Adam ([info]necroad) wrote in [info]debian,
@ 2008-03-02 21:47:00
Previous Entry  Add to memories!  Tell a Friend!  Next Entry
Current mood: sick

I feel a bit sick... you know, that feeling where you realise all of the important files on your computer have gone.

Any tips on recovery? I'm left with a random assortment of liveCDs, Windows XP (no service pack, but I could get that sorted if I begged one of my friends to torrent it for me) and... debian which doesn't work now due to the lack of contents in /home, now.

I'd really appreciate some help...


(Post a new comment)


[info]octalbunny
2008-03-02 10:33 pm UTC (link)
First, make sure the partition with the deleted files isn't mounted.
Next, look at the sleuthkit / autopsy packages.

(Reply to this)(Thread)

[info]moonjaguar
2008-03-03 01:08 am UTC (link)
Oh man, I wish I'd known about his a week or so ago when a much-wanted-to-keep directory went poof.

(Reply to this)(Parent)

[info]necroad
2008-03-03 07:26 am UTC (link)
I'll have to try this x_x;. Thank you!

(Reply to this)(Parent)

[info]digital_space
2008-03-02 11:03 pm UTC (link)
If you have the hardware to spare then be sure to dd the partition before trying anything heroic.

</endparanoia>

(Reply to this)

[info]themusicgod1
2008-03-03 04:54 am UTC (link)
I was in a similar situation to you 4 years ago, when I lost ~10-20gb of data. That's basically my limit of observation (I can see backwards in time up until that point)...so the solution that worked to some extent for me seems to be lost.

I'm seeing a lot of references to 'ddrescue', and one to 'recover' but I can't seem to find what got me out of my problems. I'll keep an eye out, though

(Reply to this)(Thread)

[info]necroad
2008-03-03 07:25 am UTC (link)
Thanks for looking : ).

(Reply to this)(Parent)

[info]demonbane
2008-03-04 08:01 am UTC (link)
If what you've lost is your personal data, and if you're not running a filesystem with good recovery possibilities (i.e. pretty much anything other than ext2/3 doesn't have good recovery possibilities), then... well... best of luck to you.

If you're running ext2/3, then best of luck to you. :) (Slightly more optimistically. :) )

If what you've lost is your program data but not necessarily your personal data, then you can get a good chunk of it back. A couple of years ago while pruning some backups, I accidentally put in one too many slashes in my command. What was supposed to be "rm -rf usr/" became "rm -rf /usr/". Amazingly enough, after a couple of hours I was back in almost perfect shape. The key thing is to not reboot, and to get a working install of dpkg as quickly as possible. Then it's possible to start reinstalling all of your packages.

(Reply to this)(Thread)

[info]necroad
2008-03-05 04:03 pm UTC (link)
It's all personal data, I've still got most of my program data :(

(Reply to this)(Parent)

Create an Account
Forgot your login?
Login w/ OpenID
English • Español • Deutsch • Русский…