Recover Deleted Files in Linux
From Free Knowledge Base- The DUCK Project: information for everyone
Recovery of ext2 filesystem data
A tool called "recover" was developed which automates a process by seeking all the deleted inodes on your hard drive with debugfs. When all the inodes are indexed, recover asks you some questions about the deleted file. These questions are:
- Hard disk device name
- Year of deletion
- Month of deletion
- Weekday of deletion
- First/Last possible day of month
- Min/Max possible file size
- Min/Max possible deletion hour
- Min/Max possible deletion minute
- User ID of the deleted file
- A text string the file included (can be ignored)
Matching inodes are dumped into a directory you specify.
Recover is a sourceforge project: http://recover.sourceforge.net/
Recover is available for automatic install on ubuntu / kubuntu using the Adept Manager (it is a deb package).
It can be used on a mounted filesystem as long as the filesystem is ext2.
