S
S
Sergey2014-03-23 20:31:00
linux
Sergey, 2014-03-23 20:31:00

Linux: How to recover a deleted file?

ext4 file system. Most tools work by scanning the entire partition for deleted files. In my case, I know which file is deleted, and when, in which directory.
It is necessary to restore this file with minimal effort (preferably with window utilities).
PS By the way, it is overwritten. It would be desirable to receive the previous contents of a file. How to be?

Answer the question

In order to leave comments, you need to log in

4 answer(s)
P
Puma Thailand, 2014-03-23
@opium

Alas, there are no easy ways, except for backup.

K
Kirill, 2016-12-15
@KozhinKirill

if the file is still open (can be checked with lsof command)
the second column contains the pid of the processes using this file,
take it and see what is in the file descriptor directory of this process
this command will list the file descriptors opened by the process
copy the desired descriptor to the new filename
voila

@
@dleshko, 2014-03-23
_

try r-studio:
www.data-recovery-software.net/ru
did not notice PS - I think the chances in this case are zero

M
motandi, 2014-03-31
@motandi

Make backups!

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question