[comp.unix.admin] Is there a way to recover deleted files ?

malcolm@hemel.bull.co.uk (Malcolm Preen) (05/16/91)

I received a call this morning from someone who has had the entire /usr
directory structure rm'd. Their last backup was done over one month ago.

Has anyone got any ideas on whether or not it is possible to recover the
data from the disk, and how ? As far as I have managed to ascertain, it is
not possible through any normal methods, however, I guess, if you know the
physical layout of the disk and have an appropriate tool you maybe able to
sector edit it, or get a hardware engineer to "undelete" the files.

Any ideas on the validity of these, and how we would go about it.

The current situation is that the old backup is being restored, but a
physical copy of the disk has been saved before any restore were attempted.

Thanks in advance,

Malcolm

--
+-----------------------+------------------------------+
|Malcolm Preen          |Malcolm.Preen@hemel.bull.co.uk| "If I claimed I was an 
|Bull HN Info. Sys. Ltd.|HM14 UK03                     |  Emperor just because
|Maxted Road            |Tel: +44 442 232222 x4367     |  some moistened bint
|Hemel Hempstead        |Fax: +44 442 236072           |  lobbed a scimitar
|Hertfordshire, ENGLAND |                              |  at me, they'd 
|HP2 7DZ                |                              |  put me away"
+-----------------------+------------------------------+