UNIX for Advanced & Expert Users

Hi,

In tcsh, I mistakenly deleted some files under a dir with rm *
Is there any way by which I can recover those files (without restoring to an earlier backup point) ?
I mean any command like undelete or anything similar

If you have any programs running that still have the files open or if you have any other hardlinks to the files, they can be recovered.

If the data is of sufficient value to warrant it, you can ship the disk to a data recovery specialist but these people generally charge a great deal for this sort of work.

Otherwise I'm afraid you are looking at a restore from backup as your only other option.

Manier times the editor you use (I use vi & emacs) creates it own temporay backup files. If you can not recover the original one, you can use the backup files. They normally contains the data till your last save

It would depend heavily on the name of the backup file though. Emacs just adds a tilde (~) character to the name, so that would have been also deleted by an rm *. Generic vi doesn't save backups but there's a stack of varients out there, if it happens to save to a .blah file, those would have been preserved.

If the process is still running and did not yet close the file descriptor you can recover it directly via the file descriptor in /proc (on linux)

I think the short answer is " game over, unless you are into heavy wizardry".

Use this link

TestDisk - CGSecurity

This will help u for recover the data.