Questions about recovering data. Includes data loss due to hardware failure, software failure, and user or administrator failure (accidental delete). Please also add tags for the specific things involved, such as /raid, /ext4, /hard-disk, /rm, etc.

learn more… | top users | synonyms

1
vote
1answer
21 views

How to clear disk after rm

I deleted a file I meant to shred first. $ rm somefile instead of $ shred somefile $ rm somefile Is there a way to shred a file after 'rm'-ing it?
1
vote
4answers
8k views

Restoring a big partition to a smaller partition with Clonezilla

Some time ago I created a backup of an EXT4 partition with Clonezilla. Now the HDD crashed and I lost some important data. The size of the image of the partition is 50GB. I tried to restore this ...
1
vote
0answers
34 views

Recover overwritten CCTV footage from hard drive

I am trying to recover deleted footage from a DVR. I pulled the hdd(Toshiba DT01ABA100v) from the DVR to look at the data in the drive and run carving tools(foremost and scalpel). My problem is that I ...
0
votes
2answers
34 views

lost folder from /mnt and recovering

I'm running Ubuntu 14.04.2 LTS (GNU/Linux 3.13.0-48-generic x86_64) on Amazon AWS. I had a folder "foo" in the /mnt and after few modification I had to recover to previous backup of the instance . ...
0
votes
1answer
485 views

rm -rf on vhosts directory, what should I do?

I was tired and unfortunately I did: rm -rf * /var/www/vhosts repertory on my CentOS 6.3 running with Parallel Plesk. I lost many websites, but worst: I've lost chroot, default, fs and fs-passwd. ...
55
votes
9answers
222k views

Unix/Linux undelete/recover deleted files

Is there a command to recover/undelete deleted files by rm? $ rm -rf /path/to/myfile How can I recover myfile? If there is such a tool how can I use it?
0
votes
0answers
49 views

Recover Files in Centos

i am changing all wwwroot folder file ownership root to www and all files automatically deleted or missing from /home/wwwroot folder. so if anyone know how to recover that files and why this happening ...
2
votes
1answer
84 views

How can I safely recover deleted data from a USB flash drive?

This event actually took place a few years ago, but I still have the unchanged USB flash drive in my possession. I may be out of luck, but I thought I would ask all you smart people here for your ...
0
votes
1answer
46 views

raid 0 recovery after accidental dd to disk [duplicate]

I have 3 HDD's: /dev/sda and /dev/sdb (2x1TB) both on RAID 0 mode -> /dev/md127, and 4TB /dev/sdc, -> /dev/sdc. Accidentally I ran dd script from https://github.com/tdg5/blog/blob/master/_includes/...
1
vote
1answer
62 views

Recover data after hard drive faliure

A couple of days ago I tried getting an old server of mine up and running. It was working initially, but after updating and rebooting the system a few times the system refused to boot, dying at GRUB ...
0
votes
0answers
19 views

Rescuing data from a 2TB ddrescue image - messed up partitions

I have 2 machines, one is a Windows 10 laptop and a hobbled together NAS running Debian Jessie, with an LVM volume of 1.9TB being shared. I have made a ddrescue image of the drive with all partitions ...
0
votes
1answer
34 views

USB drive kaput!

syslog reports that /sys/devices/pci0000:00/0000:00:14.0/usb2/2-1 has been inserted, neither fsck nor photorec see it. Is there some other means to recover the files on this device?
7
votes
3answers
9k views

Recovering an ext4 filesystem with corrupt journal

I have a hard drive that seems to have developed some kind of hardware problem in the journal. This prevents the drive from being loaded. Running mount -r -t ext4 /dev/sda5 /mnt/root results in the ...
2
votes
4answers
2k views

Restore from lost+found

There was a problem on an EXT4 FS/memorycard and after and fsck all the files were put in the lost+found. Question: how can I restore the old filename/hierarchy from the lost+found? Or it is ...
9
votes
2answers
28k views

Recovered deleted files on Mac by command line

I accidentally deleted a file by running: rm -rf ./Desktop/myScript.sh I think it's possible to recover the file, because the rm command removes temporarily. How can I recover the deleted file on ...
3
votes
3answers
855 views

ddrescue: reread only good sectors?

