HDD GURU FORUMS
http://forum.hddguru.com/

Corrupted TrueCrypt Partition (header)
http://forum.hddguru.com/viewtopic.php?f=10&t=32398
Page 1 of 1

Author:  Tobiasz22 [ November 28th, 2015, 14:23 ]
Post subject:  Corrupted TrueCrypt Partition (header)

I have the same problem like OP from this thread: http://www.wilderssecurity.com/threads/ ... on.327959/
I couldn't reply in the old thread, so I have to create a new one..

I recently allowed Windows to initialize the drive and that destroyed the header.

1) This is what I had at the beginning. I was able to mount my drive in TC:
Image

but unfortunately I was not able to see any data, there was no partition:
Image
2) Then I created in WinHex partition's starting offset file: Test Outer.tc
I used starting block 1048576 and ending block 5048575
I was able to mount this file in TC, so everything went well

3) I have created partition in DISKPART
(Create partition primary offset=1024)

4)now I see partition in TC, but I can not mount it because I get error message
"incorrect password or not a TrueCrypt volume":
Image

5) now I have header's copy in file Test Outer.tc , partition on my encrypted hard drive (but I can not mount the drive anymore longer because of "incorrect password")

now in WinHex i probably need to restore Test Outer.tc to the disk
post number 19 in this thread described this:
http://www.wilderssecurity.com/threads/ ... st-2089995
but I dont know how to do that and I dont want to experiment
Image

Could someone help me? I think I am pretty close to succeed

Author:  Tobiasz22 [ January 2nd, 2016, 4:49 ]
Post subject:  Re: Corrupted TrueCrypt Partition (header)

bump, can anyone help?

Author:  dick [ January 2nd, 2016, 8:13 ]
Post subject:  Re: Corrupted TrueCrypt Partition (header)

I have seen this situation a couple of times when in my cases Windows appeared to 'repair' the partions and so damaged the Truecrypt header in the process. So do you have a rescue disk?

Have you previously made a full image of the drive? If the answer is no then I suggest you do that right now!

Normally I would boot from the rescue disk and either repair the header or run a full drive decrypt. Have you tried booting from a cd or usb and decrypting with your known password? You would then run software recovery tools to scan for the partition and files if required.

I know my suggested procedure is the easy method. Maybe you have already exhausted these options?

Author:  Tobiasz22 [ January 7th, 2016, 16:12 ]
Post subject:  Re: Corrupted TrueCrypt Partition (header)

Unfortunately I dont have Rescue Disk

i belioeve that the answer for my problem is in this and next post:
http://www.wilderssecurity.com/threads/ ... st-2089995

Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/