vibinlakshman

[Log in to get rid of this advertisement]

I've come to knw only about testdisk , which when googled told that it is used as to recover lost partition
I need to retrieve deleted files , can I can make it with testdisk
So any one know other different tools , please also send tutorial for that appropriate tools

unSpawn

Been asked before. Try searching LQ for terms like "recovery" or "undelete" and tools like photorec, foremost and toolkits like the HELIX Live CD.

pixellany

testdisk is for file recovery......have a look at their website.

vlademir

Hi
please see this tutorial about how to recover deleted files using foremost

rweaver

It depends more on the file system than the distribution, are you using ext2, ext3, jfs, xfs, etc...

If you're using ext3 I highly recommend ext3grep for file recovery. Then of course data carving utilities.

vibinlakshman

I use ext2 !!

rweaver

Unless part of the file has been overwritten in ext2 its very easy to recover deleted files. Almost all the tools in the sleuth kit work well on it.

Lets see, there's unrm, e2undel, and debugfs that will undelete files in ext2 in many cases... then any datacarving tool will have no real problems carving the data out of the file system directly.

The biggest thing to remember with any recovery is unmount the file system asap so that your file doesn't get overwritten. Make a copy of the file system (dd to a file is an easy way), COPY that file, and work on the copy of the copy only.