Jump to content

Restore Veracrypt partition after accidental deletion of partition table


gpbitoaw
 Share

Recommended Posts

Hello guys and girls!

I 've accidentally deleted some initial portion (little I think) of my drive through the following command: openssl enc -aes-256-ctr -pass pass:"$(dd if=/dev/urandom bs=128 count=1 2>/dev/null | base64)" -nosalt < /dev/zero > /dev/sda

The following partitions existed prior to my fault:

sda1/2 (Windows) - about 100GB
sda3 (Extended) - about 100GB
sda4 Veracrypt - about 700GB
some Unallocated space

With the above command I wanted to fill with noise the sda3 partition, but due to a mistake while typing the number 3, didn't reach the command, so as soon as I noticed it (pretty quickly) I hit CTRL+C (about 1 sec after the initial ENTER).

What I 've done already:

1) Run gpard /dev/sda with the following output after 24+ hours of the command running:

Begin scan...
Possible partition(DOS FAT), size(10mb), offset(6720mb)
Possible partition(Windows NT/W2K FS), size(0mb), offset(31042mb)
Possible partition(Windows NT/W2K FS), size(3mb), offset(33462mb)
Possible partition(Windows NT/W2K FS), size(3mb), offset(33466mb)
Possible partition(Windows NT/W2K FS), size(3mb), offset(33469mb)
Possible partition(Windows NT/W2K FS), size(3mb), offset(34282mb)
Possible partition(Windows NT/W2K FS), size(0mb), offset(38780mb)
Possible partition(Windows NT/W2K FS), size(100767mb), offset(50486mb)
Possible partition(Windows NT/W2K FS), size(953866mb), offset(953867mb)

*


** Fatal error: dev(/dev/sda): seek failure.

2) Run testdisk with the following outputs:

Intel/PC partition option prior to analyzing

Non partitioned media option prior analysis

So the first scan only came up with:

Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Partition Start End Size in sectors

  • Linux 12858 253 4 24340 40 20 184444928

Structure: Ok. Use Up/Down Arrow keys to select partition.
Use Left/Right Arrow keys to CHANGE partition characteristics:
*=Primary bootable P=Primary L=Logical E=Extended D=Deleted
Keys A: add partition, L: load backup, T: change type, P: list files,
Enter: to continue
ext4 blocksize=4096 Large_file Sparse_SB, 94 GB / 87 GiB

so that should be the Extended Linux partition (that is sda3, before sda4)

and the second one with those (among other little FAT partitions):

P NTFS 6436 37 34 19282 67 17 206372864

Structure: Ok.

Keys T: change type, P: list files,
Enter: to continue
NTFS, blocksize=4096, 105 GB / 98 GiB

P ext4 12858 253 2 24340 40 18 184444928

Structure: Ok.

Keys T: change type, P: list files,
Enter: to continue
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 94 GB / 87 GiB

3) Run MiniTool partition recovery option & EaseUS one, through mounting the disk to Windows pc, with the scans not showing the veracrypt partition, but one of the (MiniTool) showing the above linux one (87.95GB)

 

My question is, do you know any possible way that I should proceed in order to recover the Veracrypt partition (previous sda4)? In the end thats the only data that I care of.

I look forward to your insights, as I am available for any clarifications! Thank you in advance for your time!

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...