Questions about recovering data. Includes data loss due to hardware failure, software failure, and user or administrator failure (accidental delete). Please also add tags for the specific things involved, such as /raid, /ext4, /hard-disk, /rm, etc.

learn more… | top users | synonyms

0
votes
1answer
40 views

How to recover a node/content from a tarfile that's been overwritten

Disclaimer: I'm not very good at writing questions, and mine is a very specific scenario. So I'm just going to jump straight into the situation: I was browsing my filesystem, and somehow managed to ...
0
votes
0answers
51 views

Refind only boots OSX off of Recovery HD

(Apple Partition) - First time Linux User/ First Download (My external) Linux Mint 17.2 Okay, I used a Live USB to download Linux to an external hard drive. On that hard drive is a back up - using ...
-1
votes
3answers
137 views

Check if a plain text contains some bytes of binary data

How to determine in Bash if a file is 100% text file or if it contains some binary data? I'm doing data recovery and this is useful to check if text files recovered (mail messages, SQL dumps, source ...
12
votes
2answers
300 views

Deleted first 512 bytes of disk; how can I recover my data?

I accidentally wrote a 512 bytes binary to the wrong USB disk with dd and the device doesn't show any partitions with fdisk anymore. I thought all the data was gone, but dd if=/dev/sdx | strings ...
1
vote
1answer
94 views

ddrescue image too large

3Tb HDD is corrupt. I tried using ddrescue to create an image and a logfile on another 3TB HDD (only one I had). I got a write error after about 2.7T (actual capacity of the 3TB). Image file and log ...
0
votes
1answer
565 views

File type inode/x-corrupted

My system had an unexpected shutdown. Now when I open the file from pcmanfm or nautilus I get file corrupted error. Strangely the files are accessible just fine if I launch pcmanfmas root user. The ...
0
votes
0answers
165 views

Can't mount my NTFS partition on Windows or Linux

During my formatting, I did some move on my partitions, and the one with all my data to keep can't be mount any more (/dev/sdc1). On Windows 8.1 I got a "You need to format this partition" message. ...
4
votes
1answer
62 views

Ext4: I/O errors on a clean external drive

So I've an external Seagate hard disk that I used to mount on my Mac through Paragon ExtFS. For some unknown reason it stopped to mount on my Mac due to I/O errors - I may have removed the drive ...
0
votes
1answer
21 views

fat32 partition overwritten by Mint image

Was Running Mint 17.1 Two Kingston USB devices attached accidentally written a Mint image the the archive Kingston by the image writer, and lost my fat32 partition with important data collection. ...
1
vote
0answers
43 views

Flash drive fat32 partition overwritten by Linux Mint 17.1 image writer - need to recover [closed]

Ah Yeah...Mint 17.2 image is written onto a Kingston flash drive (8GB) and overwritten a fat32 partition. I can take You to the moon if You tell Me that, those files aren't lost ones. ///the image ...
1
vote
0answers
28 views

Recover file from partition after writing on it

I really did a big mistake. I have a partition sda6 for backup, when writing the iso to a pendrive, instead of typing sdb6, i've typed sda6, is there any way to get back the files
0
votes
0answers
59 views

Can I restore disk after ntfsclone

So I stupidly got the order of arguments the wrong way in my ntfsclone command and ended up writing a blank disk to the disk I primarily use for important data (documents, personal pictures, etc). ...
2
votes
1answer
147 views

I've wiped my partition table using gparted and testdisk did nothing

I've wiped my NTFS partition table using gparted by clicking on "Device->Create Partition Table... and then apply" by accident. In this topic "I've wiped my partition table using gparted, is ...
-1
votes
1answer
57 views

How to recover /etc/sudoers file with vim? [duplicate]

I am trying to recover my /etc/sudoers file in my Chrome OS terminal. I can't access grub, and I don't have root access either. Possibly I need to make a new sudoers file? I already tried that, but it ...
0
votes
0answers
144 views

How do I recover a file with vim?

