Ubuntu :: Data Recovery - There's Nothing In My 'Deleted Items'?
Jan 8, 2011
I have somehow managed to eradicate all of my films and music...I was going to update my external HDD (typical) and so I highlighted everything and went to drag it. My finger kind of slipped while the cursor was in the the same folder and I got a message saying something like:"Source file is in this destination. Cannot move. Do what?"There's me thinking not much can go wrong at this point so I clicked "Skip all".Everything disappeared
The file system says there's still only 500GB free on my 1.5TB, so the files are there but I just can't see them.how I can get them back?There's nothing in my 'Deleted Items' and I had a play with scalpel and PhotoRec and I either couldn't get them to work or they said they'd take way more time than I have.
Edit: Where did that smiling devil come from? That's really not how I feel right now.
I erased my partition table. Can anyone recommend a good method of reconstructing it? And if this is impossible, can anyone recommend a good method of data recovery? I had an ntfs partition with windows 7 and a larger ext3 partition that ran Debian.
I'm running Test-disk on the SystemRescueCD at the moment (cross your fingers).
I'm using Evolution, latest version for Linux. For some reason, I can't get the deleted items folder in the mail view to expunge. Is there some reason why emptying the trash suddenly doesn't work? It worked for the first few days of using Evolution, but now it just doesn't work -- the deleted items just stay there.
Here's the error message: Error storing '~/.evolution/mail/local/Handle Later (mbox)': Error storing '~/.evolution/mail/local/Sent (mbox)': Error storing '~/.evolution/mail/local/Inbox (mbox)': Summary and folder mismatch, even after a sync
I was playing around with the default panel that has the power icon (wrong lingo maybe) and the network/sound icons, etc.I deleted some items including the power icon and now for the life of me can't find it in the panel applets list in lubuntu.Is there a way to restore the default panel with the settings as when I first installed lubuntu.I also played with some spacings and other settings so would rather just get it back to normal/restore it vs add all the items back on and then play with the spacings again.
i'm currently using the claws mail rssyl plugin to manage my rss feeds, but i have two issues with it:
1) when i delete an rss item it reappears when i refresh the feed 2) when i mark all posts of a feed as read, a little while later (for example) 5 of the 20 items become new/unread again. these unread items are random (not the latest posts)
the only pattern i can see (regarding issue #2) is that it only affects feeds hosted on videos. i'm thinking of finding a different application to manage my rss feeds, but it is nice to have email and feeds in once place.
I recently accidentally (permanently) deleted a bunch of files off my computer. I used "foremost" to recover all my images, but there are still a bunch of videos that need to be recovered. The problem is that foremost seems to have also recovered a crapload of files from before i switched to ubuntu (i just removed windoze today) so i have a LOT of jpg images right now (over 400,000) and i don't want to deal with that many video files!How do i recover my recently deleted videos without getting a bunch that i don't want?? (can i specify the folder they were deleted from or something?)PS: i used this code to recover my picturesCode:sudo foremost -t jpg -i /dev/sda1
What exactly I did here to aid in attempting to recover my Windows system. My laptop was dual Wubi-boot with Windows 7 and Ubuntu, and after encountering issues booting into my Wubi Ubuntu, I went in to recover important files to do a reinstall. Using an Ubuntu livecd, I created a directory called "win" (sudo mkdir /win) and then mounted my Windows 7 partition (sudo mount /dev/sda1 /win) to that folder name. However, after encountering some issues there, I made the mistake of removing the "win" folder without unmounting the Windows 7 partition using "rm -rf /win". After that, my Windows system appears to be missing. Can anyone tell me what exactly I did? Did I delete the partition?
I need to recover some folders and some files from my CentOS 5.3 X86_64 linux machine ext3 partition after I have deteled them with rm -rf command. After I have deleted the files (*.exp extension) and folders with rm -rf command, I have written a big archive 70GB on the same partitions but in a different path. I know that in windows if I do that, there's no way I can bring back the deleted files, 'cause the OS writes the information in the same cluster and therefor I can't bring back the files. I hope you guys understand what am I saying.
what program (that knows all extensions, or dosen't read a specific extension/extensions) can I use in order to get the date back ? I have used foremost and it worked, but this programs knows only specific extensions, like exe, jpg, avi, mpeg, etc and not my *.exp extension. The foremost program worked perfectly, but it dosen't know the *.exp extension that I need, in order to get the data back that has that extension.
i manage to delete some files from the system. now i need to recover them.. i know the inode # (through ext3undel) and also the size.Quote:Unfortunately, we cannot automatically obtain the name of a deleted filefrom Unix file systems - since the connection between the iNode (whichholds the MetaData, including the file namee real data is droppedon deletion. However, we can obtain a list of names from the deleted files.How can i use this information to recover the files?Also can i search the text from a partition? (file don't exists). As i need figures
Yesterday, my Windows 7 machine managed to somehow destroy a SD card with some pictures on it. Now, every time the card is inserted into a computer running windows, or the camera it came from, it asks to be reformatted. Obviously I would like to recover the pictures from the card.
