just lower

awesome Alex, i tried it on a newly created volume and it works, hope i find my original volume, scanning it now.`<dcsfv> </dcsfv> <searchtype>ops</searchtype> <medias> <media> <path>\.\PhysicalDrive1</path> <blocksize>512</blocksize> </media></medias> <begin>0</begin> <end></end> <operations> <operation> <action>Ranges</action> <regionminsize>256</regionminsize> <statlevels> <bits1>0</bits1> <bits0>0</bits0> <bitst>0</bitst> <entropy>91</entropy> <montecarlopi>85</montecarlopi> <markovchainlength>0</markovchainlength>...

I hope it will, thanks for everything. waiting for the update.

<DcsFV> <!-- Modes of search: Authorize, Regions --> <SearchType>ops</SearchType> <!-- List of media and sector ranges to scan Scenario in the example: Disk was double decrypted with wrong header => The following actions specified 1. encrypt the disk twice with "wrong" header to restore data 2. save data to new file 3. check statistics lavel for saved data 4. try real header decrypt --> <Medias> <Media> <Path>\\.\PhysicalDrive1</Path> <BlockSize>512</BlockSize> <!-- begin block (0 - by default) -->...

<DcsFV> <!-- Modes of search: Authorize, Regions --> <SearchType>ops</SearchType> <!-- List of media and sector ranges to scan Scenario in the example: Disk was double decrypted with wrong header => The following actions specified 1. encrypt the disk twice with "wrong" header to restore data 2. save data to new file 3. check statistics lavel for saved data 4. try real header decrypt --> <Medias> <Media> <Path>\\.\PhysicalDrive1</Path> <BlockSize>512</BlockSize> <!-- begin block (0 - by default) -->...

<DcsFV> <!-- Modes of search: Authorize, Regions --> <SearchType>ops</SearchType> <!-- List of media and sector ranges to scan Scenario in the example: Disk was double decrypted with wrong header => The following actions specified 1. encrypt the disk twice with "wrong" header to restore data 2. save data to new file 3. check statistics lavel for saved data 4. try real header decrypt --> <Medias> <Media> <Path>\\.\PhysicalDrive1</Path> <BlockSize>512</BlockSize> <!-- begin block (0 - by default) -->...

Also , do you think it will work with the new versions ? I tried DCS-2017_03_28 on a new container but it didnt find the header.

Thanks for replying Alex. Can you please give me an cfg example ? I tried everything. I can't figure out how to scan an drive for the header. :( thanks.

If you haven't figured it out by now, mount the drive and run testdisk. I hope you did not repair the file system .