Apparatus and methods related to recovering a computing device are provided. A computing device can determine that the computing device has entered into a corrupted state after being initialized at least a pre-determined number of times during a pre-determined interval of time. The computing device can store at least system data and information about a plurality of changes to the system data. After determining that the computing device has entered into the corrupted state, the computing device can identify untrusted changes to the system data from the plurality of changes, wherein the untrusted changes are made by untrusted entities. The computing device can reset the untrusted changes to the system data to default values. After resetting the untrusted changes to the system data to default values, the computing device can be initialized.