I tried a scanning the card with a windows program "card recovery" and the program was able to scan the card and find the images on it. But I have to pay $40 to actually copy them from the card to the computer.
So I did some digging and tried to find a way to recover the data for free using my Ubuntu machine.
Some details about my hardware: Running Ubuntu 9.04 SD card: 8Gb SDHC from PNY Optima The camera was a Nikon D5000
What I have done so far: I used ddrescue to create an image of the card. However, at this point, most of the instructions I found only have you try and mount the image. Then I used the testdisk utility and the mmls utility from the SluethKit to try and find a partition on the SD card image that I could mount. Both of these programs failed to identify a partition on the card.
A friend's old Compaq Presario came with Windows XP. However, when it got buggy (without his knowledge or consent), his kids overwrote his OS by installing a warez edition of Windows 7 Ultimate. Unfortunately, that wiped out all his data, including photos of his late wife that he does not have backed up. I want to recover those if possible. I don't want to install anything because that may overwrite the photos if they're still there in some shape or form.
What I'm wondering is if there's a DVD-bootable distro of Linux specifically for data recovery. If I could boot to that, I could run its data recovery utilities without danger of putting anything on the hard drive. Once I've recovered the photos and backed them up to an external hard drive, I'm going to make his PC legal by installing Ubuntu. That's no problem. I'm very up to speed on that. What I need to learn is the best data recovery strategy via some type of bootable Linux. I suspect someone has written such a tool given how often people lose data due to viruses, accidental deletions, formats, etc.
I just erased +200GB worth of photos, documents, music and videos on my external hard drive.I wanted to try the new Ubuntu Lucid Lynx Alpha 2, so I downloaded the .iso, launched the live USB disk creator and tried to format my 1GB pendrive to make room for the OS. Somehow, I ended formatting my 320GB external USB hard drive. The hard drive had to partitions (one EXT3 and one NTFS), but now it only has a FAT partition that spans the whole drive.I understand that the new FAT partition may have erased the EXT3 data structures at the beggining of the partition, making file recovery next to impossible.A confirmation dialog on the live USB disk creator wouldn't have hurted either.
A while ago my harddrive kinda failed. I didnt notice untill I got "Grub error 17" one time when I was trying to boot my computer. The problem is not really that I couldnt log on to my computer, but rather that I have alot of important information on the computer I would hate to lose. At the time I used Ubuntu 8.04 and had reiserfs filesystem on the computer. I bought a new computer and decided to wait untill I could rescue the data before doing to much dmg to it. But I dont really remember if I tried something to fix it before I realised that it was the harddrive and bad sectors that made me get gruberror 17. Hopefully I didnt do anything.
Anyway. Now today I had some extra time, so I decided to dive in. I booted from a linux mint disk and used ddrescue to transfer all the rawdata over the network to an image file laying on an ext4 drive. Once there I used reiserfsck to try and repair the filesystem. After that i mounted the image file and tried to access the files. Thats where the probelms started. I could see the whole treestructure of the harddrive and everything seemed ok, but when i tried to open the files, none of the pictures, documents and so on could be opend, and when I tried to open stuff like MP3 files they played quite strange. Videofiles was really messy, kept changing resolution and was almost always just gray and green squares on the screen. I decided to use ddrescue and move the files from the image file and on to a clean disk. So when I was done I could mount the filesystem on the new disk, but with the same resault, so I did reiserfsck again, and when that didnt help I did a buildtree also. Still with the same resault. So I decided to investigate the data abit. Opening files at random trying to understand what had hapend. And I saw that some MP3 files (the easiest to open) was some kind of mixing between several difrent mp3 files. Some files wasnt even in the same folder, so it was probably just that the file pointer was pointing at the wrong data on the disk. I dont know how that works really, so I dont know how to go on.
So now to the question. How do I get the data back? Have I done something wrong, can I redo somethig? I still have the broken disk and can take data from it once again, but I want to wait to do that untill I really know what to do. I also still have the image file, and the disk with the copied data. I have a ubuntu 9.10 system at my disposal atm.
I'm trying to learn how to use foremost, a data recovery tool. I thought a nice place to start would be by attempting to recover a file from a test image. The foremost website links to this site which has a FAT Undelete Test #1 challenge. The challenge is to recover files from a 6 MB FAT disk image. I tried running this command. foremost -t all -i /home/<user>/Desktop/6mb.img -o /home/<user>/Desktop/output but all I got was a folder with an audit.txt file in it.
