On Wed, Aug 19, 2009 at 04:49:29PM +0000, Marlene Harris wrote: > Hi everyone, Hi Ellen, > I'm trying to recover some files which were accidentally deleted, then the > trash was emptied as well. Nothing else was saved on the computer since > then, and I have been trying to recover them with the debugfs command. I can > see a number of deleted files, but not the directory the files were in, > which was also deleted. As you have noted, nothing else was saved on the computer since then, but normal activity on that computer may have already overwritten that erased data unless your disk is partitioned to avoid writing to the partition in question. Such bits might be the syslog (in /var/log) or .bash_history (in /home/$USER). I'm assuming EXT3 here? > How can I go about recovering these files or the entire deleted directory. > I'm not sure how the dump command works, or any other command that will > recover them. I'm running Ubuntu 9.04. You might have a look at testdisk and/or photorec. http://www.cgsecurity.org/wiki/TestDisk Don't install them on the machine in question or their installation may overwrite those erased bits. photorec is a standalone binary that can be written to a usb stick and executed from there. > Thanks, Good luck! > Ellen slainte mhath, RGB -- Richard Guy Briggs -- ~\ -- ~\ <hpv.tricolour.net> <www.TriColour.net> -- \___ o \@ @ Ride yer bike! Ottawa, ON, CANADA -- Lo_>__M__\\/\%__\\/\% Vote! -- <greenparty.ca>_____GTVS6#790__(*)__(*)________(*)(*)_________________