1
vote
0answers
30 views

Flash drive fat32 partition overwritten by Linux Mint 17.1 image writer - need to recover [closed]

Ah Yeah...Mint 17.2 image is written onto a Kingston flash drive (8GB) and overwritten a fat32 partition. I can take You to the moon if You tell Me that, those files aren't lost ones. ///the image ...
1
vote
0answers
28 views

Recover file from partition after writing on it

I really did a big mistake. I have a partition sda6 for backup, when writing the iso to a pendrive, instead of typing sdb6, i've typed sda6, is there any way to get back the files
0
votes
0answers
38 views

Can I restore disk after ntfsclone

So I stupidly got the order of arguments the wrong way in my ntfsclone command and ended up writing a blank disk to the disk I primarily use for important data (documents, personal pictures, etc). ...
1
vote
1answer
47 views

I've wiped my partition table using gparted and testdisk did nothing

I've wiped my NTFS partition table using gparted by clicking on "Device->Create Partition Table... and then apply" by accident. In this topic "I've wiped my partition table using gparted, is ...
-1
votes
1answer
40 views

How to recover /etc/sudoers file with vim? [duplicate]

I am trying to recover my /etc/sudoers file in my Chrome OS terminal. I can't access grub, and I don't have root access either. Possibly I need to make a new sudoers file? I already tried that, but it ...
0
votes
0answers
85 views

How do I recover a file with vim?

I am trying to recover my sudoers file. I typed in my Chrome OS terminal vim -r /etc/sudoers After that it gave me the following, Swap files found: Using specified name: 1. .sudoers.swm ...
0
votes
0answers
32 views

Is it possible to recover deleted sudoers file without recovery mode? [duplicate]

I deleted the sudoers file by accident, and I am trying to enter recovery mode, but no matter which flash drive I use, it says 'an unexpected error has occured.' I want to recover it from within the ...
1
vote
0answers
20 views

Recover Track on blanked CD-RW

I am trying to recover files from a probably quick-blanked CD-RW. When analysing the CD with photorec it detects a disk size of 2048B or one sector; other tools see a blank disk. However cdrwtool ...
3
votes
0answers
118 views

BTRFS: too many missing devices, writeable mount is not allowed

Environment $ btrfs --version btrfs-progs v4.2.1 $ uname -a Linux [REDACTED] 4.2.1-040201-generic #201509211431 SMP Mon Sep 21 18:34:44 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux Problem Today the ...
0
votes
1answer
57 views

Data recovery from corrupted Mint 17 partition

I'm facing a strange issue, I will try to give as much details as I can. I already tried lot of things from stackexchange and ubuntuforum and nothing seem to work. My HDD looked like this : ...
1
vote
1answer
36 views

gpart finds partitions but puts zeroes on all their specs

So this isn't my hard drive I'm working on so I'm not too sure how it got into this state. My friend had Windows XP on it and wasn't using it much then suddenly it wouldn't boot anymore. He just wants ...
1
vote
0answers
58 views

Recovering data from a UFS drive with bad superblock

I've got a UFS drive that has a bad superblock. I've used mke2fs to find the alternate superblocks. The drive has a zfs_member on it named "james". How can I mount the drive with the alternate ...
0
votes
0answers
14 views

Data recovery best approach [duplicate]

My computer is in the process of being dual-booted windows 8.1/Arch. I have two drives: a 120GB SSD and a 2TB HDD. I also have the SSD reserved strictly for Windows, (because of recent mistakes made ...
0
votes
0answers
35 views

testdisk foremost dd photorec after math help needed

Did i ask this question in the wrong place the first time? http://superuser.com/questions/957845/how-can-i-efficiently-view-validate-delete-1m-files-from-data-recovery I made such a long post about ...
6
votes
2answers
109 views

Recovering ext4 superblock

I had an ext4 filesystem in an LV which got destroyed because I accidentally shrunk the partition it was in way too small. After expanding the partition back to the original size I put a new ext4 FS ...
3
votes
2answers
260 views

LVM Filesystem recovery

I was trying to resize my LUKS crypt following this https://wiki.archlinux.org/index.php/Resizing_LVM-on-LUKS and I got to the partition resize with parted and seriously screwed things up. I typed 870 ...
2
votes
2answers
213 views

Best way to grep big binary file?

What is the fastest way to grep 400gb binary file? I need one txt file from hdd dump and i know some strings from it and want to find this file in dump. I tried to use grep -a -C 10 searchstring but ...
-2
votes
1answer
101 views

Undo a mass rename of files in a directory?

So I tried to use this script to get rid of a username in a bunch of files #!/bin/bash ls | while read -r FILE do mv -v "$FILE" `echo $FILE | tr '[DarkDream]' '.' ` done Instead, all of the ...
0
votes
0answers
27 views

Need help retrieving FAT32 partition from an unallocated portion of an external HD

I was going to create a liveusb out of my external HD, as indicated in the archwiki, using the dd command, except I didn't know what the result of the command would be. I then realized that it ...
0
votes
0answers
149 views

ddrescue recovering 0B but drive appears in device manager. Is it failing to connect?

I guess that this is a variant on a previous question "Is this ddrescue command doing anything?" Apologies for going over similar ground. I have a failing 2TB Seagate Barracuda drive which came from ...
10
votes
4answers
2k views

what does star in passwd file mean?

I have a computer that I need to boot into, but the passwords seem to be bogus. Additionally i cant mount the drive for writing, and it is a mips processor, so I cant stick it in another machine to ...
2
votes
1answer
70 views

SSD failiure. grub rescue sees files, but I can't mount drives

I have a 2 year old SSD that apparently has died. 2 out of the 3 partitions are completely unmountable (only EFI boot partition mountable). When i turn on my computer I am greeted with grub rescue ...
1
vote
0answers
94 views

Recovering files with directory structure

EDIT: I am using Debian 8.1.0 So I somehow deleted my /etc directory. While I have not been able to recover the complete /etc directory hierarchy with all files, I have received different parts from ...
0
votes
0answers
56 views

ext4: How to save free blocks / inodes to a file

I'd like to save all free blocks / inodes from an ext4 file system to one or more files for further analysis and file recovery. It would be good to create one file for every contiguous set of free ...
-2
votes
1answer
132 views

How to know under what filesystem /etc comes?

I have accidentally deleted some important files of ldap server. Now I am trying to recover all these files. I tried this post and ran these commands: # mount /dev/mapper/VolGroup00-LogVol00 on / ...
0
votes
1answer
82 views

Help installing in Lubuntu?

I'm fairly new to Linux and don't know how to get the data recovery softwares as they're not in the Lubuntu Software Center nor Synaptic Package Manager. Recuva Diskdigger Testdisk R-Linux
1
vote
1answer
29 views

To recover OSX data in Debian

I have had taken backups by TimeMachine and now my Macbook Air 2013-mid finally died so I have to rescue files in Debian 8.1. However, it seems that no backups of so directories have been taken. I ...