Questions about recovering data. Includes data loss due to hardware failure, software failure, and user or administrator failure (accidental delete). Please also add tags for the specific things involved, such as /raid, /ext4, /hard-disk, /rm, etc.

learn more… | top users | synonyms

3
votes
1answer
864 views

mdadm - Accidentally ran “mdadm --create” on an existing raid-1. The superblock is now corrupt and I am unable to recover data. Did I bork my data?

I have /dev/sdb1 and /dev/sdc2 that were previously setup into a RAID-1 with mdadm, but then I reinstalled and lost the old configuration. Out of idiocy, I ran sudo mdadm --create /dev/md0 --level=1 ...
1
vote
5answers
508 views

What rescue disk (rescue CD/DVD) to recover data from failed HDD would you recommend for first time user?

What rescue disk (rescue CD/DVD) would you recommend for an user which unfortunately needs to rescue data from a bad disk (filesystems does not mount when using LiveCD, though fdisk looks O.K.) for a ...
1
vote
1answer
410 views

Getting back rsync's deleted files [duplicate]

I accidentally rsync-ed to a server using the delete attribute when I shouldn't have. Is there any chance of getting the data on the server that rsync removed.. back?
0
votes
3answers
540 views

Rm command recovery for this situation

İn my desktop, i have a dir. called exam, and i wanted to remove it from the console and wrote rm * /exam, and apparently it removed some other files from my desktop. Please tell me that there is a ...
0
votes
3answers
664 views

Accidental chown under / as root

I accidentally run the following command as root chown mike -Rf / backups the point is that I added a space between / and backups my mistake, I stopped the command after 1-2 seconds, how can I recover ...
2
votes
1answer
245 views

Recover Partially Formatted Hard Drive

I'm running Ubuntu 12.04, and recently tried to safely remove my external hard drive using the GUI, but the "Format" button was right next to the "Safely Remove" button. I stopped the format as soon ...
4
votes
2answers
5k views

How do I recover files from a single degraded mdadm raid1 drive? “not enough to start the array”

Given a single raid1 drive in degraded/rebuilding state, can it be force mounted? I'd like to recover all the files before undertaking the dangerous operation of pairing it and rebuilding. As far as ...
1
vote
2answers
5k views

ext3 root filesystems goes read-only with aborted journal even after repairs

Short version: ext3 root filesystem on rackspace (xen) VM detects aborted journal on boot and mounts read-only. I've attempted to repair this from a rescue environment with tune2fs and e2fsck as ...
2
votes
1answer
115 views

View temporary files which exist for milliseconds

I'm trying to debug a program which is not logging the information I need. Fortunately, it does write temporary files which should contain the information. These files are written to a directory like: ...
7
votes
3answers
1k views

What filesystem offers best protection for securing data against corruption due to power loss?

I am running a small uClibc and busybox based embedded system on an x86 device. I am using an initramfs but I also mounting a custom ext3 directory on a compact flash device in IDE mode that I am ...
8
votes
3answers
744 views

How can I recover after Kate crashes?

I use Kate for coding and note-taking. Sometimes it crashes - often when I've got a lot open. Unsaved 'real' documents (eg, ones backed by files, that have been saved at some point) usually have a ...
3
votes
0answers
282 views

Confusion with how to restore corrupt ext3 files if power outage occurs during a file write

I am running a small embedded system. Because the system will never be gracefully shutdown and will just have the power cable unplugged, I am running an initramfs but mounting an ext3 partition on a ...
5
votes
1answer
1k views

How to recover broken/partially deleted git repository

I accidently ran an rm -r on my .git directory. Luckly rm stopped when it got to a write-protected file, but I've still lost several things in my .git. Files I still have: FETCH_HEAD ORIG_HEAD ...
1
vote
0answers
118 views

/home partition recovery

Unhappy with Gnome 3 in Ubuntu I tried Mint 14. Had a backup of my home partition. During the Mint installation I designated my old home partition, and when it booted everything was fine. There ...
9
votes
2answers
1k views

How can I dump the full system memory?

After starting VirtualBox, the computer became sluggish and then hung completely due to OOM. Usually, OOM should be starting killing processes in order to free up some space, but this did not happen ...
5
votes
3answers
3k views

Recovering an ext4 filesystem with corrupt journal

I have a hard drive that seems to have developed some kind of hardware problem in the journal. This prevents the drive from being loaded. Running mount -r -t ext4 /dev/sda5 /mnt/root results in the ...
6
votes
3answers
17k views

How to mount/recover data on a disk that was part of a mdadm raid 1 on another machine?

