doomclaw.de » undelete http://doomclaw.de here be daemons Sat, 03 Dec 2011 10:07:20 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Data recovered http://doomclaw.de/index.php/2009/08/24/data-recovered/ http://doomclaw.de/index.php/2009/08/24/data-recovered/#comments Mon, 24 Aug 2009 07:40:52 +0000 skaven http://doomclaw.de/?p=67 I managed to recover the accidently deleted data. Due to the fact, that I recognized my mistake while the deletion process I unmounted the partition directly afterwards and made an image of it with dd.
After some searching on the internet I’ve found ext3grep. With one simple command everything was restored, since I knew the date of deletion.

ext3grep $IMAGE --restore-all --after=1250740800

This command restored all recoverable files from $IMAGE (which represents the path of my dd-Image) after Thu, 20 Aug 2009 04:00:00 GMT (referenced by the UNIX timestamp 1250740800).
Since I had unmounted the partition ther were no write actions after the deletion, so each deleted file was recoverable.

Email
]]> http://doomclaw.de/index.php/2009/08/24/data-recovered/feed/ 0