Accidentally quick-formatted veracrypt encrypted drive (Windows 10)

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
tgtn7723
Posts: 2
Joined: 28 Feb 2021, 19:58

Accidentally quick-formatted veracrypt encrypted drive (Windows 10)

#1 Post by tgtn7723 »

Good afternoon, or whatever the case may be where you are.

I had a 10tb external drive. The full drive encrypted with veracrypt. A week or so back, I quick-formatted it in Windows 10. I quickly realized my mistake and didn't touch the drive.

Here's where I'm currently at:
I restored the veracrypt volume header and decrypted the drive. I can assign a drive letter in Windows. However, it's asking me to format it first.
I am able to recover data using photorec. Worst case scenario, I'll go this route.

My question, is there any hope of restoring the file/folder structure of the drive? If so, what would the process be?

Thank you for your time.

recuperation
Posts: 2735
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Accidentally quick-formatted veracrypt encrypted drive (Windows 10)

#2 Post by recuperation »

You can try Testdisk to see if it is able to recover files and folders.

tgtn7723
Posts: 2
Joined: 28 Feb 2021, 19:58

Re: Accidentally quick-formatted veracrypt encrypted drive (Windows 10)

#3 Post by tgtn7723 »

I've got testdisk installed and I've been in there poking around. I'm just not sure exactly which of the methods I need to follow.

I have a disk analysis running now. It seemed to me the obvious route. It's gonna take a couple days I suspect.

I'll see what that comes up with and report back either way. Thanks for the quick response.

Locked