Friday, January 11, 2013

HOWTO: recover deleted files from an ext3 or ext4 partition

extundelete

extundelete is a utility that can recover deleted files from an ext3 or ext4 partition. extundelete uses information stored in the partition's journal to attempt to recover a file that has been deleted from the partition.

But, there is no guarantee that the deleted file will be able to be undeleted!

For example:
[ ]# extundelete /dev/sdc1 --restore-all

extundelete will restore any files it finds to a subdirectory of the current directory named “RECOVERED_FILES”.

No comments: