Method one extundelete to recover deleted files
1. Installation dependency
The code is as follows |
Copy Code |
Yum-y Install E2fsprogs E2fsprogs-devel
|
2. Go to http://extundelete.sourceforge.net/to download extundelete-0.2.4.tar.bz2 and install
The code is as follows |
Copy Code |
TAR-XJF extundelete-0.2.4.tar.bz2 CD extundelete-0.2.4 ./configure Make Make install |
3. Recovery
The code is as follows |
Copy Code |
extundelete/dev/*** (Mounted hard disk) –restore-all (can be DF to confirm the deleted folder on the hard drive) |
4. Go to the current directory Recovered_files to see the recovered file.
Method two securecrt recover deleted files
First, use the SECURECRT remote to the operating system, view the current system version number, and file system format
Second, in order to facilitate this experiment, we create a new document.
Third, perform the delete operation
IV. application, System self-tooling Debugfs to repair
V. Open, the partition where the file is just deleted
Use the LS plus-d parameter to display the directory where the file was just deleted
Seven, the display has <> the angle bracket is we are looking for the file inode number executes logdump–i <393289>
Eight, after executing the command, display a screen of information, we need the following line, and to remember that the next value
Ten, execute the following command
11, the above results indicate the success of the recovery we look at the/tmp directory in the end there is no
12, the TMP directory has we show it,