////////////// IF YOU HAPPEN TO READ THIS ////////////////////////////////
Q: How can I recover (undelete) deleted files from my ext3 partition?
Actually, you can't! This is what one of the developers, Andreas Dilger, said about it:
In order to ensure that ext3 can safely resume an unlink after a crash, it actually zeros out the block pointers in the inode, whereas ext2 just marks these blocks as unused in the block bitmaps and marks the inode as "deleted" and leaves the block pointers alone.
Your only hope is to "grep" for parts of your files that have been deleted and hope for the best.
////////////////////////// THIS IS NOT TRUE ///////////////////////////////////
You can get your deleted data from linux machine also. I have done
$rm -rf folder/
but this program recovered the complete data back.
ext3grep: http://code.google.com/p/ext3grep/
This is an excellent tool, and more importantly it really works.
Its working instructions can be found here.
http://www.xs4all.nl/~carlo17/howto/undelete_ext3.html
No comments:
Post a Comment