Questions about recovering data. Includes data loss due to hardware failure, software failure, and user or administrator failure (accidental delete). Please also add tags for the specific things involved, such as /raid, /ext4, /hard-disk, /rm, etc.

learn more… | top users | synonyms

6
votes
3answers
24k views

How to mount/recover data on a disk that was part of a mdadm raid 1 on another machine?

Some background The disk itself was "worked on" by a friend and is said to be still intact, undamaged and still mountable/recoverable The disk was part of a software raid 1 on Ubuntu 12.04 The other ...
1
vote
0answers
31 views

Recover files from ext3 formatted external hard drive [duplicate]

Possible Duplicate: Recovering deleted files on fedora I have an external hard drive that I had been using to store some photographs, but I accidentally installed Lubuntu on it. I'd like to ...
16
votes
3answers
1k views

Securely delete files on btrfs filesystem

Sometimes, there's the need to delete a file in a filesystem, and make sure that the file is truly gone. A file that contains sensitive passwords, for example, should be throughly wiped from the disk. ...
2
votes
1answer
375 views

How can I access a deleted open file on Linux (output of a running crontab task)?

I have an hourly hour-long crontab job running with some mtr (traceroute) output every 10 minutes (that is going to go for over an hour prior to it being emailed back to me), and I want to see the ...
1
vote
1answer
1k views

recover corrupted directory from ext3 partition

It's my mounted directory that I want to restore folder ostani. It contains many PHP, CSS, Javascript, etc. files. How can I access it? I use dd_rhelper to create an image and tried to fsck to repair ...
3
votes
2answers
474 views

ddrescue: reread only good sectors?

Before imaging the corrupted filesystem to a file on another hard drive, I decided to dry-run ddrescue (throwing rescued output to /dev/null) just to see how much data is unreadable: # ddrescue -d -b ...
1
vote
3answers
117 views

Bad sector on a directory

I've a bad sector on my /home/xyz which make a folder with 10 GB data unreadable. As far as I can see in syslog there's only one badsector with may destruct 4K of data while I have no access to 10 GB ...
0
votes
2answers
2k views

How to find last deleted files on OpenSuse?

I didn't lock the screen on my OpenSuse Linux and let my girlfriend do all evil things when I was sleeping. Is there a way to find out if she deleted any files from my PC? I was looking at the "Date ...
4
votes
1answer
2k views

recovering deleted file held open by apache?

suppose an apache log file gets deleted but its held open by apache then this is what i am doing. pid=$(lsof | grep text.txt | awk '/deleted/ {print $2}') fd=$(lsof | grep text.txt | awk '/deleted/ ...
2
votes
0answers
98 views

SafeCopy worked but I have a few problems

I had a 60G NTFS drive that had 28 physically bad blocks as reported by GParted. I used SafeCopy to recover to the root of an empty 500G drive using SafeCopy defaults. Everything worked as expected ...
3
votes
2answers
563 views

extundelete does not finish its work

I need to restore a file on sda7 so I remounted ro und startet extundelete manuel@P5KC:~/recovery/RECOVERED_FILES$ sudo extundelete --restore-all /dev/sda7 WARNING: Extended attributes are not ...
2
votes
2answers
726 views

What tools can I use to recover files from an old harddrive?

I found an old hard drive of mine yesterday and found that it fits into my current laptop. When I started it up, however, it got to the Win XP loading screen and then restarted. Then I thought, if I ...
3
votes
3answers
625 views

How to make data-recovery very-very hard or impossible for Unix -computer before reselling?

I resell my Thinkpad and I want to make sure its old content in the harddrive is not readable. The Thinkpad has now Debian -installed but I sell it as-is so no OS needed. How can I can rewrite the ...
0
votes
1answer
177 views

Data Recovery programs in Unix?