I launched a script using rsync and the option -delete-before, however the destination folder was the wrong one. I noticed it only seconds after but it was still too late. In less than 5 sec rsync deleted over 200gb of data on my external hard drive... It is not in my Trash nor on the HDD trash but it's not possible that the data were ereased in less than 5 sec! (I dont know how rsync handle deletions.) I know I am really stupid but is there a way to get back all my data (mainly HD movies in mkv, mp4 and some avi)
Today I wanted to make a backup of my Ubuntu server. Since the program wasn't working for me, I rebooted my computer and right now it wont boot. Now I entered recovery mode and I'm trying to recover my /var/www and /etc/mrtg folders. I want to copy them to my USB-Stick but Ubuntu wont do this.
The command I tried: Code: cp -r /var/www /dev/sdg1/www I already created the folder via a other system. I also tried to mount the USB stick: Code: mount /dev/sdg1 /mnt/usbe But im getting the following error: error while loading shared libraries: /lib/libsepol.so.1: Invalid ELF header.
I'm running 10.04 LTS (64 bit) During a recent attempt at dual booting Windows 7, the Windows installer made a boot partition on the wrong drive, formatting the drive, and therefore destroying all my data.
The original partition was NTFS, and the new (unwanted partition) is NTFS.
Is there something in Linux I can do to recover the data that was there, or am I going to have to install Windows on yet another drive and use some Windows tools?
The data on this drive is extraordinarily important, containing ten years of digital photos, my source codes, and musical compositions (protools sessions etc).
I have a windows install that is totally hosed, bluescreens, etc. I want to try to force mount it from Ubuntu to get whatever data I can, but it won't allow me to mount. It keeps telling me to run chkdsk /f and reboot twice. But that's not possible. I was wondering if there are any ntfs tools for Ubuntu or any data recovery tools I can use to get what I can from this drive.
The other day one of my hard drives on my windows system decided to stop working. Not entirely sure what happened, but it seemed that it just erased its partition header, although I wasn't able to recover it.
Anyway, I successfully got an image of the drive using GNU_ddrescue (yay!), and I'm currently salvaging what CAN be salvaged with foremost.
way to get EVERYTHING off of the drive? I mean, it seems that it's all intact (since foremost is finding so much stuff).
I've tried mounting the partition, but it's not working. (I'd post the output from the terminal, but the forum thinks there is/are URL(s) in it....)
I'm trying to recover my Western Digtal 500GB hd (connected through IDE), I've already succesfully recoverd 80GB with copyr.dma (didn't have a bigger IDE drive laying around). and want to do the rest of the drive with GNU ddrescue. I use the Parted Magic live cd to do this. The problem is that I can't find my HD, although it is listed when I look in the Hardware info app. How can I access it as /dev/hda or /dev/sda or whatever it wants?
While install Ubuntu on an existing xp pro I accidentally formatted my hard disk. Is there any way to get back my files it contains e books pdfs photos music files and movies. Data recovery. My Hard Disk 80GB SCSI NTFS.
My laptop died. I was running FC11. I have taken my harddrive out and connected it to an usb-adaptor and mounted it on my FC11 desktop. However, when I open it all I see is grub. Palimpsest sees both the 250MB of grub and efi etc., and it also sees 120GB of LVM2. I cannot however access any of my data.
A friend has a embedded system (korg recorder) with a ata drive in it, that crashed. We are trying to come up with ways to retrieve the data off of the drive. I'm asking in security as this seems like it would be close to forensics, hence security. Hints on software for linux to help either recover files, move files, copy/clone the drive? I'm not so concerned about the korg's os on the drive, as we can create a new blank drive and install that, its the data that is critical, that needs to be recovered. The original korg os was only recognizing drives up to 100gbs so I'm guessing this might be a fat16 filesystem if that helps. Well, that and the program installed to the drive to run it in the korg is an exe.
I just made a very stupid mistake, and in result I just deleted almost everything on my windows 7 partition. I followed this guide: [URL].. for how to access my windows partition from ubuntu and it worked, but then I decided to rm -r the whole thing thinking it was a copy. I have no restore disks or any other type of backup. I know this maybe be impossible, but is there any way to recover my data?
Has anybody noticed that delete in Ubuntu 10.10 is only compatible with Ubuntu. E.g. I have a usb stick with 2 movies on it. Delete them using ubuntu's Gui just right clicking files and move to thrash so the drive looks empty. then i physically remove the drive and put it into a windows xp machine and all the files are still on the stick just put into a folder called thrash.
I also reformatted the usb stick Fat32 inside ubuntu and when i put it into the windows machine the file names were still there. (The movies were currupt and unplayable in Windows.)But still its very strange I suppose i'll just have to Blow up my usb if i ever need to destroy the data on it.. Just let me know if this has happened to you guys before. (I had Bootable Backtrack 3 on one of my old usb's that I gave to a work colleague.
I know that deleting and reformatting only deletes the indexing info for the OS but i always thought that deleted files couldn't be accessed by the average computer user.