If you have no idea what was the name of the file but you can recall the directory the file was stored in, then run the command as below. That is why they do not start with a '/'. There are two versions currently offered, a live CD and a live DVD, with the DVD version offering many more applications and tools than the Knoppix CD. Note: The filenames are relative to the partition and not the absolute path. Knoppix is probably the progenitor of all Linux 'LiveCDs', and is still the source on which many of these live-Linux-on-a-CD distributions are based. $ src/extundelete /dev/sda6 -restore-file home/xuniaw/filename Now replace the name of the disk accordingly as in the example below. $ lsblk Running Extundeleteĭepending on the output from lsblk you can see the name of the partitions. To restore you need to identify the disk name, for example with the lsblk command. undelete tool supports FAT12/16/32, NTFS, NTFS5 and Ext2FS (Linux) file systems. Once you make your choice, you’re greeted with a list of the storage media on your machine. If you’d like, you can create a log file, though it won’t affect how much data you recover. $ src/extundelete -help Identifying Partition Boot from the Kaspersky Rescue Disk to scan and remove threats from an. Start it by opening a terminal (Applications > Accessories > Terminal) and typing in: sudo testdisk. To unmount and remount the disk as read only: $ mount -o remount,ro /dev/sda6Įither mounting as read only or unmounting will work.Īt any one time you get stuck you can use the -help option. You can also mount the disk as read only. Stop all processes that are carrying any write operations on the disk you want to recover data from and unmount the disk.
If you find it necessary to install it, run the command, however in this tutorial we will be running it from the current directory. Now is time to recover those files you deleted accidentally.Įxtundelete can be run without installing it in your system. If you did not encounter any errors, then the executable file is stored in src folder in the extundelete-0.2.4 folder. Run the configure script and if by any chances it does not run due to lack permission, make the script executable by $ chmod u+x configure $ tar -xjf extundelete-0.2.4.tar.bz2Ĭhange directory to the extracted folder as follows. Unzip the files you downloaded from the sourceforge page. If you have successfully installed the two libraries the next step is to compile the source code. $ sudo apt-get install e2fsprogs Compiling Extundelete A graphical utility that would let me go through the directory tree would be really handy here.To install ex2fslibs and e2fsprogs in Ubuntu: $ sudo apt-get install ex2fslibs-devel Secondary question: Is the directory structure of that partition lost? All of the utilities are just listing the files in alphabetical order, which is nuts.
Or at least that would be the best method. But I don't have a 700 GB disk or partition - I need to recover the files in place. The Ultimate Boot CD has a similar utility (another disk I had lying around) and it looks like ntfsundelete does the same thing. It looks like SystemRescueCD has a utility called TestDisk which will allow deleted files to be copied over to another disk or partition. I guess there are more tools dedicated to this task available there.I'd be happy to try whatever on whichever platform, but I don't know of any appropriate utilities.
As an addition to the excelent advice above: as it all happened on a non-Linux file system, wouldn't it be better to try the recovery on a native NTFS system (some Windows).