Friday, March 14, 2008

Undelete Files on EXT3

Carlo Wood has made a tool to undelete files on EXT3 filesystem. It's called ext3grep. This tool is available after he accidentally delete data in his home directory (3 GB) with rm -rf (one nasty command -- DO NOT TYPE THIS ON YOUR SYSTEM AS ROOT!!).

He then studied how EXT3 works and created a tools to recover the files. He also provides explanation about basic EXT3 scheme and some demos on the tools he created. The program is still under heavy development and he can't guarantee that it will out for you since he stopped the development as soon as he managed to recover his files.

The source code is not available for download, but you can send him an email and asked for the source code and he probably will give the source code for you.

Update (9 June 2008): Thanks to John C. Young, he gave me this link : http://code.google.com/p/ext3grep/. It contains the project page as well as the source code for this project. Have fun with it big grin

3 comments:

  1. This might be an update from your post. I just stumbled across his page (for not the best of reasons, needless to say) and was able to come across the link to the source code right away -


    Source Code on Google Code

    You can download the latest source code for ext3grep as well as review other information on the GoogleCode pages for this project.

    http://code.google.com/p/ext3grep/

    Enjoy & have at it! :)

    Regards,

    John C. Young
    Internet Gateway of South Beach
    http://www.igsobe.com

    ReplyDelete
  2. thanks, i will update this post

    ReplyDelete
  3. Anonymous6:31 PM

    To begin with, "find . *.foo -delete" is just as bad if you forget the -iname... ;-(

    That said, ext3grep has been extended and apparently superceded by the "extundelete" project. Now featuring a --restore-directory option...

    http://extundelete.sourceforge.net/
    http://sourceforge.net/projects/extundelete/

    ReplyDelete