26 Jun
2010
26 Jun
'10
3:39 p.m.
Beyond mounting the disk read-only and doing a
poweroff on the VM,
then me providing you with a disk image file for you to take to a
recovery expert, I don't think there's much that could be done.
http://www.stellarinfo.com/linux-data-recovery.htm
I've used their Windows products before with success, but if you've been writing
data back to those drives since the delete then you're increasingly unlikely to be
able to recover anything.
Also I'm not sure how you'd get this installed on the VM - as it uses a USB dongle
thingy to prevent piracy.
If it's an ext3 filesystem then I think it's "strings" that may be of
use: http://csummers.com/2005/12/20/undelete-text-files-on-linux-ext3-partition/
Ext2 filesystems you can apparently use debugfs to find files marked as deleted and
restore.
HTH
Alex
This email carries a disclaimer, a copy of which may be read at
http://learning.longhill.org.uk/disclaimer