Some background The disk itself was "worked on" by a friend and is said to be still intact, undamaged and still mountable/recoverable The disk was part of a software raid 1 on Ubuntu 12.04 The other ...
1
vote
0answers
31 views

Recover files from ext3 formatted external hard drive [duplicate]

Possible Duplicate: Recovering deleted files on fedora I have an external hard drive that I had been using to store some photographs, but I accidentally installed Lubuntu on it. I'd like to ...
14
votes
3answers
1k views

Securely delete files on btrfs filesystem

Sometimes, there's the need to delete a file in a filesystem, and make sure that the file is truly gone. A file that contains sensitive passwords, for example, should be throughly wiped from the disk. ...
2
votes
1answer
312 views

How can I access a deleted open file on Linux (output of a running crontab task)?

I have an hourly hour-long crontab job running with some mtr (traceroute) output every 10 minutes (that is going to go for over an hour prior to it being emailed back to me), and I want to see the ...
1
vote
1answer
1k views

recover corrupted directory from ext3 partition

It's my mounted directory that I want to restore folder ostani. It contains many PHP, CSS, Javascript, etc. files. How can I access it? I use dd_rhelper to create an image and tried to fsck to repair ...
3
votes
2answers
436 views

ddrescue: reread only good sectors?

Before imaging the corrupted filesystem to a file on another hard drive, I decided to dry-run ddrescue (throwing rescued output to /dev/null) just to see how much data is unreadable: # ddrescue -d -b ...
1
vote
3answers
114 views

Bad sector on a directory

I've a bad sector on my /home/xyz which make a folder with 10 GB data unreadable. As far as I can see in syslog there's only one badsector with may destruct 4K of data while I have no access to 10 GB ...
0
votes
2answers
2k views

How to find last deleted files on OpenSuse?

I didn't lock the screen on my OpenSuse Linux and let my girlfriend do all evil things when I was sleeping. Is there a way to find out if she deleted any files from my PC? I was looking at the "Date ...
4
votes
1answer
1k views

recovering deleted file held open by apache?

suppose an apache log file gets deleted but its held open by apache then this is what i am doing. pid=$(lsof | grep text.txt | awk '/deleted/ {print $2}') fd=$(lsof | grep text.txt | awk '/deleted/ ...
2
votes
0answers
93 views

SafeCopy worked but I have a few problems

I had a 60G NTFS drive that had 28 physically bad blocks as reported by GParted. I used SafeCopy to recover to the root of an empty 500G drive using SafeCopy defaults. Everything worked as expected ...
3
votes
2answers
474 views

extundelete does not finish its work

I need to restore a file on sda7 so I remounted ro und startet extundelete manuel@P5KC:~/recovery/RECOVERED_FILES$ sudo extundelete --restore-all /dev/sda7 WARNING: Extended attributes are not ...
2
votes
2answers
621 views

What tools can I use to recover files from an old harddrive?

I found an old hard drive of mine yesterday and found that it fits into my current laptop. When I started it up, however, it got to the Win XP loading screen and then restarted. Then I thought, if I ...
3
votes
3answers
529 views

How to make data-recovery very-very hard or impossible for Unix -computer before reselling?

I resell my Thinkpad and I want to make sure its old content in the harddrive is not readable. The Thinkpad has now Debian -installed but I sell it as-is so no OS needed. How can I can rewrite the ...
0
votes
1answer
168 views

Data Recovery programs in Unix?

I did not expect to miss Windows when I changed it to Debian here. Now I need to get the installation-media back. By which tool can I get the installation media back in Unix? I use Debian.
2
votes
0answers
560 views

Bad superblock after server crash

My server (CentOS 6) crashed, and it now kernel panics on boot. It's currently using a mdadm RAID1 array with two 1TB drives. vg_server2422-LogVol01 is / vg_server2422-LogVol00 is Swap ...
0
votes
1answer
444 views

Recover files on unmounted partition

I have 2 partitions on my macbook, but I can't mount one of them. When I run the disk utility, the console (show details area) returns the message: Updating boot support partitions for the volume as ...
0
votes
1answer
424 views

how to restore a logical partition to it's original ext4 format

This question is following Unable to mount /home/ partition after reinstalling grub after reinstalling windows 7 where the diagnostic was that installing windows 7 deleted my /home partion, lovingly ...
3
votes
2answers
4k views

