Accidently deleted partition

Open source disk encryption with strong security for the Paranoid

Brought to you by: idrassi

Accidently deleted partition

Forum: General Discussion

Created: 2017-03-22

Updated: 2019-12-01

Tomwa - 2017-03-22

In an attempt to reinstall windows 10 earlier today I accidentally deleted (Clicked delete with wrong drive) an encrypted volume (encrypted via Truecrypt).

I have the password but I assume the volume headers are broken. Is there no way to recover this disk (I do not have the rescue disk as it cannot be read)?

Last edit: Tomwa 2017-03-22

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Alex - 2017-03-24

At first you have to find volume header (primary at 0 sector or backup at the end of the volume minus 256 sectors)

I wrote tool DcsFV (find volume) to bruteforce sectors.
https://sourceforge.net/projects/dc5/files/beta/

Then you have details (start and size). It is necessary to create partition with sectors range found
then try to mount (primary header or backup header). Volume mounted can be repaired or you can use any file recovery tool like r-studio.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

MaxDenisov - 2019-12-01

Hi Alex, do you have description how to use DcsFV? it is not a clear how to use it( how to config)

😕
1

Last edit: MaxDenisov 2019-12-01

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.