Formated (partly overwritten) HDD

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Pannenpaule
Posts: 2
Joined: 18 Mar 2018, 04:16

Formated (partly overwritten) HDD

#1 Post by Pannenpaule »

Hi
first thank you, Christophe! Merci beaucoup! Few times ago i could easily recover and SD Card with vacation pics!

Therefore i came back here, because i accidentally formatted and (partially) overwrote an external HDD.
I was planing to create an SD Card with a raspberry boot image and selected the wrong drive- so i created this on my HDD were are a few files that i would like to recover.
Initially the HDD was with NTFS and now after formatting and copy the raspberry image there it has a small ext4 and a fat32 ( and a huuuuge empty space).

On the old NTFS i had a fewarchives, tar, zip, gz and 7 zip as well a few truecrypt containers that i would like to restore some how.
is there any hope that photorec can return the truecrypt container?

I have checked a example container with https://www.cgsecurity.org/photorec/ but it says "413 Request Entity Too Large"

again thank you very much for your work. it left me not tottaly hopeless

sincerly

Pierre

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Formated (partly overwritten) HDD

#2 Post by cgrenier »

It should be possible to recover the NTFS partition using TestDisk, Analyse, Quick Search, Stop, Deeper Search...
When asked, choose BackupBS, confirm, Quit and restart your computer.

To recover a truecrypt partition, it's possible to use http://testcrypt.sourceforge.net/
I don't know if it will work with lost container.

Pannenpaule
Posts: 2
Joined: 18 Mar 2018, 04:16

Re: Formated (partly overwritten) HDD

#3 Post by Pannenpaule »

Thnak you very much for your awnser and sorry for late response.

I formated the HDD with windiskimager32 and wrote a Rasbian Disk image there ( rougly 2gb size). I am little bit affraid to destroy anything more on the HDD.

I would like to recover TrueCrypt containers not a tc partition. Is there somewhere explained how I can do this (on windows)?

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Formated (partly overwritten) HDD

#4 Post by cgrenier »

Have you recovered the partition using testdisk ?
Have you tried testcrypt anyway ?

Locked