Solved

how to undelete files in Unix ?

Posted on 2002-05-12
8
1,070 Views
Last Modified: 2013-12-27
Is there a way to get back removed files.I have not written after deletion on that partition ! I have tried unrm/lazarus tools but it recovered partial data only.
thanks
0
Comment
Question by:anil27
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 38

Expert Comment

by:yuzh
ID: 7005353
If you delete file from the file manager, you might be able to get the files back from .dt/Trash.

If you use command line command "rm", bad news. You have to get the file back from you backup media
0
 
LVL 14

Accepted Solution

by:
chris_calabrese earned 200 total points
ID: 7006085
unrm and lazarus are pretty much the state of the art in doing this.  If they don't work, you're hosed.
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 7006925
have seen this link, but never tested:
  http://www.porcupine.org/forensics/

'cause you have not written after delete, there is a chance  like following:

   grep -a -B2 -A200 "patter where your text starts" /dev/hda1
0
 

Author Comment

by:anil27
ID: 7026676
Ahoffman !
I could not understand this option of grep with -A and -B. Can u please explain .
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 51

Expert Comment

by:ahoffmann
ID: 7026683
stolen from "man grep" :-))
---------------------------------------------

-A NUM, --after-context=NUM
        Print NUM lines of trailing context after  matching lines.
-B NUM, --before-context=NUM
        Print  NUM lines of leading context before matching lines.
0
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 7028162
Well, the GNU version of grep anyway...
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 7028197
agreed, I should have used ggrep, as I do on my boxes ;-)
0
 

Author Comment

by:anil27
ID: 7553033
Although I could not recover the complete9only15%)data but these tools gave me the best results.
thanks
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hello fellow BSD lovers, I've created a patch process for patching openjdk6 for BSD (FreeBSD specifically), although I tried to keep all BSD versions in mind when creating my patch. Welcome to OpenJDK6 on BSD First let me start with a little …
Java performance on Solaris - Managing CPUs There are various resource controls in operating system which directly/indirectly influence the performance of application. one of the most important resource controls is "CPU".   In a multithreaded…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now