[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Recovering files

From: Matt Schalit
Subject: Re: Recovering files
Date: Thu, 31 Jan 2002 09:15:19 -0800

Bob Proulx wrote:
> >       Is there any way to recover files deleted by using
> > "$rm -rf "
> Extremely unlikely.  It depends upon your operating system and
> filesystem used with it.  The disk blocks would have been freed and
> very likely reused by other files especially on an active file system.
> But here is not a good place to ask that question.  I would suggest
> asking your question in the comp.os.questions news group.
> Bob

Heya Bob,  I lost the original thread, but this question comes
up every once in a while, for which I have an answer.  The user
may want to look into The Coroner's Toolkit, unrm, and lazarus.

Start here: http://www.porcupine.org/forensics/tct.html

It's pretty well respected, and there's an example writeup
using it on Dr. Dobbs.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]