24

08/09

Data recovered

09:40 by skaven. Filed under: Uncategorized
Tags: , , , ,

I managed to recover the accidently deleted data. Due to the fact, that I recognized my mistake while the deletion process I unmounted the partition directly afterwards and made an image of it with dd.
After some searching on the internet I’ve found ext3grep. With one simple command everything was restored, since I knew the date of deletion.

ext3grep $IMAGE --restore-all --after=1250740800

This command restored all recoverable files from $IMAGE (which represents the path of my dd-Image) after Thu, 20 Aug 2009 04:00:00 GMT (referenced by the UNIX timestamp 1250740800).
Since I had unmounted the partition ther were no write actions after the deletion, so each deleted file was recoverable.

Email

RSS feed for comments on this post.

TrackBack URL



ATTENTION: If the optional Website field links on a pure commercial website I reserve the rights, to claim charges for the advertisement placed. The invoice amount will be calculated as follows 100,00€ x pagerank of the advertised website, but at least 200,00€. By clicking the "Submit Comment" button you accept these terms and bind yourself by contract to pay the invoice sent within 14 days.


ACHTUNG: Sollte der Inhalt des optionalen Website-Feldes auf eine rein kommerzielle Seite verlinken, so behalte ich mir das Recht vor für die platzierte Werbung eine Gebühr zu verlangen. Diese Gebühr wird 100€ x Pagerank der verlinkten Seite betragen, mindestens jedoch 200€. Durch das anklicken des "Submit Comment"-Buttons erkennen Sie diese Regelung an und verpflichten sich die gegebenenfalls versendete Rechnung binnen 14 Tagen zu begleichen.