Questions about recovering data. Includes data loss due to hardware failure, software failure, and user or administrator failure (accidental delete). Please also add tags for the specific things involved, such as /raid, /ext4, /hard-disk, /rm, etc.

learn more… | top users | synonyms

2
votes
1answer
496 views

Using GPG to decrypt Symantec PGP encrypted files?

Is this possible? I had an old HD encrypted with Symantec PGP. I attempted to decrypt the disk with Symantec's boot time recovery tool. It stalled 18% in, I let it sit for 16 hours, and the machine ...
1
vote
0answers
147 views

SciTE Auto Save Temporary File

I was running an application that seemingly froze the GUI of my Linux distro. After a CtrlAlt Backspace I got back to a terminal and reloaded the GUI. However, even with the below User Options ...
3
votes
1answer
311 views

Can zfs resilvering destroy data with misreported device failures?

I have had a situation where I am moving data into a new zfs raidz pool with four devices, some of them virtual to facilitate the migration. The system completely hung in the middle of a device ...
0
votes
1answer
927 views

How can I recover damaged file from overwritten ext4 partition?

My disk, which was previously ext4 has been formatted and Windows has been installed. I want to recover my previous files (family photos, ..) and I tried everything I could find on the internet. I ...
2
votes
0answers
78 views

Accidentally overwrote boot sector of encrypted drive: any way to recover data?

I had one external drive on which I was storing a large quantity of data; the drive is/was encrypted using gnome disk utility. I got a second drive for redundancy and I was preparing to encrypt it. ...
0
votes
1answer
876 views

Not possible to recover or delete file in a ext4 filesystem

How can I fix a message like this (read after a dmesg command)? EXT4-fs error (device hdb1): ext4_lookup: deleted inode referenced: 119197 EXT4-fs error (device hdb1): ext4_free_inode: bit already ...
0
votes
2answers
287 views

Recover Linux ext4 partition formatted to hfs+

I have a Linux partition formatted to ext4 and I accidentally formatted it with Mac OS X Disk Utility to HFS+ (Mac OS X Extended Journaled). I tried to recover it with http://www.r-studio.com/ on ...
5
votes
2answers
433 views

How can I merge two ddrescue images?

I have two ddrescue images created from contiguous recovery attempts of the same media. The two images are the same size but have complementary data: $ od part-one/ddrescue_image --skip-bytes ...
6
votes
3answers
2k views

How to clone a NTFS partition (WinXP) from a damaged disk to a new one?

I'm an Italian Windows programmer. I know almost nothing of Linux, so please be patient if the question is dumb and pardon my bad english. I need to clone a NTFS partition from a damaged, near to die ...
10
votes
7answers
15k views

Unix/Linux undelete/recover deleted files

Is there a command to recover/undelete deleted files by rm? $ rm -rf /path/to/myfile How can I recover myfile? If there is such a tool how can I use it?
3
votes
0answers
258 views

Foremost file naming - Recovery of file names from inodes

I'm hoping this is not a stupid question. (apologies if it is) I have been asked to recover some files from a corrupt Linux partition. The partition data is shot to pieces but i have been able to ...
5
votes
2answers
2k views

Is this ddrescue command doing anything?

In the course of trying to recover data from a failing hard drive, I am running the command ddrescue. The command has been running for 9 days, and I thought from the sound of disk activity that maybe ...
1
vote
1answer
863 views

Recovering files from partition (ext4)

a part of out homework assignment is to recover deleted files from the partition with the ext4 file system. I've tried using the extundelete tool, by following this tutorial. The tool recovered a lot ...
1
vote
6answers
948 views

How to avoid overwriting existing files while using tar command?

The tar command just overwrote my file an hour ago while I was trying to make a tar to backup it. I ran tar zcvf foo.tex foo.bib and after that my tex source file lost. What's worse, this is the ...
1
vote
2answers
285 views

Why is my tar file bigger than its contents?

I have a tar file that I have recreated from two files - xaa, xab (the results of using the split command). The tar file is the size I expect it to be but when I extract it the folder I get is a ...
2
votes
4answers
304 views

USB 500GB external drive mounted with undetermined permissions, missing data

Note: This situation is evolving. Please see the output at the end of this question for the current situation. I'm using Linux Mint 14. Recently, I repartitioned one of my hard drives, and I backed ...
1
vote
1answer
273 views

restore filesystem after fdisk

I split a partition in two with fdisk, but after rebooting I've got partition in FAT filesystem (was ext4). What's can be wrong? And how to fix it or get data from bad partition? I hope this is ...
3
votes
1answer
1k views

mdadm - Accidentally ran “mdadm --create” on an existing raid-1. The superblock is now corrupt and I am unable to recover data. Did I bork my data?

