Recovering lost files

**tech291083** · 10-17-2007, 02:28 PM

hi,

I just deleted some files by mistake. How can I get them back if at all? Is there a command that can show mw the names of the files deleted?

Here is the recent history, can't understand as to which command deleted some of the files on different folders on the desktop. Thanks...

894 find . -name *.txt -size +40k -ls
895 find . -name *.txt -size +30k -ls
896 find . -name *.txt -size +20k -ls
897 find . -atime +30 -exec rm {} \;
898 cd ..
899 gnome-system-log
900 gnome-system-log
901 kde-system-log
902 ls /usr
903 clear
904 uptime
905 pwd
906 ls
907 /
908 cd /
909 ls
910 cd ..
911 ls
912 cd ..
913 exit
914 service httpd status
915 service selinux status
916 service se-linux status
917 uptime
918 redhat-logview
919 redhat-logviewer
920 redhat-viewlog
921 clear
922 ls
923 ls .
924 ls ..
925 clear
926 uptime
927 cd Desktop
928 ls
929 mkdir green
930 touch green/color.txt
931 ls green
932 ln -s green blue
933 ls
934 ls green
935 ls blue
936 cd blue
937 pwd
938 ls
939 cd ..
940 ln -s blue yellow
941 ls
942 ls yellow
943 cd green
944 vi color.txt
945 vi color.txt
946 cd ..
947 cd blue
948 ls
949 vi color.txt
950 cd ..
951 cd yellow
952 ls
953 vi color.txt
954 vi color.txt
955 cd ..
956 cd green
957 touch hello.txt
958 ls
959 ls -l
960 cd ..
961 cd green
962 ls
963 mv color.txt nocolor.txt
964 ls
965 rm hello.txt
966 cd ..
967 cd blue
968 ls
969 cd ..
970 cd yellow
971 ls
972 cd ..
973 rmdir green
974 rmdir green
975 rmdir -f green
976 rmdir -rf green
977 rm -rf green
978 ls
979 rm -rf blue
980 ls
981 rm -rf yellow
982 ls
983 du -sh
984 du -h
985 cd Desktop
986 du
987 cd Desktop
988 du
989 du -h
990 du -h
991 du -h
992 du -sh
993 du -sh
994 ls
995 cd Ora*
996 ls
997 du -h
998 du -sh
999 du -sh
1000 cd Desktop
1001 du -sh

**redhead** · 10-17-2007, 07:27 PM

My guess is find . -atime +30 -exec rm {} did the dirty deed.
And NO, there is no way of regaining files deleted.

**Kernel_Killer** · 10-18-2007, 11:05 AM

You can always try The Coroner's Toolkit, and see what fragments it finds to restore. If you have been adding a lot more files to the system, it's quite possible that you have overwritten the fragments, but there is always a chance.