TrueCrypt Diskpart Clean All

Discussion in 'encryption problems' started by creeps, Jan 25, 2014.

Thread Status:
Not open for further replies.
  1. creeps

    creeps Registered Member

    Joined:
    Jan 25, 2014
    Posts:
    3
    Hi,
    I've read through few of the previous posts on similar problems (TC Diskpart Clean problem) but i couldn't see anything close enough to my issue.

    I accidentally chose the wrong disk and cleaned all using diskpart, at the time i realized the error i stopped diskpart and now the problem. I cannot access my TC volume and files/data on the disk.

    When i try and mount the volume under Drive S: (S: it's a "Mount Favorite Volumes") TC asks for the password and then i get the error you see attached. I tried the various backup header etc. and suggestions i read on other/prevous posts, unfortunately nothing seems to be working. I do not have any backup whatsoever and I'm wondering whether i am at the end of the road and everything is lost for good.

    Any help or hint you guys can provide is greatly appreciated. Thanks in advance. Cheers

    http://i42.tinypic.com/2md449f.jpg

    http://i43.tinypic.com/jtubtv.jpg

    http://i42.tinypic.com/2ujqo2h.jpg

    http://i43.tinypic.com/e7bg3k.jpg
     
  2. dantz

    dantz Registered Member

    Joined:
    Jan 19, 2007
    Posts:
    1,034
    Location:
    Hawaii
    The Diskpart "Clean All" command overwrites the entire selected disk with zeros, but it does take quite awhile to process an entire large disk. Was this done to your 2.7 TB disk? It would probably take a number of hours to complete the task (and I think it runs from front to back, but I might be mistaken about that). So based on how long it ran, it probably wiped your partition table (if present) and then proceeded to eat its way partway into your disk.

    How long did you let it run? There might still be some data left, and the embedded backup headers might still be there.

    Important question: Was the disk partitioned before you ran the command?

    Unfortunately for you, I am swamped with TrueCrypt help requests at the moment and I have a number of other threads that I have to work on first, so you'll have to wait for me to catch up.
     
  3. creeps

    creeps Registered Member

    Joined:
    Jan 25, 2014
    Posts:
    3
    Hi dantz
    of course no rush at all i appreciate any help you can provide

    diskpart clean all ran for just few minutes
    as far as the embedded backup headers i'm not sure, when i tried to select that option in TC it didn't make any difference
    as far as partitioning i don't recall doing it
    the odd thing though is that disk management gives me two unallocated space which is quite strange i think, see below:

    http://i39.tinypic.com/2d0045u.jpg

    Edit: I have checked the disk with WinHex and this is what i can see
    http://i43.tinypic.com/10crjvb.jpg
     
    Last edited: Jan 26, 2014
  4. dantz

    dantz Registered Member

    Joined:
    Jan 19, 2007
    Posts:
    1,034
    Location:
    Hawaii
    I'm back! Sorry about the delay.

    What does WinHex see at the front of the disk? I assume there are a lot of zeros. How far do they go? Past offset 1,048,576 (decimal)? Do they suddenly stop and change into a big, uninterrupted block of random data?

    Here's something that might be worth a try: You could use WinHex to go to the very end of the "unpartitioned space" and then look backwards (and test for) for the embedded backup header. I'm not going to post the steps right now, but you could always just take a look and see if a large block of solid, random data seems to stop at the very end of the "unpartitioned space", and transition into a bunch of zeros, indicating that this is the probable endpoint of the lost volume.
     
  5. creeps

    creeps Registered Member

    Joined:
    Jan 25, 2014
    Posts:
    3
    ok will try and get back to you. thanks

    edit: unfortunately i can't see any block of data besides the one you saw in the last screenshot i posted in my previous message. what puzzles me is the unpartitioned spce of 2.7tb and 2.5mb.
     
    Last edited: Feb 3, 2014
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.