Maybe it could be possible to undelete file using a disk editor?
You could give a try: • Remount the filesystem read-only (if the file is on the root filesystem, you need to reboot the system in single-user mode). The longer you leave it, the more likely it is that some of the data will get overwritten. If you know the inode number of the file, you can skip next two steps. • Find which blocks contain the data (if you can’t figure this out, then you’re probably out of luck). • Find out which inode refers to these blocks. • Use debugfs’s dump command to save the inode’s data to a file.
Related Questions
- Now it is possible to open the file in a text editor. Its possible to write the BASIC program in a text editor too, but who does that?
- It is possible to unintentionally spoil data on a hard disk during training to work with Acronis Disk Editor?
- Is it possible to recover files, once it is wiped using Disk Doctors File Shredder?
