If you ever wanted to learn about File systems now is the time. 
Because of the way Unix deletes recovery is quite a bit more of a
bear.  Unix actually deletes the file.  Windows just changes the
first byte from a character to an available flag.  That's why
norton recovery will ask you the first letter of a filename.  In
Unix, it's pretty well gone, from the get go.  HOWEVER, there are
3 programs you can try.  I've not had the best of luck on
recovery, but then those drives where scrambled not reformated.

http://e2undel.sourceforge.net/  --- a product called e2undel

(he has a howto on quick recovery here. 
http://e2undel.sourceforge.net/recovery-howto.html)

http://recover.sourceforge.net/linux/recover/  -- a program called
recover seems to be less sophisticated than the one above.

http://freshmeat.net/projects/athena-delete/?topic_id=861 

No docs what so ever.  Your on your own here. It's part of the
Athena project from MIT so help is probably pretty scarce as well.

Over all I'd go with e2undel if for no other reason than his sight
is a storehouse of info on this subject.  One point ..... unmount
the partition until you are ready to start recovery.  That way....
nothing changes on it.

James


On Mon, 8 Apr 2002 15:22:47 -0300 (EST)
Paulo Justiniano Ribeiro Jr <[EMAIL PROTECTED]> Grabed a
keyboard and said:

> Hi
> First of all thanks for the replies.
> I should have provided a few more details in my original post.
> Let me clarify some points:
> 
> - the partition was of the type "ext2" (with home directories of
> the 
>   users)
> 
> - the formating was done during the "expert" instalattion of
> Mandrake 8.2.
>   I was using the partition tool provided by the installation
>   program. I've selected the partition (and picked the wrong
>   one...) and press the button "format" in the menu.
>   It was formated as a Linux partition "ext2".
> 
> - I have not changed the size of the partition or any other
> parameter.
>   What I  meant by *untouched* is: I have not used the partition
>   since then i.e I have not written or copy or done any other
>   operations in it (the partition is "resting in peace" - as it
>   is my data...)
> 
> The damage is partial since I have a 2 weeks old backup.
> However there are files which would be very useul to recover and
> I found the question interesting on its own.
> 
> Still hoping...
> 
> Cheers
> P.J.
> 
> 
> On Mon, 8 Apr 2002, Randy Kramer wrote:
> 
> > J. Craig Woods wrote:
> > > How will knowing the filesystem help? You say the partition
> > > is still there, and "untouched". Well, my friend, if you
> > > have re-formatted the drive, it is not *untouched*. As a
> > > matter of fact, it is touched in a big way. Your data is
> > > gone, gone, gone. Now if you only deleted the partition by
> > > removing boundaries, there is help. It is complicated but
> > > you can recover data.
> > 
> > Interesting subject that I'd like to learn more about.  
> > 
> > My impression is that Linux does something by default more
> > like what is called a "quick format" in dos / Windows.  IIUC,
> > such a format doesn't"zero out" all the data, but does
> > something different which, I believe leaves the data intact on
> > the disk, but not easily readable.  Maybe there is a way to
> > recover the data?
> > 
> > There are ways to recover deleted files in Linux, especially
> > if they are text files.  IIUC, it is not fun -- you basically
> > read the disk "raw" and then try to reassemble the files from
> > clusters or whatever.
> > 
> > The original poster did do a good thing (I think) if he tried
> > to avoid using the system after he formatted the drive -- the
> > most important thing in recovering files in dos / Windows is
> > to stop saving files until you can run a file recovery
> > program, as any new file might overwrite some portion of the
> > deleted file.
> > 
> > I know I'm mixing "deleted file" and "formatted partition" and
> > probably confusing the issue -- may someone can clarify some
> > of these points?
> > 
> > Randy Kramer
> > 
> > 
> 
> Paulo Justiniano Ribeiro Jr
> Departamento de Estatistica
> Universidade Federal do Parana'
> Caixa Postal 19.081
> CEP 81.531-990
> Curitiba, PR  -  Brasil
> 
> e-mail: [EMAIL PROTECTED]
> http://www.maths.lancs.ac.uk/~ribeiro (english)
> http://www.est.ufpr.br/~ribeiro (portugues)
> 
> 
> 
> 

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to