[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
Re: Recovering files
From:
Matt Schalit
Subject:
Re: Recovering files
Date:
2002年1月31日 09:15:19 -0800
Bob Proulx wrote:
>
> > Is there any way to recover files deleted by using
> > "$rm -rf "
>
> Extremely unlikely. It depends upon your operating system and
> filesystem used with it. The disk blocks would have been freed and
> very likely reused by other files especially on an active file system.
>
> But here is not a good place to ask that question. I would suggest
> asking your question in the comp.os.questions news group.
>
> Bob
Heya Bob, I lost the original thread, but this question comes
up every once in a while, for which I have an answer. The user
may want to look into The Coroner's Toolkit, unrm, and lazarus.
Start here: http://www.porcupine.org/forensics/tct.html
It's pretty well respected, and there's an example writeup
using it on Dr. Dobbs.
Enjoy,
Matthew