I accidentally formatted a drive that was ext4 to NTFS in Windows (using quick format only). I tried TestDisk, it does find a deleted partition but doesn't seem to find any files or be able to recover anything. Is there any way I can recover the files?
I formatted a thumb drive on Windows (not quick format) that contains files I need (video files). Unfortunately, my attempt to recover them with both PhotoRec and TestDisk failed: neither of them found the files. I know they are still there because I scanned it with some Windows software (File Scavenger) and it detected them. I'd like to try to do this with Linux, to figure out how to do it, and save money at the same time.
I loaded Ubuntu 8.4 on a data drive (second drive no OS) from a Windows XP-SP3 system. I MEANT to load it on the main XP OS drive. Bottom line I formatted a FAT-32 with Ubuntu 8.4. Can I (freeware hopefully) roll back the Ubuntu formatted drive to FAT-32 so I can recover my data?
Last night I made the mistake of formatting my media drive. Before the format, it was ext4. then I formatted it to ext4 again because I wasn't paying attention to what I was doing(this mistake only gets made once). Now im looking for away to recover any/all of my data. The drive in question is 1tb. I have not written any new files to this drive.
There were some files residing on my ext3 file system, using Ubuntu as my linux distribution. Yesterday I formatted the hard drive using a windows install CD, rewriting it with a new NTFS partition. I'm willing to restore my personal files deleted due to this format.
My laptop has two os. one is windows vista. and other is Ubuntu. I am currently on ubuntu system, this is my primary OS.There are 4 partitions of my hard diskWindows OSLinux(Ubuntu OSData Now the problem part. The data partition is NTFS. I have mounted this partition on the location /media/windrive-a under ubuntu OS.A little while back i decided to delete the mounting of the data partition and i fired command rm -r /media/windrive-a/. To give me a shock; all my data on data drive is gone.Now, I know this is not the command to remove mounted partition. But I have committed the wrong. Is there any way i can get my data back. These are very important data for me.
I have a laptop with Fedora 12 on it and I accidentally did an dd if=/dev/zero of=/dev/sda (since then I learned to think before I type) anyway, I stopped it in time (I hope), it only zeroed first 60 MB. So, it killed partition table and boot partition. What I need is home partition, and it should be untouched. home is on a LVM device (fedora default install settings), and I tried testdisk (supposedly handles LVM) but it found only one partition (I guess it's a LVM physical device, as there should be 3 partitions, /, /home and swap) and said it's not recoverable.
Is there a way to get access to files on that partition (partition itself, including file table should be untouched). Partition contains various data (video, audio, and text) I need back (and it's my data, not backed up, and not something I can redownload). Is there any software that can help me with this, and if not, is it theoretically doable (I believe it should be, as the partition itself is not damaged, so it should be possible to read file names and link them with data on disk, am I right)? what is a good way to image the disk, so I can reinstall the laptop while trying to rescue data from image?
I have 3 drives in my computer. I installed Fedora 11 on my two biggest one, with the LVM treating them as one single drive. I attempted to install XP on my last drive. As I was installing, I selected my third drive (I'm 100% sure it is the correct drive as it is an 80gb whilst the others are 120 and 200 respectively) and told it to delete the partition on that drive and format. After I did that, it started to format, starting with my 120! I'm fairly sure that it was merely a quick format, as it only took 5-10 seconds for it to format, and that my data is still there. Is there any way to recover my "lost" data, or did I just really screw myself over?
So I currently have OSX and Windows 7 install on my hardrive - I would like to add 10.04 in the mix, however it will not let me resize my Windows partition because it does not recognize it as ntfs. It will not let me mount it via cli or gui and gparted will only offer to remove the partition - not resize.
Just installed opensuse 11.3 Kdeversion on my laptop. Before installing it on live mode i had a problem of accessing my other drives (NTFS, FAT32 and EXT4) which said HAL system policy...etc mounting error. I could access all drives with root privilege. I thought problem will be solver once i install opensuse on my system. How ever i was really disappointed after seeing the same problem post install. Googled around for the solution and got this link
After this the problem got worse now i am not able to see any of the drives in the side panel. Gone through many forum and posts all discuss about external USB HDD.
