05-17-2016
Hi,
Without a backup there is not really any way to recover or list the deleted files, once you delete files in Unix/Linux recovery is very difficult. I have had some luck with both "photorec" and "testdisk", but the system was not usable for a number of weeks while the recovery was ongoing.
Also I would say to you that if any new files have been created, it is almost certain that there have been a number of "inodes" and "data areas" over written.
Regards
Gull04
This User Gave Thanks to gull04 For This Post:
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Hello,
is it possible to check logs in UNIX who deleted the files?
Is there logs in UNIX besides .sh_history? (1 Reply)
Discussion started by: james_falco
1 Replies
2. UNIX for Dummies Questions & Answers
hi
after using rm command how to recover the deleted file (7 Replies)
Discussion started by: arulkumar
7 Replies
3. UNIX for Dummies Questions & Answers
Hi Experts,
by mistake i deleted some files that are very important to the project.
is there any way that i can recover those files,there is no backup for that but the details of the file we know.
This will be a great help.
Thanks (5 Replies)
Discussion started by: namishtiwari
5 Replies
4. Shell Programming and Scripting
Hi,
I want to put all the deleted files in a txt file. Because i want to backup my image server which has thousands of jpg images. I wrote a shell script which will copies images from image server to backup image server. I setup a cronjob which runs on every five minutes. & through timestamp it... (8 Replies)
Discussion started by: mirfan
8 Replies
5. UNIX for Advanced & Expert Users
Hi All,
I am using Fedora Core and Windows Xp. I deleted all the files from root
directory. When i am trying to restart the computer it showing some grub > prompt. What i will do ? I have lots of data in XP OS.
Please help me
i used
# rm * (8 Replies)
Discussion started by: pritish.sas
8 Replies
6. Linux
Hello. I am having a problem and I was wondering if I could get some help from here. I changed into a directory with the cd command and I wanted to delete a folder and all of its subdirectories, so I went ahead and did a rm --recursive * in my current directory to realize that I was in the wrong... (3 Replies)
Discussion started by: jonnydadesigner
3 Replies
7. AIX
Just looking for some guidance on how to figure out who might have deleted some files off one of my systems.
These files are not root owned files so could be deleted by a handful of folks in the group responsible for these files besides the root users.
Anyway I have been tasked with trying to... (1 Reply)
Discussion started by: juredd1
1 Replies
8. UNIX for Dummies Questions & Answers
I copied all JPEGs from my laptop to an external drive using
find . -name "*.jpg" -exec cp '{}' ./media/Backup/pictures \;
And then deleted all of them from my laptop.
Now, I realize that I need the folder path of all the original JPEGs as the path has the important information.
I dont... (1 Reply)
Discussion started by: eshwaconsulting
1 Replies
9. UNIX for Dummies Questions & Answers
Hi ,
I have to find the files from a directory . But the file names are different.
for ex.
MONTH_AP_TEST_DATA_<timestamp>.dat
MONTH_PAY_TEST_DATA_<timestamp>.dat
PARTIAL_AP_TEST_DATA_<timestamp>.dat
PARTIAL_PAY_TEST_DATA_<timestamp>.dat
MULTIPLE_AP_TEST_DATA_<timestamp>.dat... (5 Replies)
Discussion started by: kalidoss
5 Replies
10. UNIX for Beginners Questions & Answers
Good evening, i need your help please
I've got a file script thet deletes about half millions of files, and i want those files to be printed in a log file as an evidence those files were removed.
#/bin/sh
rm "/home/e-smith/files/users/bill/Maildir/cur/1392373930.28512.comp01:2,S"
rm... (6 Replies)
Discussion started by: alexcol
6 Replies
LEARN ABOUT DEBIAN
extundelete
EXTUNDELETE(1) General Commands Manual EXTUNDELETE(1)
NAME
extundelete - utility to undelete files from an ext3 or ext4 partition.
SYNOPSIS
extundelete [options] device-file...
DESCRIPTION
extundelete is a utility that can recover deleted files from an ext3 or ext4 partition
extundelete uses the information stored in the partition's journal to attempt to recover a file that has been deleted from the partition.
There is no guarantee that any particular file will be able to be undeleted, so always try to have a good backup system in place, or at
least put one in place after recovering your files!
OPTIONS
--version
Prints the version number of extundelete.
--help Print a brief usage summary for extundelete.
Partition name
Name of the partition that has deleted files, such as /dev/sda3.
Could also be the file name of a copy of the partition, such as that made with dd.
--superblock
Prints information about the filesystem from the superblock.
--journal --superblock
Prints information about the journal from the journal's superblock.
--inode #
Prints the information from the inode number of the filesystem given, such as "--inode 2".
--block #
Prints the contents of the block, called as "--block 9652".
--restore-file path/to/deleted/file
Attempts to restore the file which was deleted at the given filename, called as "--restore-file dirname/filename".
--restore-inode #
Used to restore inodes by number, called as "--restore-inode 2569".
Also accepts a list of inodes separated by only commas, such as "--restore-inode 2569,5692,6925".
--restore-files filename
Restores a list of files. First, construct a list of files in the same style as would be
used in the --restore-file option, and save it to the file "filename".
Then, this option may be used to attempt to restore those files with a single call to extundelete.
This form also reduces redundancy from multiple calls parsing the journal multiple times.
--output-dir path/to/dump/recovered/files
Restores files in the output dir 'path'.
By default the restored files are created under current directory 'RECOVERED_FILES'
--restore-all
Restores all files possible to undelete to their names before deletion, when possible. Other files are restored to a filename like
"file.NNNN".
--restore-directory path/of/directory
Restores all files possible to link to specified directory to their names before deletion, when possible.
-j journal_dev
Specifies the device that is the external journal of the file system.
-b block_number
Specifies the block number of the backup superblock to be used when opening the file system.
-B block_size
Specifies the block size of the partition to be used when opening the file system.
--before date
Only restore files deleted before the date specified, which should be in the form of the number of seconds since the UNIX epoch.
Use a shell command like
$ date -d "Aug 1 9:02" +%s
to convert a human-readable date to the proper format. The conversion from the number of seconds to a readable format may be found
by using either of the following:
$ date -d@1234567890
$ perl -le "print scalar localtime 1234567890"
--after date
Only restore files deleted after the date specified, which should be in the form of the number of seconds since the UNIX epoch.
See the notes for the --before option for more information.
AUTHOR
extundelete was written by Nic Case <number9652@users.sourceforge.net> Copyright (C) 2009, 2010
This manual page was written by Elias Alejandro Ano Mendoza <ealmdz@gmail.com>, for the Debian project (and may be used by others).
September 29, 2010 EXTUNDELETE(1)