Partner Sites:
Hard Drive Data Recovery - Physical Failure | Recover Deleted Files from Windows
Hard Drive Data Recovery - Software Failure | Recover Deleted Files from Linux / UNIX

Recovering Deleted Files in UNIX on non-ext2 partitions:

See Also: Recovering Deleted Files in Linux/UNIX and Recovering Files with Midnight Commander.

If you really need to undelete a file, that's the way to do it:

grep -a -B[size before] -A[size after] 'text' /dev/[your_partition]
Replace [size before], [size after] and [your_partition] with something meaningfull.

If you want to undelete a letter (+- 200 lines) starting with "important document" which was stored on /dev/hda1 you can try:

grep -a -B2 -A200 "important document" /dev/hda1
Make sure you do this as root.

Contact Us | Other Resources

Copyright 2003-2004 Data Recovery Pros & JPL Networks