Questions about recovering data. Includes data loss due to hardware failure, software failure, and user or administrator failure (accidental delete). Please also add tags for the specific things involved, such as /raid, /ext4, /hard-disk, /rm, etc.

learn more… | top users | synonyms

0
votes
2answers
736 views

Restoring a big partition to a smaller partition with Clonezilla

Some time ago I created a backup of an EXT4 partition with Clonezilla. Now the HDD crashed and I lost some important data. The size of the image of the partition is 50GB. I tried to restore this ...
2
votes
0answers
163 views

How to find orphan directory entries in a ext4 disk

This comes from a long story of trying to recovering a TrueCrypt volume from a hardware failure (thanks, WD). I ended up with an unencrypted 3TB image that had the files that I want to recover. ...
0
votes
2answers
58 views

unmount pendrive discarding changes

Is it possible to unmount a (FAT32-formatted) pendrive without committing changes? Use case: easy recovery of accidentally deleted files
0
votes
0answers
65 views

Fixing mount points

I recently install steamOS (a debian fork) and I had to change the mount point on my second hard drive because it was the same as the mount point for steam os "/". Unfortunatly now I cannont access ...
1
vote
1answer
40 views

recovering /home folder from faulty drive

I was going to try ddrescue to recover data from a faulty (beeping) laptop drive and a primary ext4 partition. Reducing the number of reads from the disk should reduce the recovery time and increase ...
0
votes
1answer
161 views

Where does MySQL store its databases on Debian?

Our system crashed and we're trying to recover our data. The disc is fine, but the OS is gone, so I'm trying to get at the actual MySQL database files. Does anybody know where to look for them in a ...
3
votes
3answers
895 views

Recovering data from a damaged hard-drive: the “freezer trick”

I'm currently in the business of recovering data from a damaged---and dying---hard-drive (check this question for background info). The drive was dropped while the system was running; and while ...
0
votes
2answers
49 views

What is the minimum size for the medium used to clone a damaged hard drive?

I'm currently in the business of recovering data from a damaged---and dying---hard-drive (check this question for background info). The damaged hard-drive is 250GB, and I intend to use dd or ddrescue ...
0
votes
1answer
63 views

Unbootable system, uneditable boot options

My distro (Trisquel, a modified version of Ubuntu 12.04) comes with a 3.2.0-38 kernel. I recently reinstalled it, and after installing a bunch of updates I found that boot would hang on the splash ...
4
votes
2answers
7k views

How to repair a corrupted HFS+ partition from a damaged hard-disk?

I have a friend's Mac OS X disk that comes with an HFS+ partition. I am supposed to recover the personal data from this disk, and I'm not yet sure if the filesystem is corrupted or the disk is dying). ...
0
votes
0answers
14 views

Recover deleted Directories in centos [duplicate]

How can we recover deleted directories in CentOS 64 bit. I have tried it with test-disk but unable to update. Can anyone let me know the solution?
4
votes
1answer
86 views

How to know what files got deleted?

I'm working on Ubuntu 13.04. yesterday from a Windows 7 partition, I accidentally deleted many files. I deleted by pressing shift-del. Is there any way to know the name of the files that got ...
2
votes
1answer
60 views

How to recover data lost during aborted local drag and drop?

I have dragged and dropped a large amount of data between two tabs of Thunar (XFCE 4.10) but accidentally clicked cancel during the process. The data have been removed from the source folder and are ...
0
votes
1answer
80 views

e2fsck giving some error

I am playing with LVM and while doing lvreduce. I now get this error: [root@localhost raja]# e2fsck -f /dev/vg1/lvol2 e2fsck 1.41.12 (17-May-2010) e2fsck: Superblock invalid, trying backup blocks... ...
1
vote
2answers
617 views

How to restore my system after reinstalling Ubuntu?

I'm presently having Ubuntu 13.04. I am wishing to change it to the next version by installing the next version i.e. Ubuntu 13.10 using bootable DVD. For that I will 1st download .iso image from ...
1
vote
0answers
35 views

Retrieve spanned archive from raw disk image

When I open the image in a hex editor, there is the header of a PK spanned archive (50 4B 07 08), then 4 more zip files following (50 4B). When copying the values and saving as a zip file, the ...
2
votes
1answer
113 views

Finding modified date and time of file from recovered disk image

Some jpeg files have been recovered from an image file of a floppy disk. Is there a way to get the modified, created and last accessed date and times of those files recovered, i.e. the time and date ...
0
votes
0answers
24 views

Recover directory structure + files [duplicate]

Background: I had a dual boot of Windows + Linux Mint. Mint didn't feel right to me, so I decided to install Ubuntu to replace Mint. I booted from a Ubuntu Live USB and started the installer. The ...
1
vote
2answers
166 views

How do I recover an ext4 volume overwritten by an LVM logical volume?

I was running an Ubuntu desktop. The OS was installed on a SSD. I had two additional drives formatted ext4 and mounted on /storage (1TB) and /storage-bak (1.5TB). I installed Centos over Ubuntu on ...
2
votes
4answers
720 views

How do I find the offset of an ext4 filesystem?

I have a failing hard drive that is unable to write or read the first sectors of the disk. It just gives I/O errors and that is all there is. There are other areas on the disk that seem (mostly) fine. ...
3
votes
2answers
167 views

How to recover TrueCrypt datas?

I have 1GB worth of data locked up in an encrypted TrueCrypt volume and I forgot the password to it. Is there any way to recover it?
0
votes
0answers
72 views

photorec couldn't recover last saved file

Yesterday I deleted by mistake the content of current directory which had many c programs. Later I successfully recovered all the files (using command photorec) with one issue. The issue is: for 1 ...
4
votes
2answers
16k views

How to recover files I deleted now by running rm *? [duplicate]

By mistake I ran rm * on the current directory where I created many c program files. I had been working on these since morning. Now I can't take out again the time that I spent since morning on ...
0
votes
1answer
103 views

rm -rf /home/ Recovery [duplicate]

OS :-Suse Linux Enterprise 12.0 File System :- ext3 I hit rm -rf /home/, immediately I did Contol+C so the command got canceled but until that time I lost ~9GB of data from this /home dir. I don't ...
1
vote
1answer
133 views

Recover Files Incorrectly Written to a USB?

I tried to transfer ('cut and paste') about 2gb of files from my system (running Linux Mint 15, KDE 4.2) onto my USB stick (8gb capacity). The notifications manager indicated that the copy was ...
3
votes
1answer
2k views

recovery data from RAID and disk failure (Linux)

Some background A friend of mine was using in his office a NAS Buffalo-LS-WVL with two disks of 1TB each. It seems that the two disks were mounted as raid 1, but, as you will read, probably they have ...
2
votes
1answer
305 views

Tar ignore or fix checksum

I have a archive backup.tar that was created with a nonstandard program a long time ago. I no longer have access to the original program. The archive is Not compressed (gzip). When trying to extract ...
1
vote
1answer
51 views

Restored VG has shifted volumes

I'm recovering a PV on a mdadm RAID 1 with a single VG containing several LVs. The underlying devices have several bad sectors (one just a few, the other really much) and a silly typo made it ...
5
votes
1answer
535 views

Overwritten MBR: Is partial/complete recovery possible?

I have a Sony VIAO laptop setup as dual boot (Ubuntu 12.10/Windows 7). Since I wanted to try Archlinux, I installed VirtualBox in Ubuntu. To create a bootable USB stick (from the ISO image on my hard ...
4
votes
4answers
1k views

I've wiped my partition table using gparted, is there a way to recover my partition?

I've wiped my NTFS (windows) partition table using gparted by clicking on "Device->Create Partition Table... and then apply", is there a way to recover my NTFS partition? I tried using this command ...
2
votes
1answer
131 views

recover partially overwritten tape from tar -c

I have a situation. I was supposed to run tar -x to recover a tar file from a tape but I pressed "c" and forgot to put the tape on readonly. The file was on fsf position 23, but the tape had 27 files. ...
2
votes
4answers
14k views

How to undelete just deleted directory with “rm -R” command?

I deleted an important directory with rm -R command. This is an very populer host data. It was located /var/zpanel/hostdata/ayrintilih After remove ayrintilih directory has gone everything. I tried ...
2
votes
2answers
164 views

How to use -d in ntfsundelete?

