Undelete VMDKs with VMFS

As you probably already know none of the VMFS-versions so far has an “Undelete” function.
So there is no way to restore a virtual disk if it was deleted manually by accident in a reliable way.

In the past few years I learned some procedures to work around this VMFS-limitation.
But to tell you the bad news first  – none of this procedures is 100% reliable.
So if you ask me : “Can you recover a vmdk that I deleted accidentaly ?” the answer will always be: “it depends …”

The most critical aspects are:

Condition Bad Good
activity on the VMFS-datastore after the VMDK
was deleted
production use
creation of new
vmdks or snapshots
no activity
attempts to recreate files using dummy disks
a la VMware Knowledgebase
yes none
Size of the VMDK large small
ESXi Version 6.0 and later 3.5 – 5.*
free space on the datastore at the time the VMDK was created no free space
or almost full
lots of free space

To estimate the chances for a recovery it is required to understand that there are 2 possible cases:

Case 1:  the location of the VMDK inside the VMFS-volume is still referenced in the VMFS-Metadata.
Case 2:  the location of the VMDK inside the VMFS-volume has to be guessed

ESXi 3.5 upto 5.* usually simply dereferenced the name of the VMDK without cleaning the Inode and the mapping details.
The Linux-tool vmfs-fuse very often still displayed the VMDK as if it had never been deleted.
This behaviour seems to have changed with ESXi 6. With the new version the “delete file” process now does a cleaner job.
Unfortunately  vmfs-fuse no longer works with VMFS 6

Let me give you a quick overview of the procedure that I use nowadays:

1. user deletes a VMDK
2. as soon as this gets noticed the following steps will improve the chances for a successful recovery:
– do not create new VMs on the datastore
– do not create new snapshots on the datastore
– if possible power off all VMs that use thin-provisioned VMDKs
– collect information about the lost VMDK such as size, filesystem, provisioning type, guestOS
3. create a dump of the first 1.5 Gb of the VMFS-volume
4. contact me
5. the dump of the VMFS-header-files can then be used to find out if an attempt to recover the deleted VMDK makes sense or not.

I need about an hour to analyse the dump and once I got the results we can discuss what to do next.


Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.


  1. Owen O'Donohoe says:

    Hi I’ve just deleted a vmdk from a datastore in ESXI 5.5
    Can you help recover it please

  2. continuum says:

    Hi Owen
    lets continue this via skype …

  3. Isaac K says:

    Hi Ulli, I tried moving files between devices using the ESX 5.5 datastore browser. The destination was full. The process failed, but corrupted the files on the source drive. Then I accidentally deleted the disk files. Can you help me please???

    • Ulli says:

      Hi Isaak
      please call me via skype “sanbarrow”
      With 5.5 we have a decent chance for recovery

  4. Alejandro Lara says:

    Hi I’ve just deleted a vmdk from a datastore in ESXI 6.0
    Can you help recover it please

    • Ulli says:

      Hi Alejandro
      please call me via skype “sanbarrow” so that I can check wether I can help you.

  5. juan Solano says:

    Hi, by mistake we deleted a VM on Vsphere client and we need to recover it. The vmware version is esxi 5.0.0 running on a HP proliant DL160G6 server with 2 datastores (460GB and 1.82 TB)

  6. Ulli Hankeln says:

    posting a comment here is by far the most unreliable and slowest way to get my attention !
    Please contact me via Skype instead – my username is “sanbarrow”


  7. Asaf says:


    I’ve got a real situation having deleted 201 VMs due to a horrible UI bug in v6.5 HTML5, where I chose remove from inventory on a folder of VMs & it deleted them from disk !

    Machines resided on VMFS-6 datastore on NetApp 8020 LUN & Volume (without snapshot), which I brought offline in the meantime, to avoid any further interactions with.

    I tried some “VMFS recovery” apps with poor results up until now.

    Can you advise whether you have any solid way to tackle this ?

    Any help would be very appreciated 🙂



  8. John M says:

    Hello, I have a ESX 4.0 server with a vmfs volume that is intact. We had 2 vmdks get deleted by mistake. Could we get some help recovering them? We were moving the virtual machine over to a new server so we could get the image backups and the files were deleted by mistake.

  9. Ron Kerver says:

    I accidentaly deleted my store, i’m now desparatly looking for a way to recover.
    I found software that shows me all my files (diskinternals vmfs recovery) but i don’t have the mony to buy this software. It holds al my projects and foto’s that i created the last 15 years!! Could you please help me?