How can I recover (undelete) deleted files from my ext3 partition?
Actually, you can’t! This is what one of the developers, Andreas Dilger, said about it:In order to ensure that ext3 can safely resume an unlink after a crash, it actually zeros out the block pointers in the inode, whereas
ext2 just marks these blocks as unused in the block bitmaps and marks the inode as “deleted” and leaves the block pointers alone.Your only hope is to “grep” for parts of your files that have been deleted and hope for the best.
Man koennte sich libtrash installieren oder einfach vorher ueberlegen.
Christian Fromme
With forensic tools, this should be possible. But the time and money you needed to make this happen might not be worth it. I know someone who once read his HD in raw-mode and searched the deleted blocks back together. To completely, totally delete an information on your HD, you would need to overwrite the corresponding sectors many many times with random rubbish, otherwise recovering the information is always possible.
alex
“oder einfach vorher ueberlegen.”
…danke für die blumen.