Questions about recovering data. Includes data loss due to hardware failure, software failure, and user or administrator failure (accidental delete). Please also add tags for the specific things involved, such as /raid, /ext4, /hard-disk, /rm, etc.

learn more… | top users | synonyms

3
votes
4answers
1k views

How do I find the offset of an ext4 filesystem?

I have a failing hard drive that is unable to write or read the first sectors of the disk. It just gives I/O errors and that is all there is. There are other areas on the disk that seem (mostly) fine. ...
3
votes
2answers
192 views

How to recover TrueCrypt datas?

I have 1GB worth of data locked up in an encrypted TrueCrypt volume and I forgot the password to it. Is there any way to recover it?
0
votes
0answers
84 views

photorec couldn't recover last saved file

Yesterday I deleted by mistake the content of current directory which had many c programs. Later I successfully recovered all the files (using command photorec) with one issue. The issue is: for 1 ...
6
votes
2answers
33k views

How to recover files I deleted now by running rm *? [duplicate]

By mistake I ran rm * on the current directory where I created many c program files. I had been working on these since morning. Now I can't take out again the time that I spent since morning on ...
0
votes
1answer
148 views

rm -rf /home/ Recovery [duplicate]

OS :-Suse Linux Enterprise 12.0 File System :- ext3 I hit rm -rf /home/, immediately I did Contol+C so the command got canceled but until that time I lost ~9GB of data from this /home dir. I don't ...
1
vote
1answer
153 views

Recover Files Incorrectly Written to a USB?

I tried to transfer ('cut and paste') about 2gb of files from my system (running Linux Mint 15, KDE 4.2) onto my USB stick (8gb capacity). The notifications manager indicated that the copy was ...
3
votes
1answer
3k views

recovery data from RAID and disk failure (Linux)

Some background A friend of mine was using in his office a NAS Buffalo-LS-WVL with two disks of 1TB each. It seems that the two disks were mounted as raid 1, but, as you will read, probably they have ...
2
votes
1answer
547 views

Tar ignore or fix checksum

I have a archive backup.tar that was created with a nonstandard program a long time ago. I no longer have access to the original program. The archive is Not compressed (gzip). When trying to extract ...
1
vote
1answer
55 views

Restored VG has shifted volumes

I'm recovering a PV on a mdadm RAID 1 with a single VG containing several LVs. The underlying devices have several bad sectors (one just a few, the other really much) and a silly typo made it ...
5
votes
1answer
767 views

Overwritten MBR: Is partial/complete recovery possible?

I have a Sony VIAO laptop setup as dual boot (Ubuntu 12.10/Windows 7). Since I wanted to try Archlinux, I installed VirtualBox in Ubuntu. To create a bootable USB stick (from the ISO image on my hard ...
5
votes
4answers
3k views

I've wiped my partition table using gparted, is there a way to recover my partition?

I've wiped my NTFS (windows) partition table using gparted by clicking on "Device->Create Partition Table... and then apply", is there a way to recover my NTFS partition? I tried using this command ...
2
votes
1answer
161 views

recover partially overwritten tape from tar -c

I have a situation. I was supposed to run tar -x to recover a tar file from a tape but I pressed "c" and forgot to put the tape on readonly. The file was on fsf position 23, but the tape had 27 files. ...
2
votes
4answers
22k views

How to undelete just deleted directory with “rm -R” command?

I deleted an important directory with rm -R command. This is an very populer host data. It was located /var/zpanel/hostdata/ayrintilih After remove ayrintilih directory has gone everything. I tried ...
2
votes
2answers
228 views

How to use -d in ntfsundelete?

As far as I can tell from the manpage of ntfsundelete getting a file back is done with e.g. ntfsundelete /dev/sdb3 -u -m important.txt which would undelete the file in-place. If I don't want ...
1
vote
0answers
631 views

How to recover: Deleted accidently important files [duplicate]

I've accidentally deleted today the /var/www with 2 Joomla-Homepages on it. Is there any possibility to recover all these files? I'm using PhotoRec right know, but the recovered files are named like: ...
0
votes
1answer
253 views

How do I simply recover the only file on an empty disk just deleted? [duplicate]

Usually, the best way to recover a deleted file is to have backups and that, if the backup failed, you should immediately remount the drive read-only. (See this thread: How to recover a file just ...
2
votes
1answer
615 views

Using GPG to decrypt Symantec PGP encrypted files?

