General :: Could Use Help Trying To Recover Files From Possibly Hosed Partition
Jun 25, 2010
I've been using Linux for a few years and have managed to find what I need searching (including this great site) until now. I have managed to mess up a substantial partition and don't want to possibly make a bad situation worse by bungling around an area I know next to nothing about. I'll try to explain it fully.I finally built a new PC (750GB internal HDD, 4GB RAM). I'm used to Kubuntu so I installed that (10.04 x86_64bit); partitioned sda1 1GB swap / sda2 OS 20GB ext4 / balance sda3 home ext4 for time being. Everything runs sweet. My old PC (very, PIII, but more recent 500GB internal HDD) partitioned sda1 486.31MB swap / sda2 OS 22.82GB ext4 / balance (442.46GB) sda3 home ext3 (ext3 because /home was inherited from an earlier install prior to Kubuntu going ext4). Old PC was having PSU prob. I don't have an external HDD or any other large HDD and not enough DVDRs for 280GB or so of data current in /home. So I backed up what I could risking the old PC working long enough. Got the critical stuff, business etc. There remained some 150GB or so, years of pictures, videos, info on car repairs etc (some but by no means all on semi annual DVDR backups). Free space current in new PC's /home partition ~500GB. So I took out the HDD from the old PC and put it in the new in order to copy the remainder then use it in the new PC; made sure BIOS of new PC indicated this 2nd drive did not have boot priority. The correct install booted.
To my surprise (maybe not yours?) during boot with zero indication, Kubuntu decided to use the 2nd HDD's /home partition for its new 442.46GB swap partition instead! I was horrified. I unmounted it immediately but... according to GParted the partition with all those files to copy is now:/dev/sbd3 File System: unknown 442.46GB Used: --- Unused: --- no flags
I was surprised by kubuntu changing its partitions without input and assuming a ext3 file system on a secondary HD for a 442.46GB swap partition. But, mistake's on me. Call it a lesson. Now I need to know more but don't want to experiment unduly on this drive and possibly make things worse: What should I do next?
I was installing a package last night and it recompiled my kernel and some other things. I restarted and am getting issues with "mounting none on /dev failed" and "general error mounting filesystems." I tried the three different kernels listed in grub (even the recovery options) and all of them crash in similar manners and the keyboard becomes unresponsive (perhaps because it is a USB keyboard?).
I am using this as a file server and have about 1TB of files. Is there any way to recover/reinstall without having to copy all of the files off and then recopy after a reinstall?
I Think I Will Have To Format My HD......But I Want To Recover Files From A JFS Partition Which Is Not Mounting.....Does Anyone Know A Prog Or A Way To Recover Files From JFS Partition?
i want to know how can i recover deleted files in ext3 partition manually(not using any tools)?? probably using the 'grep' command. if someone know pls tell me...
(i have recoverd deleted files in an ext2 partition with debugfs and dump . but dumping doesnt work for ext3)
I am using CentOS 5.5.I suppose this is an oft repeated question. I accidentally deleted, using rm command, 2 wmv files. The files were in a single ext3 1Tb drive, with just 1 partition --- the ext3 one. Each file is 600 - 800mb. The 1Tb drive has only about 20Gb data.Immediately after deleting the files i unmounted the drive (/dev/sdc1). Thereafter i searched the the net and came to know of the recovery tools foremost and photorec. I have installed both of them. I am currently running both of them as root --- foremost is just showing a lot of * signs on the terminal and photorec has managed to find some txt and png files --- but no wmv.For foremost i used: /usr/sbin/foremost -t wmv -i /dev/sdc1For photorec i followed some instructions available on the web.
In the meantime, based on some post on the net i ran debugfs as root, then cd into the directory where the files were deleted. Then on typing ls -d i managed to get the inodes of the 2 deleted files and the names of the deleted files are also correct. The instructions on the net http://www.theavidcoder.com/?p=3 tell me to run fsstat and dls both of which i am unable to find in /bin, /usr/bin, /usr/sbin and /sbin. So i am unable to proceed further.
I need to write a script (possibly awk) that is able to process 2 files, but I am very new to awk and I have problems in how to process 2 files at the same time.The first input file is samples.txtthe formattime_instant measure
Well i have an 20GB HDD (/dev/sdb) formated with ext4 and has very important files on it .All of sudden something went wrong and the 20GB partition has been lost . Now how do i have to recover that partition and primarily recover those files . Gparted shows no partition on it but unpartitioned space .
