Originally posted by: flodstrom
I think this depends on how far you really want to go with this, or in other words how important were those files really?
First you must stop with all I/O activity (especially writing operations) on the file system where the files were deleted (unmount the file system, single user mode, etc.). In case there were activity (still is?) on the file system after the incident than it might already be to late to get anything back.
However, in case you reacted quickly, try the undelete tool from
http://www.compunix.com . You can use the scan tool for free to see if there's anything left to save, but to actually recover files you need to pay for the license.