Linux Archive - Undelete files

Linux Archive (http://www.linux-archive.org/)

- Debian User (http://www.linux-archive.org/debian-user/)

- - Undelete files (http://www.linux-archive.org/debian-user/121461-undelete-files.html)

Hi! Today I just deleted a directory by mistake, it went to the trash, so when I draged it back to my personal directory by mistake again I cancelled the process, and now the directory is gone, do you know if there's a way to get it back? Thanks!!!

--
Alejandro Aguila Sáinz <alekz@alekz.com.mx>
PGP KEY: 14D45A26
Fingerprint: 9670 F4A3 0568 42AF DF1A 2429 C1D3 D6A6 14D4 5A26

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/08/08 19:45, Alejandro Aguila Sáinz wrote:
> Hi! Today I just deleted a directory by mistake, it went to the trash,
> so when I draged it back to my personal directory by mistake again I
> cancelled the process, and now the directory is gone, do you know if
> there's a way to get it back? Thanks!!!

Did you unmount the device as soon as the incident occurred?

- --
Ron Johnson, Jr.
Jefferson LA USA

"Kittens give Morbo gas. In lighter news, the city of New New
York is doomed."
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkh0DmgACgkQS9HxQb37XmfESACdEv14fI/puHl9XLk2L/qlDXie
GBYAoOoraCSZoG29o1Au3gDHzpQKY/XH
=kqed
-----END PGP SIGNATURE-----

--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Hi, after googling I just found the solution for my problem, actually I also undeleted a lot of pictures that I deleted several months ago, here is the solution (as root):

apt-get install foremost

After foremost is installed restart your system to the single user mode (Selecting it from GRUB) , because in my case after trying two times in regular mode I got a segment violation error, and send:

foremost -t jpg -i /dev/hda -o /home/recovery

Then reboot into regular mode and open the lauch application pop-up (alt+f2) and send:

gksu nautilus

Then just go to /home/recovery and all your deleted JPG files are back, I took like 20 minutes to show all the files because there was 4 GB recovered. This foremost applications it's really cool, you can also recover a lot of files, just check man foremost.

Thanks !

On Tue, Jul 8, 2008 at 8:46 PM, Ron Johnson <ron.l.johnson@cox.net> wrote:

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Why do so many people top-post?

On 07/08/08 20:15, Alejandro Aguila Sáinz wrote:

> Yes, and I mounted it to another Debian system and I found the foremost

Excellent. *Without doing that, you are sunk.

> application, it's running right now. I don't know the results yet, so if

> you have another option please let me know.

- From Googling for "undelete ext3", I found:

http://www.xs4all.nl/~carlo17/howto/undelete_ext3.html

http://code.google.com/p/ext3grep/

> On Tue, Jul 8, 2008 at 8:03 PM, Ron Johnson <ron.l.johnson@cox.net

> <mailto:ron.l.johnson@cox.net>> wrote:

>

> On 07/08/08 19:45, Alejandro Aguila Sáinz wrote:

>> Hi! Today I just deleted a directory by mistake, it went to the trash,

>> so when I draged it back to my personal directory by mistake again I

>> cancelled the process, and now the directory is gone, do you know if

>> there's a way to get it back? Thanks!!!

>

> Did you unmount the device as soon as the incident occurred?

- --

Ron Johnson, Jr.

Jefferson LA *USA

"Kittens give Morbo gas. *In lighter news, the city of New New

York is doomed."

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkh0GGAACgkQS9HxQb37XmezuQCfYcgrkfWbG3 6WGYOHlgWbXjMh

v/sAnA3EngGjcK4SjKA6J8YPJIxiB63X

=r44V

-----END PGP SIGNATURE-----

--
Alejandro Aguila Sáinz <alekz@alekz.com.mx>
PGP KEY: 14D45A26
Fingerprint: 9670 F4A3 0568 42AF DF1A 2429 C1D3 D6A6 14D4 5A26

Hello
if I delete some files with rm; is it possible to restore them?
Regards

--
PhD candidate in Computer Science
Address* * **
3 avenue lamine, cité ezzahra, Sousse 4000

Tunisia
tel: +216 97 246 706 (+33640302046 jusqu'au 15/6)
fax: +216 71 391 166

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

No.

On Fri, 14 Oct 2011 17:40:48 -0500 Adel ESSAFI <adelessafi@gmail.com>
wrote:

> Hello
> if I delete some files with rm; is it possible to restore them?
> Regards
>
>
> --
> PhD candidate in Computer Science
> Address* * **
> 3 avenue lamine, cité ezzahra, Sousse 4000
> Tunisia
> tel: +216 97 246 706 (+33640302046 jusqu'au 15/6)
> fax: +216 71 391 166
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 10/14/2011 07:03 PM, Ranjan Maitra wrote:
> No.