I have deleted the ubuntu partition on my xp pc. Now at restart i have the following: GRUB loading. error: no such partition grub rescue> I have no idea what to do now. I have downloaded super grub - because one of the pages that i googled said it would help - but my pc does not read from either the cd or usb drives - don't know why.I need this pc recovered today .
I was installing windows vista on my computer, so I backed up everything to a external drive which was formatted with ext2. I then proceeded to install windows vista. When I got to the partition section I tried installing windows vista to my raid 0. When it didn't work I decided that I would delete all my existing partitions and create a new one. Well in my haste I accidentally deleted my ext2 partition from my backup drive that was still connected. As soon as I realized what I had done I shutdown the windows install and disconnected my external drive. This is the current state of my drive from parted:
Model: WD 15EADS External (scsi) Disk /dev/sdb: 1500GB Sector size (logical/physical): 512B/512B Partition Table: msdos Number Start End Size Type File system Flags
I know that the drive only had one partition before and that it took up the entire disk and it was ext2 (maybe ext3).
A HP Netserver LP2000r, with original SCSI controller and HP NetRaid-2M controller, 3x 36GB Ultra3 HDD in RAID5, Debian (sarge/etch), has crashed after 992 days without reboot. From all that I can see, a hardware failure, most likely with the memory. The HP Diagnostic tools cannot find any problem, but everytime I boot into Knoppix, I get between 2minutes and 2 hours of runtime, and then either a kernel oops or just a complete and sudden halt.
Well, the box has earned its money. However, there is some data on the drives that I need to recover (yes, I have beaten myself up properly about not backing up that data, don't even go there !). There are three partitions: sda1 is /, sda2 is swap and sda3 is a LVM volume with 3 logical volumes on it. As far as I can tell, the hardware defect must have been creeping in and has made a total mess of the inodes in all these partitions.
After booting into Knoppix, I can restore the volumes using pvscan, vgscan, lvscan, vgcfgrestore and vgchange. If I try and mount them: mayhem. So I try and check them, using fsck.ext3. All sorts of interesting nonsense, such as a completely empty inode 11 (the first inode) and then obviously from there on all else is pointless. I tried using debugfs, but the information on what to do with it is somewhat spurious.
P.S.: Tomorrow I will go and get myself a 16GB Flash Drive and then hopefully I will be able to dump the partitions one by one onto that drive and transfer the images onto a different computer for analysis and data recovery.
I moved my NTFS partition with XP and after restarting got the grub> prompt. ls,grub-install and mount are not recognized. find /boot/grub/stage1 (hd0,2,a)
how can I recover? my *nix is osol and I have grub 0.97 (legacy)
I have both a osol and ubuntu cds, but it seems I should be able to load from the grub prompt.
I accidentially overwrote the first 1M of my harddisk on linux (using dd). So, the partition-table is gone. I can still access all partition (except the first one) using /dev/sda2 (and so on), so the data is still there. I only need the partition boundaries to restore the table. How can I do this? The Linux-Kernel must still know them because all mount-points still work. fdisk -l /dev/sda doesn't work because it acctualy reads the partition table.
I have an external 250gb hard drive where I had copied all my documents, pictures, etc etc. I wanted to reinstall windows xp on internal hard drive but I made a mistake and deleted the partition on the 250gb external hard drive. Is there a way to recover those files? I didn't format the 250gb hard drive. If yes, which software do you guys recommend? If this needs to be posted on another forum please let me know.
I am facing a serious problem.I installed UBUNTU 10.04 and encrypted it during installation. I accidentally erased some of the necessary files from root folder. now the the OS is NOT booting.luckily i still have the encryption key i have some important documents in that drive (desktop folder).
PS: I have tried to run Live Ubuntu it shows the Root, but it does not enter any of the folder.
My laptop has two os. one is windows vista. and other is Ubuntu. I am currently on ubuntu system, this is my primary OS.There are 4 partitions of my hard diskWindows OSLinux(Ubuntu OSData Now the problem part. The data partition is NTFS. I have mounted this partition on the location /media/windrive-a under ubuntu OS.A little while back i decided to delete the mounting of the data partition and i fired command rm -r /media/windrive-a/. To give me a shock; all my data on data drive is gone.Now, I know this is not the command to remove mounted partition. But I have committed the wrong. Is there any way i can get my data back. These are very important data for me.
I'm trying to recover a lost partition from a faulty SSD . I've used Linux last time, hence I'm a bit rusty. Still I'm trying to recover a damaged SSD filesystem on a eeePC 900 of a friend of mine ...Here are the details.