I am trying to recover my sudoers file. I typed in my Chrome OS terminal vim -r /etc/sudoers After that it gave me the following, Swap files found: Using specified name: 1. .sudoers.swm ...
0
votes
0answers
33 views

Is it possible to recover deleted sudoers file without recovery mode? [duplicate]

I deleted the sudoers file by accident, and I am trying to enter recovery mode, but no matter which flash drive I use, it says 'an unexpected error has occured.' I want to recover it from within the ...
1
vote
0answers
24 views

Recover Track on blanked CD-RW

I am trying to recover files from a probably quick-blanked CD-RW. When analysing the CD with photorec it detects a disk size of 2048B or one sector; other tools see a blank disk. However cdrwtool ...
3
votes
0answers
229 views

BTRFS: too many missing devices, writeable mount is not allowed

Environment $ btrfs --version btrfs-progs v4.2.1 $ uname -a Linux [REDACTED] 4.2.1-040201-generic #201509211431 SMP Mon Sep 21 18:34:44 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux Problem Today the ...
0
votes
1answer
89 views

Data recovery from corrupted Mint 17 partition

I'm facing a strange issue, I will try to give as much details as I can. I already tried lot of things from stackexchange and ubuntuforum and nothing seem to work. My HDD looked like this : /dev/...
1
vote
1answer
47 views

gpart finds partitions but puts zeroes on all their specs

So this isn't my hard drive I'm working on so I'm not too sure how it got into this state. My friend had Windows XP on it and wasn't using it much then suddenly it wouldn't boot anymore. He just wants ...
1
vote
0answers
119 views

Recovering data from a UFS drive with bad superblock

I've got a UFS drive that has a bad superblock. I've used mke2fs to find the alternate superblocks. The drive has a zfs_member on it named "james". How can I mount the drive with the alternate ...
0
votes
0answers
14 views

Data recovery best approach [duplicate]

My computer is in the process of being dual-booted windows 8.1/Arch. I have two drives: a 120GB SSD and a 2TB HDD. I also have the SSD reserved strictly for Windows, (because of recent mistakes made ...
0
votes
0answers
70 views

testdisk foremost dd photorec after math help needed

Did i ask this question in the wrong place the first time? http://superuser.com/questions/957845/how-can-i-efficiently-view-validate-delete-1m-files-from-data-recovery I made such a long post about ...
6
votes
2answers
179 views

Recovering ext4 superblock

I had an ext4 filesystem in an LV which got destroyed because I accidentally shrunk the partition it was in way too small. After expanding the partition back to the original size I put a new ext4 FS ...
3
votes
2answers
480 views

LVM Filesystem recovery

I was trying to resize my LUKS crypt following this https://wiki.archlinux.org/index.php/Resizing_LVM-on-LUKS and I got to the partition resize with parted and seriously screwed things up. I typed 870 ...
2
votes
2answers
538 views

Best way to grep big binary file?

What is the fastest way to grep 400gb binary file? I need one txt file from hdd dump and i know some strings from it and want to find this file in dump. I tried to use grep -a -C 10 searchstring but ...
-2
votes
1answer
114 views

Undo a mass rename of files in a directory?

So I tried to use this script to get rid of a username in a bunch of files #!/bin/bash ls | while read -r FILE do mv -v "$FILE" `echo $FILE | tr '[DarkDream]' '.' ` done Instead, all of the ...
0
votes
0answers
32 views

Need help retrieving FAT32 partition from an unallocated portion of an external HD

I was going to create a liveusb out of my external HD, as indicated in the archwiki, using the dd command, except I didn't know what the result of the command would be. I then realized that it ...
0
votes
0answers
213 views

ddrescue recovering 0B but drive appears in device manager. Is it failing to connect?

I guess that this is a variant on a previous question "Is this ddrescue command doing anything?" Apologies for going over similar ground. I have a failing 2TB Seagate Barracuda drive which came from ...
10
votes
4answers
2k views

what does star in passwd file mean?

I have a computer that I need to boot into, but the passwords seem to be bogus. Additionally i cant mount the drive for writing, and it is a mips processor, so I cant stick it in another machine to ...
2
votes
1answer
115 views

SSD failiure. grub rescue sees files, but I can't mount drives

I have a 2 year old SSD that apparently has died. 2 out of the 3 partitions are completely unmountable (only EFI boot partition mountable). When i turn on my computer I am greeted with grub rescue ...
1
vote
0answers
182 views

Recovering files with directory structure

EDIT: I am using Debian 8.1.0 So I somehow deleted my /etc directory. While I have not been able to recover the complete /etc directory hierarchy with all files, I have received different parts from ...
-2
votes
1answer
246 views

How to know under what filesystem /etc comes?