I have /dev/sdb1 and /dev/sdc2 that were previously setup into a RAID-1 with mdadm, but then I reinstalled and lost the old configuration. Out of idiocy, I ran sudo mdadm --create /dev/md0 --level=1 ...
1
vote
5answers
579 views

What rescue disk (rescue CD/DVD) to recover data from failed HDD would you recommend for first time user?

What rescue disk (rescue CD/DVD) would you recommend for an user which unfortunately needs to rescue data from a bad disk (filesystems does not mount when using LiveCD, though fdisk looks O.K.) for a ...
1
vote
1answer
523 views

Getting back rsync's deleted files [duplicate]

I accidentally rsync-ed to a server using the delete attribute when I shouldn't have. Is there any chance of getting the data on the server that rsync removed.. back?
0
votes
3answers
625 views

Rm command recovery for this situation

İn my desktop, i have a dir. called exam, and i wanted to remove it from the console and wrote rm * /exam, and apparently it removed some other files from my desktop. Please tell me that there is a ...
0
votes
3answers
782 views

Accidental chown under / as root

I accidentally run the following command as root chown mike -Rf / backups the point is that I added a space between / and backups my mistake, I stopped the command after 1-2 seconds, how can I recover ...
2
votes
1answer
276 views

Recover Partially Formatted Hard Drive

I'm running Ubuntu 12.04, and recently tried to safely remove my external hard drive using the GUI, but the "Format" button was right next to the "Safely Remove" button. I stopped the format as soon ...
4
votes
2answers
6k views

How do I recover files from a single degraded mdadm raid1 drive? “not enough to start the array”

Given a single raid1 drive in degraded/rebuilding state, can it be force mounted? I'd like to recover all the files before undertaking the dangerous operation of pairing it and rebuilding. As far as ...
2
votes
2answers
5k views

ext3 root filesystems goes read-only with aborted journal even after repairs

Short version: ext3 root filesystem on rackspace (xen) VM detects aborted journal on boot and mounts read-only. I've attempted to repair this from a rescue environment with tune2fs and e2fsck as ...
2
votes
1answer
116 views

View temporary files which exist for milliseconds

I'm trying to debug a program which is not logging the information I need. Fortunately, it does write temporary files which should contain the information. These files are written to a directory like: ...
7
votes
3answers
1k views

What filesystem offers best protection for securing data against corruption due to power loss?

I am running a small uClibc and busybox based embedded system on an x86 device. I am using an initramfs but I also mounting a custom ext3 directory on a compact flash device in IDE mode that I am ...
8
votes
3answers
851 views

How can I recover after Kate crashes?

I use Kate for coding and note-taking. Sometimes it crashes - often when I've got a lot open. Unsaved 'real' documents (eg, ones backed by files, that have been saved at some point) usually have a ...
3
votes
0answers
305 views

Confusion with how to restore corrupt ext3 files if power outage occurs during a file write

I am running a small embedded system. Because the system will never be gracefully shutdown and will just have the power cable unplugged, I am running an initramfs but mounting an ext3 partition on a ...
5
votes
1answer
2k views

How to recover broken/partially deleted git repository

I accidently ran an rm -r on my .git directory. Luckly rm stopped when it got to a write-protected file, but I've still lost several things in my .git. Files I still have: FETCH_HEAD ORIG_HEAD ...
1
vote
0answers
124 views

/home partition recovery

Unhappy with Gnome 3 in Ubuntu I tried Mint 14. Had a backup of my home partition. During the Mint installation I designated my old home partition, and when it booted everything was fine. There ...
9
votes
2answers
1k views

How can I dump the full system memory?

After starting VirtualBox, the computer became sluggish and then hung completely due to OOM. Usually, OOM should be starting killing processes in order to free up some space, but this did not happen ...
5
votes
3answers
3k views

Recovering an ext4 filesystem with corrupt journal

I have a hard drive that seems to have developed some kind of hardware problem in the journal. This prevents the drive from being loaded. Running mount -r -t ext4 /dev/sda5 /mnt/root results in the ...
6
votes
3answers
20k views

How to mount/recover data on a disk that was part of a mdadm raid 1 on another machine?

