UNIX for Dummies Questions & Answers

There is:

Code:

strings /dev/<disk device>

However, this will not look for a file, but you'll have to check the output if there's some part of your file. And you'll see just about every other string currently saved on that disk. And some strings that really aren't.

One thing you'll have to learn: in UNIX, there is no undelete command, and no Recycle Bin/Trash. If you remove a file, it has consequences, and if you don't have a backup it has sometimes dire consequences.

no you cannot.

generally there are 2 things you can do...

1. forget about it.
2. don't do it again.

Please consider using a command line tool called debugfs.


A deleted file is retriveable untill its not shreaded or zeroized (shread cmd . its just the allocation table has unlinked the reference to the datablock on the disk.

Now , if you are lucky enough (if newer files have not acquired that data block) ; you might be able to retrive them.


Log into your system as a super user before you start the retrieval process. Look at its man pages too. Its simple enough to use. simple commands like ls, cp are supported and it gives you a prompt, you may use the help from there too.

Good Luck!!!!!!!!!!!!