Questions about recovering data. Includes data loss due to hardware failure, software failure, and user or administrator failure (accidental delete). Please also add tags for the specific things involved, such as /raid, /ext4, /hard-disk, /rm, etc.

learn more… | top users | synonyms

0
votes
1answer
40 views

Hard disk power cable possibly slipped out during copying - now directories empty, error shows “dir: cannot access .: input/output error”

I am pretty sure the powercable to one of my harddisks fell out during copying. The result was two personal backup directories are now empty, but still extant, while the rest of the directories are ...
2
votes
2answers
32 views

Inspecting vi .swp file to preview recovery

Feel free to close this as a dupe if you can find a question that deals with this case. This is NOT about HOW to recover a .swp file in vi. I'm not sure if I want to recover. I want to preview what ...
40
votes
9answers
157k views

Unix/Linux undelete/recover deleted files

Is there a command to recover/undelete deleted files by rm? $ rm -rf /path/to/myfile How can I recover myfile? If there is such a tool how can I use it?
26
votes
4answers
73k views

Recovering ext4 superblocks

Recently, my external hard drive enclosure failed (the hard drive itself powers up in another enclosure). However, as a result, it appears its EXT4 file system is corrupt. The drive has a single ...
0
votes
1answer
27 views

How to issue a tar command when you restore your system

I've recently created a tarball backup of my Ubuntu system (/ and /home partitions both ext4). When I was creating a backup I booted off Live DVD and I used a tar command. Now I wonder which would be ...
1
vote
4answers
7k views

Restoring a big partition to a smaller partition with Clonezilla

Some time ago I created a backup of an EXT4 partition with Clonezilla. Now the HDD crashed and I lost some important data. The size of the image of the partition is 50GB. I tried to restore this ...
0
votes
1answer
8 views

why lsdel in debugfs doesn't work?

I have a partition (/dev/sdb1) with filesystem (ext3) and mounted in (/mnt/folder). I touch a file in /mnt/folder and remove that file. now i use (debugfs /dev/sdb1) and then I type ( lsdel ). but it ...
7
votes
3answers
21k views

Recovered deleted files on Mac by command line

I accidentally deleted a file by running: rm -rf ./Desktop/myScript.sh I think it's possible to recover the file, because the rm command removes temporarily. How can I recover the deleted file on ...
-1
votes
2answers
2k views

How to recover NTFS drive formatted in ext4?

I just installed Linux Mint 17 and when it asked me where to install it I selected the option to overwrite the old Mint 14. Previously I had also windows with NTFS partition of 900GB. Not it is all ...
0
votes
1answer
26 views

What format gives photorec to files?

I have to recover a file from my usb. I didn't find it on the net. How does photorec call files of unknown format? For instance, I have a file named *.jks . How can I find it in the recovered ...
3
votes
1answer
102 views

Recover LVM (on RAID1): No volume groups found. Partition table erased?

I'm trying to recover a LVM (no encryption) on a RAID1 using Debian Live. Apparently, the RAID1 can be assembled without issue, but the LVM is broken. You may skip to LVM section. The RAID part is ...
9
votes
4answers
45k views

How to mount/recover data on a disk that was part of a mdadm raid 1 on another machine?

Some background The disk itself was "worked on" by a friend and is said to be still intact, undamaged and still mountable/recoverable The disk was part of a software raid 1 on Ubuntu 12.04 The other ...
0
votes
1answer
40 views

DDRescue taking months but no errors?

'm having a hard time finding others with the same error, and I'm trying to figure out the best path forward. I have a hard drive that was unusably slow, and then stopped booting. The clonezilla ...
1
vote
0answers
11 views

Snapper - how to undo changes, preserving timestamps?

I've damaged modification dates of files on my drive and I wanted to revert them using snapper snapshots but it doesn't seem to work, snapper only reverts content of files not modification dates. ...
0
votes
0answers
17 views

How to recover data from an SD card with incorrectly detected size?

How can I recover a SD card with incorrectly reported size? (The answer to this question is not given in How to recover data from a bad SD card? ) This question is specific to recovering an SD card ...
10
votes
3answers
2k views

How can I recover after Kate crashes?

