While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.
how to recover formatted truecrypt partition
Hi, recently I did a factory recovery on my lenovo laptop and I did in an unusual way, I did the recovery from the Windows XP rescue and recovery dvd (originaly there was a Windows 7 OS on my laptop) and I was kinda suprised that the recovery process formated the entire physical drive instead of just C:\ (system volume).
Thing is that there was one small truecrypt partition (E:\) with a valuable data on it and now I want to get it back! I am looking at the drive in some recovery software, I can see all the data from my data volume (D:\) and they are just ok but I do not want to touch the drive in any way till I get the idea how to recover the truecrypt partition.
I was already checking this site and found this http://www.experts-exchange.com/Storage/Hard_Drives/Q_23780932.html but it was of no use to me. The Norton Disk Doctor is really hard to find and it's functionability is, I guess, outdated. I also found out that from functional point of view programs such as GetDataBack and TestDisk are not for me at this point. Besides the question on that link is concerned on truecrypt volume that spanned the entire drive, which is not my case here.
The biggest problem here is that during the factory recovery process the drive was not only formatted but it also installed a new copy of windows XP, so, some files may have been overwrtitten (looking at the drive through, for example, GetDataBack, shows that the majority of files is still rescuable) and there is a new NTFS volume that span the entire disk.
So, my question here is how do I recover that truecrypt partition ? I am not concerned about anything else what was on this drive. Thanks.
Thing is that there was one small truecrypt partition (E:\) with a valuable data on it and now I want to get it back! I am looking at the drive in some recovery software, I can see all the data from my data volume (D:\) and they are just ok but I do not want to touch the drive in any way till I get the idea how to recover the truecrypt partition.
I was already checking this site and found this http://www.experts-exchange.com/Storage/Hard_Drives/Q_23780932.html but it was of no use to me. The Norton Disk Doctor is really hard to find and it's functionability is, I guess, outdated. I also found out that from functional point of view programs such as GetDataBack and TestDisk are not for me at this point. Besides the question on that link is concerned on truecrypt volume that spanned the entire drive, which is not my case here.
The biggest problem here is that during the factory recovery process the drive was not only formatted but it also installed a new copy of windows XP, so, some files may have been overwrtitten (looking at the drive through, for example, GetDataBack, shows that the majority of files is still rescuable) and there is a new NTFS volume that span the entire disk.
So, my question here is how do I recover that truecrypt partition ? I am not concerned about anything else what was on this drive. Thanks.
Who is Participating?
Experts Exchange Solution brought to you by
Enjoy your complimentary solution view.
Get every solution instantly with Premium.
Start your 7-day free trial.
I wear a lot of hats...
"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.
Experts Exchange Solution brought to you by
Your issues matter to us.
Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.
Start your 7-day free trial
Even if you manage to recover the data it will be encrypted and your attempts to get that data readable will fail. Forget about the data and partition. Next time take backups of the data.
nobus:
the software from www.pttd.com seems to be quite useful, I can see my data parrition (D:\) recoverable as whole and then there is a recoverable linux ext3 partition of 7mb size (that seems weird, I've never tried linux on this machine and the encrypted partition was 7-8gb big)
Now I am gonna try to recover data from the D:\ parition (not the partition itself) and then I will probably try to recover the partition itself and see, if my encrypted drive will show up.
the software from www.pttd.com seems to be quite useful, I can see my data parrition (D:\) recoverable as whole and then there is a recoverable linux ext3 partition of 7mb size (that seems weird, I've never tried linux on this machine and the encrypted partition was 7-8gb big)
Now I am gonna try to recover data from the D:\ parition (not the partition itself) and then I will probably try to recover the partition itself and see, if my encrypted drive will show up.
Gave up. I was actualy able to retrieve ALL the data from former D:\ drive but I can't get the table for the encrypted partition up and running. So I guess that it is all lost then.
Well, thank you and have a nice day.
Well, thank you and have a nice day.
Look, encryption is not done the way you could easily recover and decrypt the data. If it would be possible then Truecrypt has zero penny value. Nobody would trust it. That's why I mentioned that your attempts are useless.
well I heard about cases where one was able to get the partition table up and running, that was my only goal. sure, the data would still be encrypted.
I did not get all my data back, but I believe that was because I already wrote some data to the harddrive and therefore I destroyed the partition table.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Storage Hardware
From novice to tech pro — start learning today.
-
Microsoft ApplicationsCertification: MOS Microsoft Office Specialist - Word 2016 Part … 174 lessons
Experts Exchange Solution brought to you by
Enjoy your complimentary solution view.
Get every solution instantly with Premium.
Start your 7-day free trial.
you can try to recover the partition with http://www.ptdd.com/
also paragon has some good partition recovery tools : http://www.paragon-software.com/home/pm-personal/recovery_media.html
if you really need the adata, a data recovery Cy can help, like : http://www.gillware.com/