All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: Deleted VMDK File Recovery
PostPosted: June 10th, 2017, 16:49 
Offline
User avatar

Joined: June 11th, 2013, 17:01
Posts: 1710
Location: Phoenix, AZ USA
I have a drive with a deleted VMDK Flat file. I have search for the VMDK signature but presume it was overwritten in the process. Is there anyway to recover data from this sort of problem? Just searching for the NTFS file system bring highly corrupt files (no surprise).

_________________
HDD, SSD, Flash and RAID Data Recovery
Founder of The Data Recovery Professionals Group


Top
 Profile  
 
 Post subject: Re: Deleted VMDK File Recovery
PostPosted: June 12th, 2017, 7:33 
Offline

Joined: March 7th, 2009, 12:43
Posts: 1080
Location: Angel Data Recovery
ddrecovery wrote:
I have a drive with a deleted VMDK Flat file. I have search for the VMDK signature but presume it was overwritten in the process. Is there anyway to recover data from this sort of problem? Just searching for the NTFS file system bring highly corrupt files (no surprise).

It is quite complicated coz , such a big files oftently fragmented. Moreover, did you check is there is any additional delta falt file present ?
Make full scan in UFS, check all merged chunks and try to assemble them in order to get file corresponded to ...flat.vmdk.

_________________
Angel Data Recovery


Top
 Profile  
 
 Post subject: Re: Deleted VMDK File Recovery
PostPosted: June 12th, 2017, 7:59 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2520
Location: Ontario, Canada
I've actually had quite a bit of good luck when it comes to deleted VMDK flat files, as they tend to created at a point when there is enough contiguous space to avoid fragmentation and the full amount of the file is allocated at the time of creation. That said, don't take it for granted that just because you can bring up a file structure that everything opens. Take the time to test and verify all the critical files wanted by your client.

_________________
Luke
Recovery Force Data Recovery


Top
 Profile  
 
 Post subject: Re: Deleted VMDK File Recovery
PostPosted: June 12th, 2017, 8:15 
Offline
User avatar

Joined: April 3rd, 2011, 0:19
Posts: 2003
Location: Providence, RI
lcoughey wrote:
I've actually had quite a bit of good luck when it comes to deleted VMDK flat files, as they tend to created at a point when there is enough contiguous space to avoid fragmentation and the full amount of the file is allocated at the time of creation. That said, don't take it for granted that just because you can bring up a file structure that everything opens. Take the time to test and verify all the critical files wanted by your client.


Unless they did thin provisioning when they set up the VM. If they did that, it'll be a fragmented nightmare.

@OP, what's the host file system where the VMDK is stored? Perhaps your best bet will be trying to find a reference to the file location(s).

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company


Top
 Profile  
 
 Post subject: Re: Deleted VMDK File Recovery
PostPosted: June 12th, 2017, 11:33 
Offline

Joined: October 23rd, 2006, 8:56
Posts: 1336
we can reconstruct fragmented vmdk files.


Top
 Profile  
 
 Post subject: Re: Deleted VMDK File Recovery
PostPosted: June 12th, 2017, 11:53 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3564
Location: Chicago
quasimodo wrote:
we can reconstruct fragmented vmdk files.

even if VMFS metadata is missing?
I would probably be interested

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.


Top
 Profile  
 
 Post subject: Re: Deleted VMDK File Recovery
PostPosted: June 12th, 2017, 15:01 
Offline

Joined: October 23rd, 2006, 8:56
Posts: 1336
Doomer wrote:
quasimodo wrote:
we can reconstruct fragmented vmdk files.

even if VMFS metadata is missing?
I would probably be interested


yes Doomer, will pm you.


Top
 Profile  
 
 Post subject: Re: Deleted VMDK File Recovery
PostPosted: September 2nd, 2017, 22:07 
Offline

Joined: September 2nd, 2017, 21:40
Posts: 4
Location: Canada
quasimodo wrote:
Doomer wrote:
quasimodo wrote:
we can reconstruct fragmented vmdk files.

even if VMFS metadata is missing?
I would probably be interested


yes Doomer, will pm you.


I'm very interested in knowing this process as well. Would you mind sharing it?


Top
 Profile  
 
 Post subject: Re: Deleted VMDK File Recovery
PostPosted: June 20th, 2020, 12:53 
Offline

Joined: May 2nd, 2009, 0:17
Posts: 89
Location: Brazil
I developed good skills to recover deleted vmdk files from VMware VMFS partitions, even for fragmented vmdk files and in cases where metadata is lost
Worked very well on cases where no dr software would help. Technique should be compatible with 70% or more of cases (but unfortunatelly not all cases)

Process is manual and requires in-lab physical access to full VMFS partition, so a good upload speed would be needed for dump uploading.
(VMFS partitions can compress very well depending on each case, I´ve seen 50% rates and sometimes even more)

I´m from Brazil, so price for USD and EUR customers should be very affordable
If anyone is interested in outsourcing, please send a personal message (PM)
(I will not reply in public here to avoid polluting on forum)

p.s.
I usually don´t advertise on this forum, but as this subject seems to have almost no solution via any software or internet foruns, I decided to leave a message here
If board admin thinks that this is not ok, please feel free to delete my post


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: bhopaldatarecovery and 66 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group