I did not expect to miss Windows when I changed it to Debian here. Now I need to get the installation-media back. By which tool can I get the installation media back in Unix? I use Debian.
2
votes
0answers
672 views

Bad superblock after server crash

My server (CentOS 6) crashed, and it now kernel panics on boot. It's currently using a mdadm RAID1 array with two 1TB drives. vg_server2422-LogVol01 is / vg_server2422-LogVol00 is Swap ...
0
votes
1answer
550 views

Recover files on unmounted partition

I have 2 partitions on my macbook, but I can't mount one of them. When I run the disk utility, the console (show details area) returns the message: Updating boot support partitions for the volume as ...
0
votes
1answer
461 views

how to restore a logical partition to it's original ext4 format

This question is following Unable to mount /home/ partition after reinstalling grub after reinstalling windows 7 where the diagnostic was that installing windows 7 deleted my /home partion, lovingly ...
3
votes
2answers
7k views

Undo rm -r, restore data

I was playing around with zip and accidentally deleted my /home/ folder (I wanted to delete home/ which got created by unzipping an archive). I used rm -r /home/instead of rm -r home/ as root. Is ...
0
votes
0answers
478 views

I ran rm -rf. Need to recover files [duplicate]

Possible Duplicate: How to recover a file just deleted How to undelete/restore the deleted files in ubuntu linux I ran $rm -rf on a machine by mistake. But it wasn't as a super-user, so ...
4
votes
2answers
8k views

Recovered deleted files on Mac by command line

I accidentally deleted a file by running: rm -rf ./Desktop/myScript.sh I think it's possible to recover the file, because the rm command removes temporarily. How can I recover the deleted file on ...
1
vote
0answers
458 views

Partition wiped out possibly due to the partition table changed by Windows, malicious software, or …?

When the data loss problem occurred: My Lenovo laptop has both Windows 7 and Ubuntu 12.04. There are two ntfs partitions shared between the two OSes: one for Windows 7 installation ,and the other for ...
2
votes
1answer
141 views

How to run a command against all the files of particular types on a filesystem?

I've just recovered tons of files (distributed in a complex directory structure, having very long names, using Unicode symbols, spaces etc in names) from a damaged hard drive. Now I'd like to verify ...
3
votes
1answer
4k views

recovering ext4 partition after dd'ing over start of HD

I accidentally used dd and wrote over the first 208MB of my external disk. What I wrote over is a partition on its own (Debian nestinstaller) so what I see now is not my old (now damaged) ext4 ...
4
votes
1answer
2k views

How to decrypt single EncFS encrypted files?

Is it possible to decrypt single EncFS encrypted files with access to .encfs6.xml configuration file and without the proper directory structure it was created? With a little help from google I found ...
4
votes
4answers
2k views

Recovering overwritten LVM metadata

Yesterday I was trying using the Debian install in rescue mode in order to fix my Grub (The menu-item for Debian was suddenly gone). Now I wasn't able to fix it and didn't have a lot of time, so I ...
2
votes
2answers
1k views

I ran fdisk on a wrong drive. How can I recover

I ran fdisk on the wrong HD. I basically cleared partition table, pressed w and quited fdisk and only then realized that that was my main harddrive... I got this message: WARNING: Re-reading ...
2
votes
1answer
307 views

Can Safecopy Help Me Recover Data from a Drive that I can not Mount?

I have an old hard drive that I put data on, but it died when I tried to retrieve it, and it tells me I have to format it under Windows. Running on Linux now, can Safecopy help me even though I can ...
1
vote
1answer
318 views

mount failed to process probably corrupted CD

I wanted to check a CD from my drawer. I inserted it into my drive and issued mount. I got mount: block device /dev/sr0 is write-protected, mounting read-only mount command did not exit. I checked ...
5
votes
1answer
5k views

How to recover most recently deleted directories on NTFS partition

In Nautilus under Ubuntu 12.04, I accidentally selected several directories on a partition and deleted them at once (unfortunately, I deleted them by Shift+Delete such that they don't remain in ...
8
votes
3answers
2k views

File is mysteriously empty. Options to recover?

I have seen several posts about recovering deleted files, but this situation is different. My wife had a file called Journal.odt in which she kept a lot of important personal information such as ...
8
votes
2answers
4k views

Advanced NTFS partition file recovery techniques for damaged drives (IO errors)?