Some background The disk itself was "worked on" by a friend and is said to be still intact, undamaged and still mountable/recoverable The disk was part of a software raid 1 on Ubuntu 12.04 The other ...
1
vote
0answers
31 views

Recover files from ext3 formatted external hard drive [duplicate]

Possible Duplicate: Recovering deleted files on fedora I have an external hard drive that I had been using to store some photographs, but I accidentally installed Lubuntu on it. I'd like to ...
15
votes
3answers
1k views

Securely delete files on btrfs filesystem

Sometimes, there's the need to delete a file in a filesystem, and make sure that the file is truly gone. A file that contains sensitive passwords, for example, should be throughly wiped from the disk. ...
2
votes
1answer
339 views

How can I access a deleted open file on Linux (output of a running crontab task)?

I have an hourly hour-long crontab job running with some mtr (traceroute) output every 10 minutes (that is going to go for over an hour prior to it being emailed back to me), and I want to see the ...
1
vote
1answer
1k views

recover corrupted directory from ext3 partition

It's my mounted directory that I want to restore folder ostani. It contains many PHP, CSS, Javascript, etc. files. How can I access it? I use dd_rhelper to create an image and tried to fsck to repair ...
3
votes
2answers
460 views

ddrescue: reread only good sectors?

Before imaging the corrupted filesystem to a file on another hard drive, I decided to dry-run ddrescue (throwing rescued output to /dev/null) just to see how much data is unreadable: # ddrescue -d -b ...
1
vote
3answers
116 views

Bad sector on a directory

I've a bad sector on my /home/xyz which make a folder with 10 GB data unreadable. As far as I can see in syslog there's only one badsector with may destruct 4K of data while I have no access to 10 GB ...
0
votes
2answers
2k views

How to find last deleted files on OpenSuse?

I didn't lock the screen on my OpenSuse Linux and let my girlfriend do all evil things when I was sleeping. Is there a way to find out if she deleted any files from my PC? I was looking at the "Date ...
4
votes
1answer
1k views

recovering deleted file held open by apache?

suppose an apache log file gets deleted but its held open by apache then this is what i am doing. pid=$(lsof | grep text.txt | awk '/deleted/ {print $2}') fd=$(lsof | grep text.txt | awk '/deleted/ ...
2
votes
0answers
95 views

SafeCopy worked but I have a few problems

I had a 60G NTFS drive that had 28 physically bad blocks as reported by GParted. I used SafeCopy to recover to the root of an empty 500G drive using SafeCopy defaults. Everything worked as expected ...
3
votes
2answers
523 views

extundelete does not finish its work

I need to restore a file on sda7 so I remounted ro und startet extundelete manuel@P5KC:~/recovery/RECOVERED_FILES$ sudo extundelete --restore-all /dev/sda7 WARNING: Extended attributes are not ...
2
votes
2answers
673 views

What tools can I use to recover files from an old harddrive?

I found an old hard drive of mine yesterday and found that it fits into my current laptop. When I started it up, however, it got to the Win XP loading screen and then restarted. Then I thought, if I ...
3
votes
3answers
581 views

How to make data-recovery very-very hard or impossible for Unix -computer before reselling?

I resell my Thinkpad and I want to make sure its old content in the harddrive is not readable. The Thinkpad has now Debian -installed but I sell it as-is so no OS needed. How can I can rewrite the ...
0
votes
1answer
173 views

Data Recovery programs in Unix?

I did not expect to miss Windows when I changed it to Debian here. Now I need to get the installation-media back. By which tool can I get the installation media back in Unix? I use Debian.
2
votes
0answers
619 views

Bad superblock after server crash

My server (CentOS 6) crashed, and it now kernel panics on boot. It's currently using a mdadm RAID1 array with two 1TB drives. vg_server2422-LogVol01 is / vg_server2422-LogVol00 is Swap ...
0
votes
1answer
499 views

Recover files on unmounted partition

I have 2 partitions on my macbook, but I can't mount one of them. When I run the disk utility, the console (show details area) returns the message: Updating boot support partitions for the volume as ...
0
votes
1answer
448 views

how to restore a logical partition to it's original ext4 format

This question is following Unable to mount /home/ partition after reinstalling grub after reinstalling windows 7 where the diagnostic was that installing windows 7 deleted my /home partion, lovingly ...