I use Kate for coding and note-taking. Sometimes it crashes - often when I've got a lot open. Unsaved 'real' documents (eg, ones backed by files, that have been saved at some point) usually have a ...
1
vote
1answer
28 views

destroyed folder now without directory attribute

I tried to read some videos from the memory card of my digital camera. It wasn't possible to access the DCMI Folder, because there was no directory attribute. The expecting DCIM folder was a 0-byte ...
1
vote
0answers
33 views

Bulk move files back to where they came from

What happened I'm in quite a mess right now after having clamscan scan over my windows part of the system and move all found files (which apparently includes PUA's) to a directory on another drive. ...
3
votes
3answers
97 views

How can I read a linux hard disk from Windows?

I have a PC with Ubuntu (I think it's 14.4). Pretty recently it completely broke down (motherboard (again)). I want to get rid of it, but on the hard disk there are a lot of photos I want to keep. I ...
2
votes
2answers
44 views

Accidentally installed Linux Mint over Windows/Ubuntu. How do I recover data (SSD)?

I had Ubuntu and Windows installed on this 480Gb drive (on my laptop) and decided I'd like to try Linux Mint. One of the options given in the Linux Mint installation Wizard was to delete Ubuntu ...
1
vote
1answer
41 views

Retrieve data from free space on 600Go disk after this disk have been dd of=/dev/{this disk} with 4Go data

I'm stuck in a tricky problem. Context : Yesterday I made a cloning script for my raspberry pi that dd a whole running pi filesystem into a local sdcard on a computer connected through ethernet. It ...
0
votes
0answers
32 views

Is it possible to recover deleted sudoers file without recovery mode? [duplicate]

I deleted the sudoers file by accident, and I am trying to enter recovery mode, but no matter which flash drive I use, it says 'an unexpected error has occured.' I want to recover it from within the ...
0
votes
1answer
186 views

File type inode/x-corrupted

My system had an unexpected shutdown. Now when I open the file from pcmanfm or nautilus I get file corrupted error. Strangely the files are accessible just fine if I launch pcmanfmas root user. The ...
6
votes
5answers
10k views

How to recover a corrupted “tar.gz” file

I suddenly needed to recover an old tar.gz file, but as soon as I execute so: tar -zxvf filename.tar.gz I get this: gzip: stdin: invalid compressed data--format violated tar: Child returned ...
1
vote
0answers
55 views

Which sector size shall I choose to run ddrescue with direct access on an Advanced Format drive?

I started the imaging of an AF/512e HDD by first running a following command: ddrescue -n /dev/sdb2 drive_c.img mapfile.log Upon its completion I made a backup of mapfile.log and decided to run ...
0
votes
0answers
12 views

Restore partition/block after wiping from Android recovery

I'm not sure if this is the right place but as its very unix like in the possible solution but: I wiped all my data on my android phone via recovery including my sdcard partition - which contained my ...
0
votes
1answer
26 views

How to recover a node/content from a tarfile that's been overwritten

Disclaimer: I'm not very good at writing questions, and mine is a very specific scenario. So I'm just going to jump straight into the situation: I was browsing my filesystem, and somehow managed to ...
4
votes
2answers
5k views

recovering ext4 partition after dd'ing over start of HD

I accidentally used dd and wrote over the first 208MB of my external disk. What I wrote over is a partition on its own (Debian nestinstaller) so what I see now is not my old (now damaged) ext4 ...
6
votes
2answers
802 views

Recover deleted file that is currently being written to

I started downloading a big file and accidently deleted it a while ago. I know how to get its current contents by cping /proc/<pid>/fd/<fd> but since the download is still in progress ...
2
votes
2answers
103 views

Find newest version of file recovered by PhotoRec, or suggest other recovery program

I accidentally deleted ALL files for my web server yesterday, and for some silly reason I have not made a backup in the last three months... Shame on me, I know. The files were deleted with a bad rm ...
0
votes
0answers
21 views

Refind only boots OSX off of Recovery HD

(Apple Partition) - First time Linux User/ First Download (My external) Linux Mint 17.2 Okay, I used a Live USB to download Linux to an external hard drive. On that hard drive is a back up - ...
-1
votes
3answers
74 views

Check if a plain text contains some bytes of binary data

How to determine in Bash if a file is 100% text file or if it contains some binary data? I'm doing data recovery and this is useful to check if text files recovered (mail messages, SQL dumps, source ...
5
votes
4answers
6k views

Why can't I copy my DVD with dd?

I tried dd, dd_rescue and ddrescue, all failed. I thought these tools bypass the filesystem and make a bitwise copy. dd is fooled, it finishes but just produces a small file and states it's finished. ...
12
votes
2answers
268 views

Deleted first 512 bytes of disk; how can I recover my data?