Before imaging the corrupted filesystem to a file on another hard drive, I decided to dry-run ddrescue (throwing rescued output to /dev/null) just to see how much data is unreadable: # ddrescue -d -b ...
0
votes
1answer
36 views

Recovering a partition after being reallocated

I have two partitions, c and d. Recently, I've decided to install Linux Ubuntu on the machine, and intended to do that on the c drive. It seems however that I messed up something during the ...
3
votes
1answer
2k views

mdadm - Accidentally ran “mdadm --create” on an existing raid-1. The superblock is now corrupt and I am unable to recover data. Did I bork my data?

I have /dev/sdb1 and /dev/sdc2 that were previously setup into a RAID-1 with mdadm, but then I reinstalled and lost the old configuration. Out of idiocy, I ran sudo mdadm --create /dev/md0 --level=1 ...
2
votes
3answers
91 views

Copying file to block device

I have an NTFS formatted USB Hard drive that has my personal files backup. Today I mounted the drive to an Oracle Linux system and copied a regular file using the below command (please see below ...
7
votes
1answer
4k views

recovering deleted file held open by apache?

Suppose an apache log file gets deleted but it's held open by apache; then this is what I am doing: pid=$(lsof | grep text.txt | awk '/deleted/ {print $2}') fd=$(lsof | grep text.txt | awk '/deleted/ ...
1
vote
1answer
79 views

Repair Linux Mint (Cinnamon) after deleteing some files

Alright, so I did a very stupid thing the other day. I was building a python program in pycharm, and I wanted to see what the UI looked like in the terminal. So I tried to run the code, but I didn't ...
3
votes
1answer
152 views

Recover formated ext4 partition with file structure

I'm trying to recover from an accidental format of ext4 1TB HDD. I tried virtually all linux tools (extundelete, ext3grep, ext4magic, testdisk, photorec, and others). Some that worked: testdisk, ...
0
votes
0answers
230 views

Recovering accidentally deleted ext4 partition on DM-0 LVM2 volume spanning across physical drives

I have a setup with some LVM volumes, with following configurations. I accidentally formatted the LV "lvmedia" using the disks program in gnome(I know this was extremely stupid and frustrating) I ...
1
vote
1answer
89 views

Ext4 corrupted and unrecoverable after LVM resizing + power failure

I have a completely standard, single hard drive Fedora 23 desktop. The dual-boot installer set up the Linux partition as LVM, with root, swap and home logical volumes; root and home were both ext4. ...
-3
votes
1answer
32 views

How does ext[n] delete files?

I know that a lot of deleted files can theoretically be recovered, which suggests that "deleting" doesn't actually remove the information. So how do the various extN (e.g. ext4) filesystems delete ...
-5
votes
2answers
81 views

Delete Linux installation from Windows [closed]

I currently have an openSUSE Tumbleweed partition which abjectly refuses to boot the GUI or web-browser. At the moment it just boots to a blank screen with a cursor I can move around and nothing else, ...
2
votes
1answer
32 views

How to undelete only the audio files that might have got deleted earlier?

Today I got upset to see that a few audio files (all under one directory) that were there in my Ubuntu 15.10 system were missing. So, as my system was sometimes used by another person, I suppose it ...
3
votes
3answers
125 views

Recover just deleted scanned pdf without unmounting

I have just deleted a scanned pdf file. I'm trying to recover it with scalpel. The problem is that scalpel will recover many deleted files and names them numerically (e.g. 0001.pdf, 0002.pdf, ... ...
0
votes
1answer
50 views

lvreduce : “No directory, logging in with HOME=/”

I wanted to reduce my home LVM size so I executed the following commands : sudo umount -fl /dev/ubuntu-vg/home lvreduce --size -4G /dev/ubuntu-vg/home As the last command didn't work (apparently ...
0
votes
3answers
250 views

DDRescue taking months but no errors?

'm having a hard time finding others with the same error, and I'm trying to figure out the best path forward. I have a hard drive that was unusably slow, and then stopped booting. The clonezilla ...
1
vote
0answers
279 views

Wrong inode: corrupted f2fs, fsck.f2fs cannot repair

A f2fs partition on my Android phone has recently become corrupted. It will still mount fine; however, I completely lost access to one directory (/data/media/0), which now shows as empty. Yet the disk ...
0
votes
0answers
20 views

Hard disk partition table overwritten -TestDisk recovery

Okay so I'm not %100 if this should be posted here or super user. here's my problem: I've an Ubuntu user for quite some time but had decided to switch over to Mint. While installing I realized I had ...
1
vote
0answers
38 views

Can I repair a HFS+ volume if the files were unreadable after “Easus Recovery Wizard” recovery? Testdisk & Diskutil info below

I have someone else's 1.5TB hard drive (WD Elements) that I would like to repair or recover files from. It has possibly been dropped and was constantly around a lot of loud Techno music. It is the ...
8
votes
5answers
8k views

How to clone a NTFS partition (WinXP) from a damaged disk to a new one?

