MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 6 posts ] 
Author Message
 Post subject: Recover Data from Ext. Drive Half Formatted with Truecrypt
PostPosted: August 5th, 2012, 14:25 
Offline

Joined: August 5th, 2012, 14:22
Posts: 2
Location: California
I was encrypting a hard drive (160GB) to be used for backup using Truecrypt. My computer went to sleep while this was happening and the operation got canceled. I just clicked "Back" button once and just tried to encrypt again. Now, Truecrypt encrypted a wrong hard drive that was about to be backed up. I know this is Truecrypt's bug because it encrypted 320GB hard drive to 160GB partition. Well, all my life data was there without a backup. I was wondering if there is a way to recovery. I tried Recuva on the encrypted partition, but without success, as it is written over with random bits. But I was wondering if I could recover data from the other half of the drive.


Top
 Profile  
 
 Post subject: Re: Recover Data from Ext. Drive Half Formatted with Truecry
PostPosted: August 5th, 2012, 16:06 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2821
Location: Kuwait
chk with winhex for data inside, and see how bad is it before using any software and waste your time my dear

and start from there

good luck

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: Recover Data from Ext. Drive Half Formatted with Truecry
PostPosted: August 5th, 2012, 22:54 
Offline

Joined: August 5th, 2012, 14:22
Posts: 2
Location: California
Thank you for your reply. I did scan with winhex and found some English words translated from the HEX code still there, not only in the unpartitioned space, but also in the partitioned (encrypted) space.
So what would be my next step to recovery?


Top
 Profile  
 
 Post subject: Re: Recover Data from Ext. Drive Half Formatted with Truecry
PostPosted: August 6th, 2012, 4:57 
Offline

Joined: January 8th, 2008, 5:21
Posts: 927
Location: uk
Can you not use your rescue disk to fully decrypt the 320gb partition?

Working on your original drive would be dangerous so my first move would be to clone the drive/partition to a spare hard disk. Then run Truecrypt disk rescue to see if it can find the partition and then attempt to decrypt.


Top
 Profile  
 
 Post subject: Re: Recover Data from Ext. Drive Half Formatted with Truecry
PostPosted: August 6th, 2012, 18:13 
Offline

Joined: October 23rd, 2006, 8:56
Posts: 1336
options are pretty limited. If you are a good coder you might be able to code something. otherwise If you have the funds you might be able to hire someone. As for public, open source and commercial tools, I don't believe there are any out there that will be of use in your case.


Top
 Profile  
 
 Post subject: Re: Recover Data from Ext. Drive Half Formatted with Truecry
PostPosted: August 7th, 2012, 19:13 
Offline

Joined: April 26th, 2012, 1:52
Posts: 388
Location: Chicago, USA
First of all, image the disk, and work from there. Then determine the areas that partitioning and truecrypt touched. Next use something like R-studio to work on the untouched areas. That might be as far as you get unless you are quite skilled.

But without actually seeing the disk in my office, I would not care to speculate how much is encrypted and wiped over.

_________________
On a clear disk you can seek forever.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 66 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group