Answer the question
In order to leave comments, you need to log in
Linux: How to recover a deleted file?
ext4 file system. Most tools work by scanning the entire partition for deleted files. In my case, I know which file is deleted, and when, in which directory.
It is necessary to restore this file with minimal effort (preferably with window utilities).
PS By the way, it is overwritten. It would be desirable to receive the previous contents of a file. How to be?
Answer the question
In order to leave comments, you need to log in
if the file is still open (can be checked with lsof command)
the second column contains the pid of the processes using this file,
take it and see what is in the file descriptor directory of this process
this command will list the file descriptors opened by the process
copy the desired descriptor to the new filename
voila
try r-studio:
www.data-recovery-software.net/ru
did not notice PS - I think the chances in this case are zero
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question