What happened was my server got compromised.
The hacker did rm -rf /
which resulted to my files being deleted.
I want to restore the files from a user.
Im running in debian squeeze in Xen Server. I have a Vritual drive which it is installed. Now im wondering how can I restore or check the certain files I need. Some files I need are mostly 300mb++ in size.
is it possible to restore them?
Deleted files using rm -rf /
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
cgrenier
- Site Admin
- Posts: 5418
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
- Contact:
Re: Deleted files using rm -rf /
Try TestDisk, Advanced, Undelete but usually it only works for ext2.
If it doesn't work, run PhotoRec 6.14-WIP
Good luck
If it doesn't work, run PhotoRec 6.14-WIP
Code: Select all
wget -N http://www.cgsecurity.org/testdisk-6.14-WIP.linux26.tar.bz2
tar xjf testdisk-6.14-WIP.linux26.tar.bz2
cd testdisk-6.14-WIP
sudo ./photorec_static