I accidentally wrote a 512 bytes binary to the wrong USB disk with dd and the device doesn't show any partitions with fdisk anymore. I thought all the data was gone, but dd if=/dev/sdx | strings ...
1
vote
1answer
50 views

ddrescue image too large

3Tb HDD is corrupt. I tried using ddrescue to create an image and a logfile on another 3TB HDD (only one I had). I got a write error after about 2.7T (actual capacity of the 3TB). Image file and log ...
0
votes
0answers
92 views

Can't mount my NTFS partition on Windows or Linux

During my formatting, I did some move on my partitions, and the one with all my data to keep can't be mount any more (/dev/sdc1). On Windows 8.1 I got a "You need to format this partition" message. ...
-2
votes
1answer
134 views

How to know under what filesystem /etc comes?

I have accidentally deleted some important files of ldap server. Now I am trying to recover all these files. I tried this post and ran these commands: # mount /dev/mapper/VolGroup00-LogVol00 on / ...
0
votes
1answer
589 views

how to restore a logical partition to its original ext4 format

This question is following Unable to mount /home/ partition after reinstalling grub after reinstalling windows 7 where the diagnostic was that installing windows 7 deleted my /home partition, lovingly ...
4
votes
1answer
34 views

Ext4: I/O errors on a clean external drive

So I've an external Seagate hard disk that I used to mount on my Mac through Paragon ExtFS. For some unknown reason it stopped to mount on my Mac due to I/O errors - I may have removed the drive ...
1
vote
0answers
97 views

Recovering files with directory structure

EDIT: I am using Debian 8.1.0 So I somehow deleted my /etc directory. While I have not been able to recover the complete /etc directory hierarchy with all files, I have received different parts from ...
8
votes
2answers
8k views

How to check/test .tar.bz archives?

I've been using tar with its "--use-compress-prog=pbzip2" function to archive my files then compress them with pbzip2 to get an "*.tar.bz" archive. Afterwards I checked the resulting file with ...
0
votes
1answer
16 views

fat32 partition overwritten by Mint image

Was Running Mint 17.1 Two Kingston USB devices attached accidentally written a Mint image the the archive Kingston by the image writer, and lost my fat32 partition with important data collection. ...
1
vote
0answers
30 views

Flash drive fat32 partition overwritten by Linux Mint 17.1 image writer - need to recover [closed]

Ah Yeah...Mint 17.2 image is written onto a Kingston flash drive (8GB) and overwritten a fat32 partition. I can take You to the moon if You tell Me that, those files aren't lost ones. ///the image ...
0
votes
0answers
27 views

Need help retrieving FAT32 partition from an unallocated portion of an external HD

I was going to create a liveusb out of my external HD, as indicated in the archwiki, using the dd command, except I didn't know what the result of the command would be. I then realized that it ...
1
vote
0answers
28 views

Recover file from partition after writing on it

I really did a big mistake. I have a partition sda6 for backup, when writing the iso to a pendrive, instead of typing sdb6, i've typed sda6, is there any way to get back the files
0
votes
0answers
40 views

Can I restore disk after ntfsclone

So I stupidly got the order of arguments the wrong way in my ntfsclone command and ended up writing a blank disk to the disk I primarily use for important data (documents, personal pictures, etc). ...
1
vote
1answer
51 views

I've wiped my partition table using gparted and testdisk did nothing

I've wiped my NTFS partition table using gparted by clicking on "Device->Create Partition Table... and then apply" by accident. In this topic "I've wiped my partition table using gparted, is ...
-2
votes
1answer
101 views

Undo a mass rename of files in a directory?

So I tried to use this script to get rid of a username in a bunch of files #!/bin/bash ls | while read -r FILE do mv -v "$FILE" `echo $FILE | tr '[DarkDream]' '.' ` done Instead, all of the ...
0
votes
0answers
85 views

How do I recover a file with vim?

I am trying to recover my sudoers file. I typed in my Chrome OS terminal vim -r /etc/sudoers After that it gave me the following, Swap files found: Using specified name: 1. .sudoers.swm ...
-1
votes
1answer
40 views

How to recover /etc/sudoers file with vim? [duplicate]

I am trying to recover my /etc/sudoers file in my Chrome OS terminal. I can't access grub, and I don't have root access either. Possibly I need to make a new sudoers file? I already tried that, but it ...