Unerase Files

[Andrew Zajac]

On 11/7/07, Jan Sneep <jan at azureservices.ca> wrote:

> I searched the package manager and the only thing that looks like it might
> do the trick is "gddrescue", but before I make things worse I thought I had
> better ask what's the best approach.
>

Probably using dls from the sleuth kit would be more helpful.  Dls
will pull all the unallocated blocks from your filesystem.  That's
were your deleted files are.  Use data carving software like foremost
or photorec to pull files from that image.

I would stop using that filesystem ASAP as any normal use creates and
deletes files all the time and any of them can be overwriting your
data.


az