I have purchased a DLink Sharecenter Pulse NAS as my PC failed. I wanted to put the two SATA drives in and extract the data before formatting to use as JBOD or RAID. However, before I managed to access my data, the setup software started formatting the drives. I switched it off immediately.
Purchased a SATA to USB2 lead and connected to my work laptop but I cannot see the drive(s). Used Partition Magic and each drive has 3 partitions - of which show about 74GB as used and 2 x 512MB as not. Looks like the drives have been partly set for Linux but the format was not comlete. Have tried to use explore2fs to read them but I cannot access the 74 GB partition only one of the 512MB partitions.
I'm a bit stuck now - any one got any ideas how I can get my files off the 74GB partition before I put them back in the NAS to format.
Deleted a whole bunch of files, I have backed it up but it was from about 2 weeks ago and as I had added loads of stuff in the meantime I urgently need to recover the files.Ubuntu 9.10. Any and every file recovery program you know please.Preferably one that allows me to recover an entire directory, not just individual files, but it'll be fine if that is it.
Yesterday I accidentaly deleted all files from my desktop (with rm). Now I am looking for way how to recover them.
I tried to use scalpel to recover them which found many files (more than 800000 zip files). I stopped the process cause It would take ages. I would like to recover files only from desktop folder. Is this possible?
I moved a few files from a directory in my home directory structure to the KDE trash folder, and then deleted them from the trash folder. About a minute later I regretted this, and now I'd like to see if there's any way to recover the files. First, are there any good utilities for restoring accidentally deleted files? If so, where would I look for these files? Does the KDE trash config file actually correspond to a physical directory somewhere, or do the files just remain hidden in their original location?
I wiped out 60% of my VirtualBox .vdi files on one of my partions. The file sizes ranged from 3gb to 9gb files. (I did have some backups but 4 months ago). Needless to say I'll be backing my files up more often (especially my Virtual Image .vdi files). So here are the steps...: [ Look, I know it seems like allot of steps, but its worth it in the end!!]
(By the way, these are all ext3 filesystems, I would imagine you could recover fat32 [windows} type filesystems too, but I just did this under Linux filesystems) 1--> If you've found yourself deleted any files, try to unmount the partition. ( In my case it was an external 2 1/2 hard drive, command used to unmount is sudo umount /dev/sda3)
1b--> If you only have one partition, then I'd suggest shutting down your computer and putting a Live CD in it (preferably the Ubuntu Live CD).
2--> Whether 1 or 1b applies to you, install ext3grep from Synaptic or any package manager. (if you had to reboot via a live CD, make sure you unmount the partition that has the deleted files.(example umount /dev/sda1 or in my case it was umount /dev/sda3). If you're on the LiveCD of Ubuntu, I believe it will let you install the ext3grep package using Synaptic Package manager and it will put it in RAM under the Live Desktop Session.
3--> Now here's the important part before you proceed any further. If the partition that has the deleted files is taking up 30gb (yes 30gb used space), then you have to mount an existing partition GREATER than 30gb ***FREE*** SPACE. I happened to have another partition /media/sda7 already mounted that had 50 gb free.
So at this point, you must go to any directory under your (recovery partition, i'm referring to my 50gb partition /media/sda7). To do this, run the command cd /media/sda7, now you're in your (recovery partition). You can make a new directory if you want, or just use any existing directory on the /media/sda7 partition. (I made a directory something like mkdir ./Yikes ) So I get into the directory by cd /media/sda7/Yikes then run the following command....:
ext3grep --restore-all /dev/sda3
4--> ***Keep in mind, you just ran that command from the /media/sda7/Yikes directory on your recovery partition. ***This will create a folder called "RESTORED_FILES" under/in the Yikes Directory.*** The ext3grep command you just submitted will try to recover every single file on that partition that has the deleted files (i.e. /dev/sda3). There is a way to restore single files and their paths, but I got frustrated and just did a full restore.
5--> Depending on the partition size and number of files, it could take 30 minutes to 2 hours or more before you start to see messages in the terminal screen saying "Restored file... Abc.txt or sam.jpg". Let it finish!!! At first you will see it saying "Group 1, Group 2 and crazy characters going across the screen, that's normal." You know it's begining the actual restore process when you start to see "Restored file...".
6--> At this point you can open a DIFFERENT terminal screen and do cd /media/sda7/Yikes/RESTORED_FILES to see the files being restored under the various directories. This does work because I was able to restore at least 25gb worth of files. Again, file sizes ranged from 3gb to 9gb!!
7--> Final step when the 1st terminal screen is done restoring the files, you can either open them up from the /media/sda7/Yikes/RESTORED_FILES directory to check them out, or you can copy them back to where they were deleted before. BUT I WOULD SAY TO MAKE A BACKUP OF THE RESTORED FILES, or keep the restored files in the /media/sda7 partition.
-->Again, I did a "ext3grep --restore-all /dev/sda3" command from the partition that had plenty of free space (i.e. 50gb) to restore the 30 gb worth of deleted files (and that ext3grep --restore-all /dev/sda3 command was run in the following directory /media/sda7/Yikes ).
-->Remember to unmount the /dev/sda3 partition (i.e. the partition that has the deleted files). DO NOT MOUNT /devs/sda3 when running the ext3grep --restore-all command. The ext3grep documentation states you don't want to write anything to that partition because you run the risk of writing over files or directories that could be recovered.
-->This ext3grep utility saved me Big Time!! 4 to 5 months of work restored because of this utility. You can get it from Synaptic Package Manger searching for ext3grep.
I just downloaded, burned, and tried the ISO image. only to find out it's not a bootable, live CD, but rather a Windows program, ie. it requires booting into Windows and running it from the CD, which is not a good idea since the first thing to do in this case is to quit the OS to prevent it from using those newly available sectors to write new data. can a Linux-based live CD try and recover files recently deleted in an NTFS partition?
I am using CentOS 5.5.I suppose this is an oft repeated question. I accidentally deleted, using rm command, 2 wmv files. The files were in a single ext3 1Tb drive, with just 1 partition --- the ext3 one. Each file is 600 - 800mb. The 1Tb drive has only about 20Gb data.Immediately after deleting the files i unmounted the drive (/dev/sdc1). Thereafter i searched the the net and came to know of the recovery tools foremost and photorec. I have installed both of them. I am currently running both of them as root --- foremost is just showing a lot of * signs on the terminal and photorec has managed to find some txt and png files --- but no wmv.For foremost i used: /usr/sbin/foremost -t wmv -i /dev/sdc1For photorec i followed some instructions available on the web.
In the meantime, based on some post on the net i ran debugfs as root, then cd into the directory where the files were deleted. Then on typing ls -d i managed to get the inodes of the 2 deleted files and the names of the deleted files are also correct. The instructions on the net http://www.theavidcoder.com/?p=3 tell me to run fsstat and dls both of which i am unable to find in /bin, /usr/bin, /usr/sbin and /sbin. So i am unable to proceed further.
I searched the forum with various terms and didn't find anything, so my apologies if this is a common and/or newbie problem.It seems that when I have a USB driveplugged in to switch the files around, those that I delete are still taking up space. I first noticed it with a Chinese MP3 player and thought it was the player being crappy. I could still play all the songs that were supposedly gone. Today, I noticed it with a little thumb drive that I've had for years. I plugged it into my husband's computer running winXP, and the files showed up in a weird, unusable form. I was able to delete them for real.
I cannot boot into by Ubuntu 9.1 machine.... Trying either GUI or rescue mode gives me the following error messages (which i copied by hand since they were in cli)
Code: mount : mounting /dev/disk/by-uuid/64e5cb0d-058a-4a4c-af4b-7afb6427a72e3 on root failed : invalid argument
mount : mounting /sys on /root/sys failed : no such file or directory mount : mounting /dev on /root/dev failed : no such file or directory mount : mounting /proc on /root/proc failed : no such file or directory
Target doesnt have /sbin/init The only thing i remember doing before this is deleting some bootloader files... but they were on another disk so I didn't think that it would affect my ubuntu install. Guess I was wrong how I can recover my system?
If a USB drive is used under Linux and Windows, what would be the best file system? FAT32?Would it harm to have the drive formated as NTFS?How reliable is Linux when writing to NTFS today and is it worth taking the risk?I am asking this because I am pretty sure that there are a lot of peoples out there with external drives that are formated in NTFS.The main reason for this is that a OS like Windows XP cannot format a FAT32 partition bigger then 32GB and without noticing users might format their drives to NTFS.