Jim Cheetham wrote:
[snip]
. If you're trying to find out if you can undelete a file, then you need to have unmounted the damaged filesystem and started to poke around disk sectors manually. Try the Linux Kernel Hackers Guide http://en.tldp.org/LDP/khg/HyperNews/get/khg.html for more leads.You'll be _very_ lucky if you're doing this and you succeed. The most important thing is to get the partition in readonly mode immediately, as freed blocks are used on a 'last in, first out' basis, and the file you've just deleted is always the last one in!
-jim
Steve
