Arch Linux

presario

Member

From: Tashkent, Uzbekistan

Registered: 2008-12-07

Posts: 57

Website

need help with recovering a deleted file

Hello,

I had downloaded the file PCBSD8.0-x86-DVD.iso which is more than 3 gigs. I wanted to remove a link to this file with the rm command. But after pressing enter I immediately cancelled with ^C. The file is there but it has become 0 byte in size.

"stat PCBSD8.0-x86-DVD.iso" command produces the following output:

  File: `PCBSD8.0-x86-DVD.iso'
  Size: 0             Blocks: 0          IO Block: 131072 regular empty file
Device: 902h/2306d    Inode: 1537866     Links: 1
Access: (0644/-rw-r--r--)  Uid: ( 1004/   jamol)   Gid: (  100/   users)
Access: 2006-03-04 18:40:17.000000000 +0500
Modify: 2006-03-30 13:29:41.000000000 +0500
Change: 2006-03-30 13:29:34.000000000 +0500

I know the original size and md5 of it.

3446302720 bytes
0545f7be6ba49d7f4bf41b27c2d4ab98

Filesystem block size is 512 bytes. So that is: size/512=6731060 blocks.

I think that it is possible to recover this file with dd utility or by modifying the inode of the file setting it's size to 3446302720 bytes. For the first approach I need to find out the starting block and read 6731060 blocks after that block.

I really don't want to download it again with my extremly slow connection. So any help would be appreciated.

---

Running ArchLinux on Compaq Presario v2000

Diaz

Member

From: Portugal

Registered: 2008-04-16

Posts: 366

Re: need help with recovering a deleted file

I had to recover something that i deleted a fe days ago.
I used extundelete, it worked, i couldn't recover all of the files just some, but it is better than anything.

If u need to recover a file try not to change any file in the partition where u deleted it.