I'm an Italian Windows programmer. I know almost nothing of Linux, so please be patient if the question is dumb and pardon my bad english. I need to clone a NTFS partition from a damaged, near to die ...
2
votes
4answers
108 views

Recovering data from broken (NTFS) partition

I'm trying to recover data from a Windows (NTFS) disk that became unreadable for some reason. I'm doing this from within a Linux Mint environment. I can see the partitions normally, and I also see ...
1
vote
0answers
32 views

Dictionary attack GPG symmetric encrypted LUKS keyfile

I remember typing in a long phrase for the password. I wrote all the words I could have possibly used into a plain text file, combining the words I know were used in a certain order. I might have ...
-1
votes
1answer
98 views

Retrieve data from “erased” home partition while installing win7

I had a computer with a windows 7 and I installed lubuntu 14.04 on another partition (I think I shrinked the windows NTFS partition first). I installed lubuntu this way: -> NTFS boot -> NTFS ...
4
votes
4answers
5k views

How do I find the offset of an ext4 filesystem?

I have a failing hard drive that is unable to write or read the first sectors of the disk. It just gives I/O errors and that is all there is. There are other areas on the disk that seem (mostly) fine. ...
13
votes
5answers
48k views

How to salvage an unreadable usb flash drive

I have a 16GB USB flash drive that somehow got corrupted to the point in which even fdisk -l can't find it (I get a one-line error message saying: "Unable to open /dev/sdc") However, it is being ...
1
vote
0answers
18 views

Telling ddrescue to verify read data?

I'm having a very strange behavior reading data files from a CD: The data is inconsistent if I do several copies of the same file from the CD. I don't know the reason (there're no read errors ...
29
votes
4answers
85k views

Recovering ext4 superblocks

Recently, my external hard drive enclosure failed (the hard drive itself powers up in another enclosure). However, as a result, it appears its EXT4 file system is corrupt. The drive has a single ...
0
votes
1answer
90 views

recover files if still being used by a process

I have run into a problem where I accidentally erased the contents of a conf file. I am trying to use the cp and tail recovery process that I saw online but it does not appear to be working. The file ...
1
vote
1answer
54 views

Recover files inside a folder which was replaced by an empty one. (openSUSE, Ext4)

Is there a way to restore a folder or better the containing files and folders of the folder which was replaced by a empty one with the same name? FileSystem: Ext4 OS: openSUSE 42.1 If it is ...
-1
votes
2answers
37 views

Can we recover the data which has been truncated [duplicate]

Can we recover the data which has been truncated by >hello.log. Please help.
17
votes
3answers
24k views

Can overwritten files be recovered?

I am not talking about recovering deleted files, but overwritten files. Namely by the following methods: # move mv new_file old_file # copy cp new_file old_file # edit vi existing_file > D > ...
1
vote
1answer
34 views

Hard drive failure at service provider - how to restore/remount data from/on Raid

First I am not a server administrator - and am volunteering to help a non-profit with a crisis. I start from the beginning. The non-profit has a dedicated server contract with 1&1 internet. On ...
1
vote
2answers
107 views

why lsdel in debugfs doesn't work?

I have the partition /dev/sdb1 with file-system ext3 mounted at /mnt/folder. I touch a file in /mnt/folder and remove that file. Then I use debugfs /dev/sdb1 and then enter lsdel, but it says "0 ...
2
votes
2answers
62 views

How to recover multiple files which has been moved into one?

I was trying to rename (mv) few of my files and ran a wrong loop resulting into renaming all the 10 files into one. Now I can see only one file whereas there should have been ten files. How do I ...
4
votes
1answer
53 views

Is there a tool to create a hard link to an unlinked inode?

Assume you have a filename/directory name, whatever, which is hard linked to inode 6400. Alas, the file/directory actually exists (completely intact, and maybe it only lives in a single data block, ...
51
votes
7answers
24k views

Recovering accidentally deleted files

I accidentally deleted a file from my laptop. I'm using Fedora. Is it possible to recover the file?