Asus eeePC 900
- 4GB primary SSD (OS is installed in here and works fine)
- 16GB secondary SSD (this one is faulty; after a few weeks of problems this friend of mine made some sort of system restore, but Linux couldn't use it correctly and trashed it away with all of it's data ... he couldn't explain it better to me. I'd like to recover the files from within this SSD)
Here's what I did on the eeePC:
1) fdisk -l Disk /dev/sdb: 16.1GB, 16139354112 bytes ... /dev/sdb 1 1962 15759733+ 83 Linux
[code]......
I'm trying to find out the right words without generating any inflammatory answers from the community ... I currently kinda have only a Windows Seven installation available to work with ...
If you're still with me I add a few more details. That's all been done on the Win machine.I've managed to load the sdb.img file with Gizmo (it's a little software that mounts img files). Gizmo couldn't load the sdb1 partition inside of it but ... another program called PhotoRec managed to access the mounted disk, found the ext3 partition inside of it (gave me a few errors though) and successfully recover a lot of files :-) Well, a lot, not all of them, and not every recovered file was good That's a first improvement, that tells me sdb.img actually contains valid data even if only partially valid. I don't know if PhotoRec is to be blamed for the failed ones or the SSD image file did not contain enough valid data to let PhotoRec do a good job.
Now I would go back to Linux. I'm well aware that Linux has more potentials than Windows when it comes to handling disk images, loopback devices and so on; but, as I already said earlier, I'm a bit rusty.I'm willing to make a fresh installation of Linux (maybe Ubuntu) on a spare harddisk in order to get full advantage of that and dig deeper but I need directions when it comes to recover that lost partition. I'd like to try and recover the entire partition (not only a few files), maybe rebuilding the ext3 superblock or whatever.Here I'm lost, I don't know what has been developed in the last years regarding partition recovery in Linux, what tools are available, which forums deal with such techniques, I'd like to be pointed in the right direction.
I was syncing my palm pilot but some setting must've been wrong: instead of putting the files from my hard disk to the palm pilot it took the blank files from the palm pilot and wrote them over my back-up. Anyway, I'm about sick of palm but I want to get this file back. Is there anyway I can restore to an earlier version of this file? I'm about to reboot with sys rescue cd.
Just rm -rf *'d home/me/ directory... tried extundelete, didn't recover more than 10% of data.. trying scalpel, taking forever..Anyone know of a sure fire way to recover data from ext4?
I spent about a year on linux and had all sorts of very very important documents and files saved in my system. I cannot stress the importance of these documents and know that I am retarded for not making backups. We will start another thread for people to yell at me if you want. Heres the deal, XP was installed on this computer yesterday. They did a boot from disc install, deleting the partition and installing a fresh copy of XP.
Now XP is back on this cpu. My question is, is there ANYWAY long, short, whatever that I can find those files or maybe go back to my old install of ubuntu? I've heard a lot about bootloaders and whatnot but I have to get those files. I have a bunch of assignments due and need these files.
I put dual OS in my desktop. One is XP, and another one is RedHat EL5. when i installed EL5 in my system, the XP content and my personal files gone. XP is in D drive and EL5 in E drive. My personal files are in C & F drive. Now I would like to recover C & F drive files.
I tried to to install Kubuntu on a usb port to make it portable. I used my buddies laptop and when the program asked if i wanted to erase the Hard drive I made it erase the USB port and install on there. When I was finished windows would no load up from the Hard drive on the Laptop and the message I got was a code and grub rescue. How can I recover Windows with out erasing the files?
Original disk: XP NTFS primary Linux / ext4 logical Linux /home ext4 logical Win 7 NTFS logical NTFS data logical swap space NTFS recovery partition
I tried to install linux, as there was a problem with XP overwriting grub, I chose write grub to /dev/sda8 (which is where the linux install was appearing earlier).
I guess this borked the filesystem somehow. Now the NTFS data partition and the swap space are appearing as one free space. Well actually before that some linux live CDs (including gparted were seeing the entire drive as unpartitioned). I had to go into XP and delete the /ext4 partitions.
Is there any way for me to recover the NTFS data partition ?
I removed my Ubuntu install and decided to replace it with Debian. I backed up the /home directory onto the Windoze installation on the other hard drive. That was a "home.disk" file. Now, I copied the file over to the Debian hard drive, and can't figure out how to recover the files. Is this possible to do in Debian?
Some a$$ hack me MySQL and deleted all my databases, I have older copies on my system, but is there a way that Ubuntu server can recall or recover deleted MySQL database files ?
is there any way to recover deleted files and folders in redhat9.because one of my user delete one folder through samba.please advise me or any other recover tools.
