views:

615

answers:

5

Do you know of any tools/commands by which I recover files which I accidentally removed?

A: 
Lucas Jones
Sorry, but you can. Just not trivially.
Eddie
When you have overwritten the whole file with random numbers about thirty times, *then* it is permanently deleted. Otherwise not.
Federico Ramponi
Ouch! Oops - corrected. At least someone voted me up, so I haven't lost any rep! :D
Lucas Jones
+8  A: 
  • Don't do anything on the partition; unmount it as it is;
  • Install the TestDisk suite, or boot from a live distribution with a recovery suite installed (see the TestDisk wikipedia page);
  • I found the PhotoRec utility very useful in similar situations (it was on a VFAT partition, but I guess it works also on ext2).
Federico Ramponi
+1  A: 

How critical is it? You can, but it's using forensics methods. This means you'll want to unmount the drive, remount it read only and then use something like Helix to carve at the drive to recover it.

Tom Ritter
+1  A: 

Sorry to here about your troubles - I would start poking around for file recovery utilities but don't get your hopes up.

Are you using an ext3 file system? If so then even file recovery utilities will not help you there - here is some info on ext3.

Andrew Hare
A: 

Better talk to your SA about recovering a backup.

Failing that, you are likely out of luck.

Jon Ericson