Is this possible? I had an old HD encrypted with Symantec PGP. I attempted to decrypt the disk with Symantec's boot time recovery tool. It stalled 18% in, I let it sit for 16 hours, and the machine ...
1
vote
0answers
157 views

SciTE Auto Save Temporary File

I was running an application that seemingly froze the GUI of my Linux distro. After a CtrlAlt Backspace I got back to a terminal and reloaded the GUI. However, even with the below User Options ...
3
votes
1answer
391 views

Can zfs resilvering destroy data with misreported device failures?

I have had a situation where I am moving data into a new zfs raidz pool with four devices, some of them virtual to facilitate the migration. The system completely hung in the middle of a device ...
0
votes
1answer
990 views

How can I recover damaged file from overwritten ext4 partition?

My disk, which was previously ext4 has been formatted and Windows has been installed. I want to recover my previous files (family photos, ..) and I tried everything I could find on the internet. I ...
2
votes
0answers
80 views

Accidentally overwrote boot sector of encrypted drive: any way to recover data?

I had one external drive on which I was storing a large quantity of data; the drive is/was encrypted using gnome disk utility. I got a second drive for redundancy and I was preparing to encrypt it. ...
0
votes
1answer
1k views

Not possible to recover or delete file in a ext4 filesystem

How can I fix a message like this (read after a dmesg command)? EXT4-fs error (device hdb1): ext4_lookup: deleted inode referenced: 119197 EXT4-fs error (device hdb1): ext4_free_inode: bit already ...
0
votes
2answers
347 views

Recover Linux ext4 partition formatted to hfs+

I have a Linux partition formatted to ext4 and I accidentally formatted it with Mac OS X Disk Utility to HFS+ (Mac OS X Extended Journaled). I tried to recover it with http://www.r-studio.com/ on ...
5
votes
2answers
483 views

How can I merge two ddrescue images?

I have two ddrescue images created from contiguous recovery attempts of the same media. The two images are the same size but have complementary data: $ od part-one/ddrescue_image --skip-bytes ...
6
votes
3answers
3k views

How to clone a NTFS partition (WinXP) from a damaged disk to a new one?

I'm an Italian Windows programmer. I know almost nothing of Linux, so please be patient if the question is dumb and pardon my bad english. I need to clone a NTFS partition from a damaged, near to die ...
15
votes
7answers
28k views

Unix/Linux undelete/recover deleted files

Is there a command to recover/undelete deleted files by rm? $ rm -rf /path/to/myfile How can I recover myfile? If there is such a tool how can I use it?
3
votes
0answers
293 views

Foremost file naming - Recovery of file names from inodes

I'm hoping this is not a stupid question. (apologies if it is) I have been asked to recover some files from a corrupt Linux partition. The partition data is shot to pieces but i have been able to ...
5
votes
2answers
2k views

Is this ddrescue command doing anything?

In the course of trying to recover data from a failing hard drive, I am running the command ddrescue. The command has been running for 9 days, and I thought from the sound of disk activity that maybe ...
1
vote
1answer
949 views

Recovering files from partition (ext4)

a part of out homework assignment is to recover deleted files from the partition with the ext4 file system. I've tried using the extundelete tool, by following this tutorial. The tool recovered a lot ...
1
vote
6answers
1k views

How to avoid overwriting existing files while using tar command?

The tar command just overwrote my file an hour ago while I was trying to make a tar to backup it. I ran tar zcvf foo.tex foo.bib and after that my tex source file lost. What's worse, this is the ...
1
vote
2answers
318 views

Why is my tar file bigger than its contents?

I have a tar file that I have recreated from two files - xaa, xab (the results of using the split command). The tar file is the size I expect it to be but when I extract it the folder I get is a ...
2
votes
4answers
328 views

USB 500GB external drive mounted with undetermined permissions, missing data

Note: This situation is evolving. Please see the output at the end of this question for the current situation. I'm using Linux Mint 14. Recently, I repartitioned one of my hard drives, and I backed ...
1
vote
1answer
309 views

restore filesystem after fdisk

I split a partition in two with fdisk, but after rebooting I've got partition in FAT filesystem (was ext4). What's can be wrong? And how to fix it or get data from bad partition? I hope this is ...
3
votes
1answer
1k views

mdadm - Accidentally ran “mdadm --create” on an existing raid-1. The superblock is now corrupt and I am unable to recover data. Did I bork my data?

I have /dev/sdb1 and /dev/sdc2 that were previously setup into a RAID-1 with mdadm, but then I reinstalled and lost the old configuration. Out of idiocy, I ran sudo mdadm --create /dev/md0 --level=1 ...
1
vote
5answers
647 views

What rescue disk (rescue CD/DVD) to recover data from failed HDD would you recommend for first time user?

What rescue disk (rescue CD/DVD) would you recommend for an user which unfortunately needs to rescue data from a bad disk (filesystems does not mount when using LiveCD, though fdisk looks O.K.) for a ...
1
vote
1answer
636 views

Getting back rsync's deleted files [duplicate]

I accidentally rsync-ed to a server using the delete attribute when I shouldn't have. Is there any chance of getting the data on the server that rsync removed.. back?
0
votes
3answers
718 views

Rm command recovery for this situation

İn my desktop, i have a dir. called exam, and i wanted to remove it from the console and wrote rm * /exam, and apparently it removed some other files from my desktop. Please tell me that there is a ...
0
votes
3answers
927 views

Accidental chown under / as root

I accidentally run the following command as root chown mike -Rf / backups the point is that I added a space between / and backups my mistake, I stopped the command after 1-2 seconds, how can I recover ...
2
votes
1answer
311 views

Recover Partially Formatted Hard Drive

I'm running Ubuntu 12.04, and recently tried to safely remove my external hard drive using the GUI, but the "Format" button was right next to the "Safely Remove" button. I stopped the format as soon ...
4
votes
2answers
7k views

How do I recover files from a single degraded mdadm raid1 drive? “not enough to start the array”

Given a single raid1 drive in degraded/rebuilding state, can it be force mounted? I'd like to recover all the files before undertaking the dangerous operation of pairing it and rebuilding. As far as ...
2
votes
2answers
6k views

ext3 root filesystems goes read-only with aborted journal even after repairs

Short version: ext3 root filesystem on rackspace (xen) VM detects aborted journal on boot and mounts read-only. I've attempted to repair this from a rescue environment with tune2fs and e2fsck as ...
2
votes
1answer
118 views

View temporary files which exist for milliseconds

I'm trying to debug a program which is not logging the information I need. Fortunately, it does write temporary files which should contain the information. These files are written to a directory like: ...
8
votes
4answers
2k views

What filesystem offers best protection for securing data against corruption due to power loss?

I am running a small uClibc and busybox based embedded system on an x86 device. I am using an initramfs but I also mounting a custom ext3 directory on a compact flash device in IDE mode that I am ...
8
votes
3answers
985 views

How can I recover after Kate crashes?

I use Kate for coding and note-taking. Sometimes it crashes - often when I've got a lot open. Unsaved 'real' documents (eg, ones backed by files, that have been saved at some point) usually have a ...
3
votes
0answers
325 views

Confusion with how to restore corrupt ext3 files if power outage occurs during a file write

I am running a small embedded system. Because the system will never be gracefully shutdown and will just have the power cable unplugged, I am running an initramfs but mounting an ext3 partition on a ...
5
votes
1answer
2k views

How to recover broken/partially deleted git repository

I accidently ran an rm -r on my .git directory. Luckly rm stopped when it got to a write-protected file, but I've still lost several things in my .git. Files I still have: FETCH_HEAD ORIG_HEAD ...
1
vote
0answers
142 views

/home partition recovery

Unhappy with Gnome 3 in Ubuntu I tried Mint 14. Had a backup of my home partition. During the Mint installation I designated my old home partition, and when it booted everything was fine. There ...
9
votes
2answers
2k views

How can I dump the full system memory?

After starting VirtualBox, the computer became sluggish and then hung completely due to OOM. Usually, OOM should be starting killing processes in order to free up some space, but this did not happen ...
5
votes
3answers
4k views

Recovering an ext4 filesystem with corrupt journal

I have a hard drive that seems to have developed some kind of hardware problem in the journal. This prevents the drive from being loaded. Running mount -r -t ext4 /dev/sda5 /mnt/root results in the ...
6
votes
3answers
24k views

How to mount/recover data on a disk that was part of a mdadm raid 1 on another machine?

Some background The disk itself was "worked on" by a friend and is said to be still intact, undamaged and still mountable/recoverable The disk was part of a software raid 1 on Ubuntu 12.04 The other ...