Forum › Forums › New users › New Users and General Questions › Deleted file recovery
- This topic has 3 replies, 2 voices, and was last updated May 11-9:03 am by Xecure.
-
AuthorPosts
-
May 10, 2020 at 12:45 am #35772Member
andfree
Hi. I’ve deleted a doc file by mistake. I haven’t restarted the session. Is there any simple way to find it? Is it somewhere in the system as temporary file or sth? I’ve tried LibreOffice Writer -> File -> Recent Documents, but:
/home/user/Documents/Untitled 1.odt does not exist.May 10, 2020 at 1:18 am #35775Member
Xecure
::I don’t know if this will still work (it worked on stretch), but I found an old post in the forum recommending different solutions to recover a deleted file:
https://www.antixforum.com/forums/topic/how-can-i-undelete-files-that-midnight-commander-deleted/#post-10112antiX Live system enthusiast.
General Live Boot Parameters for antiX.May 10, 2020 at 10:45 pm #35788Memberandfree
::Thanks for your reply. But it’s not worth the trouble, it’s much easier for me to create the file again. Luckily, I hadn’t written much, yet. I just wondered if somewhere in the file-system was a folder where copies of recently used files remain for a while and, so, somebody could find them easily, but it seems there’s not.
May 11, 2020 at 9:03 am #35774Member
Xecure
::I don’t know if it will work for you, but here is a solution I found on the forum (some packages may no longer be available).
powerdown shutdown ASAP (avoid further writes to the drive)
boot from liveusb, sudo apt-get install testdisk https://packages.debian.org/stretch/testdisk
It installs a program called “photorec”. Hey you might want to try the testdisk utility, but I would jump right to photorec.
Read the photorec manpage, and read here https://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step#Selection_of_files_to_recover
You probably want to uncheck all the filetypes you are not interested in.If no success with photorec, and the drive is formatted ext3 or ext4, install https://packages.debian.org/stretch/autopsy and https://packages.debian.org/stretch/extundelete
If all comes to all, debian has additional drive forensics tools available
https://packages.debian.org/stretch/scalpel
https://packages.debian.org/stretch/magicrescue
https://packages.debian.org/stretch/sleuthkitantiX Live system enthusiast.
General Live Boot Parameters for antiX. -
AuthorPosts
- You must be logged in to reply to this topic.