I've recently suffered a maddeningly small but quite important amount of damage to a hard drive on a ESXi host affecting a couple VMs. There's a file that I would very much like to recover, and of ...
3
votes
1answer
235 views

Commands to access a SATA drive

I've damaged the drive I had in my Windows laptop and now I want to try to recover as many files as possible. I know very little about Linux though. I have Ubuntu 10.04 on another machine. I have a ...
4
votes
1answer
3k views

Recover a reiserfs hard disk

I'm unable to mount my 300GB external (in external enclosure) HDD's single partition. None of the fsck tools add anything, they cannot even recognize the partition. I had forgotten whether I had used ...
3
votes
1answer
342 views

Busybox NAS appliance

I have a NAS appliance that crashed last weekend. The IT guys apparently / maybe didn't recover it in the right way? There's about 50,000 directories in a "lost+found" directory each with a numeric ...
1
vote
2answers
2k views

I reset my password and now I can login, but without nautilus or program menu

I recently powered on some old notebook with Linux Mint 11 (Katya) installed, and I thought I remembered my user password, but turns out I didn't. So I reset that password using the instructions here. ...
2
votes
2answers
985 views

Retrieve deleted files on Linux VM guest

I use Ubuntu on VMware to learn how to use Linux. I used rm on some folders and mistakenly deleted some files from /etc. I have some very important files on it. Is there a way to retrieve that files, ...
1
vote
2answers
2k views

Recover many files using ntfsundelete

I am using the following command to scan for deleted files: sudo ntfsundelete /dev/sda1 -S 400m-20g -p 100 How can I restore the all of the results? I have tried: sudo ntfsundelete /dev/sda1 -u ...
1
vote
3answers
995 views

Accidentally formatted Ubuntu partition to NTFS. Recover?

I accidentally formatted my Ubuntu partition in Windows 7 (quick format). Is there any way to recover the partition and data?
0
votes
1answer
257 views

recover mysql databases after reinstall debian

I've recently reinstalled my Debian server but forgot to backup mysql databases which were in folder /var/lib/mysql. I need to recover them and tried to use PhotoRec but I can't find the mysql ...
7
votes
3answers
561 views

Best file system for removable media

Recently I had a SD card destroyed ( software wise ) on me. Basically as well as I can figure it out, all the metadata was wiped (ext4 card). This happened when I was working and suddenly had to write ...
8
votes
1answer
5k views

How to check/test .tar.bz archives?

I've been using tar with its "--use-compress-prog=pbzip2" function to archive my files then compress them with pbzip2 to get an "*.tar.bz" archive. Afterwards I checked the resulting file with ...
2
votes
2answers
224 views

Is there a way to undo the 'cpp' command in terminal?

I accidentally typed cpp Scriptname.py DestinationDirectory, intending to copy the Python script into the folder. I realized afterward that I should have used cp, but now my Python script is ...
4
votes
2answers
3k views

Salvage files from ext3 filesystem with physical errors

I have a disk from a crashed Linux laptop with files on it that the unhappy owner would like to have back if at all possible (no backup solutions please). I have not had anything to do with it ...
4
votes
1answer
669 views

Restoring an open file

I have an interesting problem which may or may not have a solution but I'd love to have one if possible: On Solaris an open log file has been removed, which still continues to be populated while the ...
5
votes
2answers
3k views

Accidentally deleted the partitions on my boot disk. The system is still running. How can I recover?

I just accidentally scrubbed all the partitions from the wrong disk. /dev/sda is the boot disk, and /dev/sdb is a new disk I am trying to set up as a RAID mirror. I accidentally fat-fingered it, ...
6
votes
1answer
758 views

How are files laid out in ext2/ext3/ext4?

A few days ago all my metadata on a ext4 format flash card was overwritten. I am now going to speculate on how this happened. This is pure speculation. It happened just after I used a different ...
2
votes
1answer
150 views

dag.repo overwritten

I accidentally overwrote dag.repo by trying to add this [dag] name=DAG RPM Repository baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag gpgcheck=1 enabled=1 does anyone have the ...
1
vote
1answer
8k views

How to restore a Fat32 filesystem under Linux

Here is what happened: I used the Laptop and accessed some data on my usb stick. Then I closed the Laptop putting the system into sleep mode. The USB-Stick was still plugged in. After the laptop was ...
7
votes
5answers
24k views

How to salvage an unreadable usb flash drive

I have a 16GB USB flash drive that somehow got corrupted to the point in which even fdisk -l can't find it (I get a one-line error message saying: "Unable to open /dev/sdc") However, it is being ...
23
votes
4answers
41k views

Recovering ext4 superblocks

Recently, my external hard drive enclosure failed (the hard drive itself powers up in another enclosure). However, as a result, it appears its EXT4 file system is corrupt. The drive has a single ...