As far as I can tell from the manpage of ntfsundelete getting a file back is done with e.g. ntfsundelete /dev/sdb3 -u -m important.txt which would undelete the file in-place. If I don't want ...
1
vote
0answers
367 views

How to recover: Deleted accidently important files [duplicate]

I've accidentally deleted today the /var/www with 2 Joomla-Homepages on it. Is there any possibility to recover all these files? I'm using PhotoRec right know, but the recovered files are named like: ...
0
votes
1answer
124 views

How do I simply recover the only file on an empty disk just deleted? [duplicate]

Usually, the best way to recover a deleted file is to have backups and that, if the backup failed, you should immediately remount the drive read-only. (See this thread: How to recover a file just ...
2
votes
1answer
431 views

Using GPG to decrypt Symantec PGP encrypted files?

Is this possible? I had an old HD encrypted with Symantec PGP. I attempted to decrypt the disk with Symantec's boot time recovery tool. It stalled 18% in, I let it sit for 16 hours, and the machine ...
1
vote
0answers
134 views

SciTE Auto Save Temporary File

I was running an application that seemingly froze the GUI of my Linux distro. After a CtrlAlt Backspace I got back to a terminal and reloaded the GUI. However, even with the below User Options ...
3
votes
1answer
254 views

Can zfs resilvering destroy data with misreported device failures?

I have had a situation where I am moving data into a new zfs raidz pool with four devices, some of them virtual to facilitate the migration. The system completely hung in the middle of a device ...
0
votes
1answer
842 views

How can I recover damaged file from overwritten ext4 partition?

My disk, which was previously ext4 has been formatted and Windows has been installed. I want to recover my previous files (family photos, ..) and I tried everything I could find on the internet. I ...
2
votes
0answers
74 views

Accidentally overwrote boot sector of encrypted drive: any way to recover data?

I had one external drive on which I was storing a large quantity of data; the drive is/was encrypted using gnome disk utility. I got a second drive for redundancy and I was preparing to encrypt it. ...
0
votes
1answer
722 views

Not possible to recover or delete file in a ext4 filesystem

How can I fix a message like this (read after a dmesg command)? EXT4-fs error (device hdb1): ext4_lookup: deleted inode referenced: 119197 EXT4-fs error (device hdb1): ext4_free_inode: bit already ...
0
votes
2answers
247 views

Recover Linux ext4 partition formatted to hfs+

I have a Linux partition formatted to ext4 and I accidentally formatted it with Mac OS X Disk Utility to HFS+ (Mac OS X Extended Journaled). I tried to recover it with http://www.r-studio.com/ on ...
5
votes
2answers
394 views

How can I merge two ddrescue images?

I have two ddrescue images created from contiguous recovery attempts of the same media. The two images are the same size but have complementary data: $ od part-one/ddrescue_image --skip-bytes ...
6
votes
3answers
2k views

How to clone a NTFS partition (WinXP) from a damaged disk to a new one?

I'm an Italian Windows programmer. I know almost nothing of Linux, so please be patient if the question is dumb and pardon my bad english. I need to clone a NTFS partition from a damaged, near to die ...
5
votes
6answers
8k views

Unix/Linux undelete/recover deleted files

Is there a command to recover/undelete deleted files by rm? $ rm -rf /path/to/myfile How can I recover myfile? If there is such a tool how can I use it?
3
votes
0answers
226 views

Foremost file naming - Recovery of file names from inodes

I'm hoping this is not a stupid question. (apologies if it is) I have been asked to recover some files from a corrupt Linux partition. The partition data is shot to pieces but i have been able to ...
5
votes
1answer
2k views

Is this ddrescue command doing anything?

In the course of trying to recover data from a failing hard drive, I am running the command ddrescue. The command has been running for 9 days, and I thought from the sound of disk activity that maybe ...
1
vote
1answer
764 views

Recovering files from partition (ext4)

a part of out homework assignment is to recover deleted files from the partition with the ext4 file system. I've tried using the extundelete tool, by following this tutorial. The tool recovered a lot ...
1
vote
6answers
784 views

How to avoid overwriting existing files while using tar command?

The tar command just overwrote my file an hour ago while I was trying to make a tar to backup it. I ran tar zcvf foo.tex foo.bib and after that my tex source file lost. What's worse, this is the ...
1
vote
2answers
256 views

Why is my tar file bigger than its contents?

I have a tar file that I have recreated from two files - xaa, xab (the results of using the split command). The tar file is the size I expect it to be but when I extract it the folder I get is a ...