ntfsundelete

recover a deleted file from an NTFS volume.

copy
3
0
ntfsundelete /dev/hda1 -c 3689-3690 -o debug

source | details |

copy
0
0
ntfsundelete /dev/sda1 -u -i 2,5,100-131

source | details |

copy
1
0
ntfsundelete /dev/hda1 -S 5k-6m -p 90

source | details |

copy
0
0
ntfsundelete /dev/hda1 -u -i 3689 -o work.doc -d ~

source | details |

copy
1
0
ntfsundelete /dev/hda1 -s -m '*.doc'

source | details |

copy
0
0
ntfsundelete /dev/hda1 -t 2d

source | details |