Hi,
I assume it was removed via rm or rm -rf?
There is no way ( that I know of ) to recover from that if you have turned off the computer. This is because any inode links will have been aged out and no longer available. In that case if you have a backup somewhere then that is the only recovery method available.
If your computer and session is still available where you did the delete then you could use: lsof
there should be a process id still available:
On command line issue:
$ lsof | grep filename( the one you deleted )
Assuming this came back with a value then you are in with a chance to recover.
in /proc there will be a file with the same process id number returned in above.
$ ls -l /proc/<pid>/..
$ cp /proc/<pid>/../<number> filename.recover
$ cmp filename.recover filename.orig ( whatever you really called it )
Assuming no complaints from cmp then you are back in business.
Tips:
1. check out man lsof or even google it
2. If using rm use the -i switch to ensure you are prompted before the delete actually occurs.
3. These days storage is so cheap so I often find it better to just compress zip and archive stuff i no longer want. Then if after nn years I still dont want it then delete...
good luck and cheers