This seems to be a short sided answer. They could be recovered using
something like testdisk most likely

>
> On Fri, 14 Oct 2011 17:40:48 -0500 Adel ESSAFI <adelessafi@gmail.com>
> wrote:
>
>> Hello
>> if I delete some files with rm; is it possible to restore them?
>> Regards
>>
>>
>> --
>> PhD candidate in Computer Science
>> Address
>> 3 avenue lamine, cité ezzahra, Sousse 4000
>> Tunisia
>> tel: +216 97 246 706 (+33640302046 jusqu'au 15/6)
>> fax: +216 71 391 166

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJOmM70AAoJEF1Xw4ZWTEoJHGAQAI85Hv83AC 3Ox2IYzhTXWRcA
LkvLelKK343suDKmiEYa1xrLtl/U2hAsXUqSh6HOVuTOfAt/BmFIH4UXDWif2nUX
0yeXX7Dc0EPcULaYUD5nFNyBMy3dqEMjYI/vQMzDU3mIe0ev9Y78QA4bpgxIpgub
Fqz3nNKD4jgOwqaM1npj2cr8Nm4+k8mFdTRYk9qo9QwhybPY7W 4oG7NenvoIE/zD
GFxksxC+SYTT0hSDDrdo07kelQckk5b+3Mcjp/CFUhbCMnYmLvIwiUjT1noTKO7Q
Id9ruunhNqqJfg0Rim7nniu5abIT4qZvLfIfr9cFw3+Ns1mUWK OsQnuu/59ENIG6
UaVjlQAE/xDq7BG/e6flv2ccuVJhkYDOuMXy7At/pbwcFxg7FCTMiHwPAAaXlfQT
mlSRujcLNNsxZE8hjWGWVS8WZ5HgclTqA558ALiMz8Nh82qq1e oAUJ2MDR2x1Ozk
hjdg3nN6aLzsfzWpkv34SLTyfuJeFCd/yGDK9HFnc8+MZAos0EwOCI9/jHDL9XOk
37PHVhDD6eISZlzI+GCtSzihV6vPWGKiO+t3vx0TlG7vxRChTe OuMJDwQ6ytgpN0
GanaoevYnzGWQb9kZn+i//tfi3mReak/X0iS/RExoQSK0rfV4kR/v0x6szsUfSh4
1p8BltW+ZFHFJOKFlFYR
=cX8w
-----END PGP SIGNATURE-----
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

See the extundelete and testdisk packages.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

On Fri, 2011-10-14 at 23:40 +0100, Adel ESSAFI wrote:
> if I delete some files with rm; is it possible to restore them?

Yes, perhaps...

If, since you've deleted them, the space that they occupied on the drive
has not being re-used, then it is possible to get them back. But, if
the space has been re-used, the data is lost. And encrypted file
systems, or drives, may make it impossible.

--
[tim@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored. I
read messages from the public lists.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

Adel ESSAFI wrote:

> if I delete some files with rm; is it possible to restore them?

I recently undeleted some photos, using testdisk.
Basically, you have to specify what kind of files you are looking for.
In my case I specified JPG.

The process worked well, recovering dozens of JPG files,
including those I was looking for.
But I found the testdisk documentation almost completely unintelligible.
And I didn't find any good documentation on testdisk undelete
anywhere else.
Unfortunately I didn't keep a record of what I did.

I found testdisk very useful on another occasion,
recovering a corrupt partition table.
But again, I found the documentation difficult to follow,
eg at the start you are asked to specify the type of partition table,
with half-a-dozen options to choose from.
(The correct one in my case was "Intel/PC".)

Testdisk struck me as a very useful and versatile program.
If only someone apart from the author would explain how to use it.

--
Timothy Murphy
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

Timothy Murphy wrote:

> Adel ESSAFI wrote:
>
>> if I delete some files with rm; is it possible to restore them?
>
> I recently undeleted some photos, using testdisk.
> Basically, you have to specify what kind of files you are looking for.
> In my case I specified JPG.
>
> The process worked well, recovering dozens of JPG files,
> including those I was looking for.
> But I found the testdisk documentation almost completely unintelligible.

Looking again, I see that
<http://www.cgsecurity.org/wiki/TestDisk:_undelete_file_for_ext2>
explains reasonably clearly what to do.

--
Timothy Murphy
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines