Encrypted partition is removed. How to recover it?
Open source disk encryption with strong security for the Paranoid
Brought to you by:
idrassi
Menu
▾
▴
Hello, I was not expierienced in encryption, and I screw somthing up. But forom begining: In my country law allow police to scan [stole data] from computer without a court order. I decided to encrypt data form 1TB HDD. My only backup (other HDD not encrypted) is destroyed before encryption was completed. After theat was done i turn off PC. Next day when i try to mount it, it failed. On disc menagment i saw unallocated space. Meaby i screwd something up but data is still there. So how i can mount from there this encrypted partition? For now i tryied to use partition recovery software but wihtout any effect. Sorry for my english and thank you for your time or help.
Try mounting the VeraCrypt volume using the Mount Options button and enable "Use backup header embedded in volume if available".
I tried it many times, even with admin mode. Should try go to local computer repait/data recovery center. Is that have any chance to succes?
Also i have readed about TestCrypt, is there something like this for VeraCrypt.
Last edit: Andrzej Matczak 2016-04-21
Once you have encrypted a drive/partition with VeraCrypt, Windows OS will see the device as RAW format since Windows does know that this is an encrypted device.
Can you provide exact steps you performed when volume failed to mount? When you used the recovery software, did the recovery software write to the encrypted disk?
Recovery software what i use didn't found anything. I use AOMEI, Minitool and TestDisc. I accedentialy removed partition throught Windows Partition Menenger. After that I cannot mount. Nothing overwritten this partition. And i forgot to say that was a full drive partition. For every action i use my system SSD Drive.
This look when i try to mount https://drive.google.com/open?id=0B4z6lrYIt_XBX0xhSEtYMGExWFE
And this is disc menanger: http://images.devs-on.net/Image/rjOvuf7IBzrYSyFb-Obszar.png
In your video when you selected the device, there is only the disk without partitions. Is that how you originally encrypted the device without any partitions?
The partition was there but accedentialy was removed. And my question is to how recover[end is there way to do it?] partition. The entiere process loocking like that:
Partition with unencrypted data> Encrytion process> Don't know how removed partition.
Sorry, I do not what would be the procedure to rebuild the partition without losing the encrypted data.
You could possibly create the destroyed partition using Windows Disk Management and select without formatting and without assigning a drive letter using the exact same size.
I assume there was only one partition using the entire drive.
Then try to mount the VeraCrypt volume and if that fails try mounting with the embedded backup header.
Again, I am not certain this approach will work.
Can you make a clone of your HDD and try the above on the clone HDD?
Last edit: Enigma2Illusion 2016-04-22
Well, i tried to do this. It won't work. Shall i try permanent decrypt option?
What i done: https://drive.google.com/open?id=0B4z6lrYIt_XBT2RXTUZYNlNMNm8
Sorry, I do not have any other ideas.
You cannot decrypt the partition since the password has to be authenticated against the header or the backup embedded header. Since you destroyed the partition, the header is damaged for VeraCrypt.
Based on your video, did this drive only have the one partition? The partition must be the same size and location in the attempt to recreate the partition so VeraCrypt can find the header.
Last edit: Enigma2Illusion 2016-05-01
Yes, I have one full-drive partition on disc
Well, I think there is no way to recover data. If I wrong please tell me. Tomorow i will format HDD