I have accidentally deleted some important files of ldap server. Now I am trying to recover all these files. I tried this post and ran these commands: # mount /dev/mapper/VolGroup00-LogVol00 on / ...
0
votes
1answer
121 views

Help installing in Lubuntu?

I'm fairly new to Linux and don't know how to get the data recovery softwares as they're not in the Lubuntu Software Center nor Synaptic Package Manager. Recuva Diskdigger Testdisk R-Linux
1
vote
1answer
35 views

To recover OSX data in Debian

I have had taken backups by TimeMachine and now my Macbook Air 2013-mid finally died so I have to rescue files in Debian 8.1. However, it seems that no backups of so directories have been taken. I ...
1
vote
0answers
62 views

How has this arrangement of RAID disks occurred and is it recoverable?

I some months ago set up two RAID arrays for a system under CentOS 7. I was somewhat confused that the device list included two entries for each array, i.e. one had /dev/md126 and /dev/md126p1. The ...
2
votes
1answer
413 views

Recover corrupt tarball

I have a corrupt tarball on my hands. My first attempt at recovery went like this: $ tar --ignore-failed-read --ignore-command-error -xf tarball.tar tar: Skipping to next header tar: Archive contains ...
-1
votes
1answer
2k views

How to recover the deleted file from linux system? [duplicate]

I am using centos7 locally. Mistaken I deleted text file(keystone.conf.disabled) using rm, from /etc/httpd/conf.d directory, How to recover this file. This file is very important to me. Please help me....
12
votes
2answers
2k views

Accidentally deleted /etc/redhat-release file

I accidentally deleted /etc/redhat-release file. How can I restore or create a new one? I have CentOS Linux release 7.0.1406 (Core).
3
votes
1answer
384 views

Problems with partition table on 3tb NTFS drive

I have a 3tb HDD which was formatted with NTFS and put in a USB enclosure. It was used under Windows and Linux, with no problems for a year. Recently it stopped mounting under Linux and Windows, and ...
1
vote
1answer
2k views

“grep: memory exhausted” error on large partition

I was editing a text file with my notes on linux commands when I noticed a big chunk of it was missing (copy without paste, probably). The problem is that I already saved the document. (And this is a ...
0
votes
1answer
893 views

Recover deleted files using foremost

In the foremost manual it says that it can be used to recover files using their headers, footers and data structures. Since file deletion does not actually erase data and data is still there until ...
1
vote
0answers
48 views

How can you recover from disk corruption on a backup drive whilst maintaining all hard links?

So, I have a scenario that is similar to How to copy directories with preserving hardlinks? that I wish to use however I have corruption from the backup hardlink source. My Scenario: 1. I backup my ...
0
votes
1answer
602 views

Extract files from a corrupted .gz file

I tried to compress a directory using tar -zcvf output.gz input_dir. I suppose I should have used a .tgz extension for compressing. How do I untar output.gz? I tried both tar zxvf output.gz, which ...
1
vote
2answers
137 views

Recovering an overwritten file

I accidentally misused the cp command and overwrote one file's contents on an ext4 filesystem. Is there anyway I can recover this old file's contents and possibly its metadata (i.e., last write time, ...
0
votes
1answer
130 views

Volume Group fails to recover

For the last 10 days I've been living a nightmare trying to recover my data. I'm trying to recover VG and mount it to access the data here's what I get [root@]# pvscan Found duplicate PV ...
2
votes
0answers
1k views

Exundelete can't restore the file

I'm trying to restore 2 important tar.gz files I know their directory but extundelete not restoring them although it's giving me the inode number. Loading filesystem metadata ... 2127 groups loaded. ...
2
votes
0answers
73 views

recover lvm formatted partition

I had 2 old drives having LVM installed showing as 1 drive. They were attached by the datacenter to the new server to migrate data but they weren't able to be mounted I tried everything possible until ...
2
votes
1answer
172 views

Data Recovery from a 4-Disk NAS RAID 10

I know there are similar questions to this but none specific to RAID 10 extracted from a NAS, so any help is greatly appreciated. So, basically the NAS is kaput but the drives are ok. Following the ...
3
votes
1answer
229 views

Recover LUKS partition after overwriting first few bytes of LUKS container? System still up!

I have a 1.5 TB partition of data, of which I accidentally overwrote some bytes at the beginning, due to a typo like: ssh somewhere command | dd of=/dev/sda3 // should have used quotes here, dd ...