Your screenshots of what I assume to be the mounted volume show that the volume is decrypting normally, but I don't understand why the first...
Hi @subzero03 , I have found a little time to work on your problem. Your screenshots aren't quite what I need to see. I'm going to ask you to...
Sorry, I suddenly got busy again, but I will post a response soon.
I just saw your post in the other thread. I was waiting for you to get back to me. Have you made any progress?
@subzero03, it appears that your password is being accepted and your volume (whatever it may consist of) is mounting, so that's a good start. The...
@Eric28 I just saw your thread on the VeraCrypt forums. Here's what I think happened: After the accident you restored the volume's main header...
Hi Eric28, somehow you have woken me from my slumber. I have long since moved on, and I don't usually do this, but I will see if I can help you....
I just stopped by for a quick visit, as I have not been active on Wilders for quite some time. I want to congratulate you! I assume that you have...
It's going to require a combination of skill, perseverance and luck, but yes, it is theoretically possible to recover a deleted TrueCrypt...
Well, not entirely. I'm not the type of guy who gives up easily. I suspect that all of your data is still on the flash drive and it has merely...
Hmmm, not good. How far does the UNREADABLE SECTOR message go? Can you scroll past it? Does it go clear to the end of the drive? Also, when you...
OK, I will think about that, but for now I'd like to address your WinHex screenshot, as we need to be able to view the contents of your flash...
I assume the image you posted is taken directly from your flash drive, and not from the test file that you created? If so, I'm not sure why Winhex...
I just performed a quick test using VeraCrypt and I found that under certain configurations, Fast Startup will write the volume password to disk...
I have run a series of tests involving mounted and unmounted TC volumes, some with the same passwords but different encryption keys, and others...
Yes, you are likely correct, but not everyone uses system encryption.
It temporarily caches (stores) the password that you enter in RAM for convenience. For example, if you happen to have multiple encrypted volumes...
Thank you for trying that. Was "Cache passwords in driver memory" enabled when you entered the VeraCrypt password? Fast startup writes loaded...
I haven't tested VeraCrypt personally, but I would expect it to have the same vulnerability. This would apply more to volume encryption than to...
What is the error message? TrueCrypt either works or it doesn't. There generally isn't a 10-minute wait before you find out. This is most likely...
The latest Windows update appears to automatically enable "Fast startup" on certain Windows 10 systems. "Fast startup" functions by writing...
There's no need to deal with the TrueCrypt headers, as it sounds like they are working fine. As for how to find them and what they look like, they...
Hmm, not good. I guess the next step will be to manually examine the GetDataBack image file to see if it contains any meaningful data. I would...
OK, break time already. I'll check back in a bit.
Did you go to Level 4? I believe that will do file-carving, which doesn't require a file system at all, just a recognizable file type.
Separate names with a comma.