Formated (partly overwritten) HDD

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Post Reply
Message
Author
Pannenpaule
Posts: 2
Joined: 18 Mar 2018, 04:16

Formated (partly overwritten) HDD

#1 Post by Pannenpaule » 18 Mar 2018, 04:40

Hi
first thank you, Christophe! Merci beaucoup! Few times ago i could easily recover and SD Card with vacation pics!

Therefore i came back here, because i accidentally formatted and (partially) overwrote an external HDD.
I was planing to create an SD Card with a raspberry boot image and selected the wrong drive- so i created this on my HDD were are a few files that i would like to recover.
Initially the HDD was with NTFS and now after formatting and copy the raspberry image there it has a small ext4 and a fat32 ( and a huuuuge empty space).

On the old NTFS i had a fewarchives, tar, zip, gz and 7 zip as well a few truecrypt containers that i would like to restore some how.
is there any hope that photorec can return the truecrypt container?

I have checked a example container with https://www.cgsecurity.org/photorec/ but it says "413 Request Entity Too Large"

again thank you very much for your work. it left me not tottaly hopeless

sincerly

Pierre

Sponsored links

User avatar
cgrenier
Site Admin
Posts: 4420
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Formated (partly overwritten) HDD

#2 Post by cgrenier » 18 Mar 2018, 20:38

It should be possible to recover the NTFS partition using TestDisk, Analyse, Quick Search, Stop, Deeper Search...
When asked, choose BackupBS, confirm, Quit and restart your computer.

To recover a truecrypt partition, it's possible to use http://testcrypt.sourceforge.net/
I don't know if it will work with lost container.

Pannenpaule
Posts: 2
Joined: 18 Mar 2018, 04:16

Re: Formated (partly overwritten) HDD

#3 Post by Pannenpaule » 09 Apr 2018, 14:54

Thnak you very much for your awnser and sorry for late response.

I formated the HDD with windiskimager32 and wrote a Rasbian Disk image there ( rougly 2gb size). I am little bit affraid to destroy anything more on the HDD.

I would like to recover TrueCrypt containers not a tc partition. Is there somewhere explained how I can do this (on windows)?

User avatar
cgrenier
Site Admin
Posts: 4420
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Formated (partly overwritten) HDD

#4 Post by cgrenier » 10 Apr 2018, 06:03

Have you recovered the partition using testdisk ?
Have you tried testcrypt anyway ?

Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests