Recover Deleted Files on Linux with Extundelete

Extundelete is a utility tools for recovering deleted file. What make it usable is that the utility has a capability to recover data from an ext3 and ext4 partition. The ext3 file system is the most common file system on Linux distro (openSUSE 11.1 and former version provided it by default) while ext4 is the successor.
Beware that Extundelete has no guarantee to successfully recovering your files but it still better to have a choice to rescue your data than simply cries and leave your file gone away 😛 . Actually, I’ve also trying another tool from RIP Linux (Recovery is Possible Linux) beside Extundelete and will be discuss it later on next article.
How to use Extundelete utility on openSUSE?

  1. Go to openSUSE Build Service, select appropriate openSUSE version and then install it with One-Click-Install feature
    `
    openSUSE Build Service
  2. Shut down your computer, attach the suspect disk (disk where your data has accidentally deleted). Beware, do not mount it
  3. Check the suspect disk with fdisk -l command on konsole or terminal
  4. Recover all deleted files with the following command (replace /dev/sdb2 with your suspect disk)
    [code language=’cpp’]
    extundelete /dev/sdb2 –restore-all
    [/code]
    You may also use –restore-files parameter to restore selected path/folder or use –restore-inode to restore a specified inode. Simply run extundelete without any parameter will display all options.

Please note that Extundelete will automatically create a new folder called RECOVERED_FILES and/or RESTORED_FILES (folder created depend on your parameter) to saved any deleted files that has been successfully recovered.

7 thoughts on “Recover Deleted Files on Linux with Extundelete

  1. Sory Om Vavai, klo hard disk yg sudah kena format, apakah masih bisa di recovery? pernah coba berbagai macam tools, tp blum ada yg bisa. Oh ya 1 more jika partisi yg hendak di recover merupakan partisi bagian dari “/” yg notabennya harus di mount di awal gimana Om Vavai? apakah masih bisa?

  2. Sory Om Vavai, klo hard disk yg sudah kena format, apakah masih bisa di recovery? pernah coba berbagai macam tools, tp blum ada yg bisa. Oh ya 1 more jika partisi yg hendak di recover merupakan partisi bagian dari “/” yg notabennya harus di mount di awal gimana Om Vavai? apakah masih bisa?

  3. Hi Bowo,
    1. You may still have a chance to recovering the formatted disk, I’ll be covering how to try to rescue data from formatted disk on next article (using RIP Linux)
    2. Let’s make it clear that you must (should) recover data on offline mode, it means that you must attach the suspected disk onto another working system, not in your suspected data itself.

  4. Hi Bowo,
    1. You may still have a chance to recovering the formatted disk, I’ll be covering how to try to rescue data from formatted disk on next article (using RIP Linux)
    2. Let’s make it clear that you must (should) recover data on offline mode, it means that you must attach the suspected disk onto another working system, not in your suspected data itself.

Leave a Reply

Your email address will not be published. Required fields are marked *