Undo rm -r, restore data

I was playing around with zip and accidentally deleted my /home/ folder (I wanted to delete home/ which got created by unzipping an archive). I used rm -r /home/instead of rm -r home/ as root. Is ...
0
votes
0answers
381 views

I ran rm -rf. Need to recover files [duplicate]

Possible Duplicate: How to recover a file just deleted How to undelete/restore the deleted files in ubuntu linux I ran $rm -rf on a machine by mistake. But it wasn't as a super-user, so ...
4
votes
2answers
5k views

Recovered deleted files on Mac by command line

I accidentally deleted a file by running: rm -rf ./Desktop/myScript.sh I think it's possible to recover the file, because the rm command removes temporarily. How can I recover the deleted file on ...
1
vote
0answers
429 views

Partition wiped out possibly due to the partition table changed by Windows, malicious software, or …?

When the data loss problem occurred: My Lenovo laptop has both Windows 7 and Ubuntu 12.04. There are two ntfs partitions shared between the two OSes: one for Windows 7 installation ,and the other for ...
2
votes
1answer
130 views

How to run a command against all the files of particular types on a filesystem?

I've just recovered tons of files (distributed in a complex directory structure, having very long names, using Unicode symbols, spaces etc in names) from a damaged hard drive. Now I'd like to verify ...
3
votes
1answer
3k views

recovering ext4 partition after dd'ing over start of HD

I accidentally used dd and wrote over the first 208MB of my external disk. What I wrote over is a partition on its own (Debian nestinstaller) so what I see now is not my old (now damaged) ext4 ...
4
votes
1answer
2k views

How to decrypt single EncFS encrypted files?

Is it possible to decrypt single EncFS encrypted files with access to .encfs6.xml configuration file and without the proper directory structure it was created? With a little help from google I found ...
4
votes
4answers
2k views

Recovering overwritten LVM metadata

Yesterday I was trying using the Debian install in rescue mode in order to fix my Grub (The menu-item for Debian was suddenly gone). Now I wasn't able to fix it and didn't have a lot of time, so I ...
2
votes
2answers
1k views

I ran fdisk on a wrong drive. How can I recover

I ran fdisk on the wrong HD. I basically cleared partition table, pressed w and quited fdisk and only then realized that that was my main harddrive... I got this message: WARNING: Re-reading ...
2
votes
1answer
285 views

Can Safecopy Help Me Recover Data from a Drive that I can not Mount?

I have an old hard drive that I put data on, but it died when I tried to retrieve it, and it tells me I have to format it under Windows. Running on Linux now, can Safecopy help me even though I can ...
1
vote
1answer
295 views

mount failed to process probably corrupted CD

I wanted to check a CD from my drawer. I inserted it into my drive and issued mount. I got mount: block device /dev/sr0 is write-protected, mounting read-only mount command did not exit. I checked ...
5
votes
1answer
4k views

How to recover most recently deleted directories on NTFS partition

In Nautilus under Ubuntu 12.04, I accidentally selected several directories on a partition and deleted them at once (unfortunately, I deleted them by Shift+Delete such that they don't remain in ...
8
votes
3answers
2k views

File is mysteriously empty. Options to recover?

I have seen several posts about recovering deleted files, but this situation is different. My wife had a file called Journal.odt in which she kept a lot of important personal information such as ...
8
votes
2answers
3k views

Advanced NTFS partition file recovery techniques for damaged drives (IO errors)?

I've recently suffered a maddeningly small but quite important amount of damage to a hard drive on a ESXi host affecting a couple VMs. There's a file that I would very much like to recover, and of ...
3
votes
1answer
215 views

Commands to access a SATA drive

I've damaged the drive I had in my Windows laptop and now I want to try to recover as many files as possible. I know very little about Linux though. I have Ubuntu 10.04 on another machine. I have a ...
4
votes
1answer
2k views

Recover a reiserfs hard disk

I'm unable to mount my 300GB external (in external enclosure) HDD's single partition. None of the fsck tools add anything, they cannot even recognize the partition. I had forgotten whether I had used ...
3
votes
1answer
310 views

Busybox NAS appliance

I have a NAS appliance that crashed last weekend. The IT guys apparently / maybe didn't recover it in the right way? There's about 50,000 directories in a "lost+found" directory each with a numeric ...