TC container damaged by chkdsk

Discussion in 'encryption problems' started by arcontes, Feb 6, 2019.

  1. arcontes

    arcontes Registered Member

    Joined:
    Feb 5, 2019
    Posts:
    1
    Location:
    Poland
    Hi, here is another post with damaged TC container. This time TC container (5GB) was on 500GB USB hard drive, after chkdsk run, container has 0B size. TrueCrypt Search and Decrypt (tcsandd) found that container was moved to $RECYCLE.BIN but after mounting it is empty. Most files can be restored with TestDisk for example but I wonder if whole container can be restored in that case. Do you have any ideas, guys?

    I already have RAW copy of whole HDD, tried to save volume header from "deleted" container and use it in 0B sized file with no success. Tcsandd decrypting is ongoing and it will take 7 days so I will check the results and I did not try the tricks with WinHex decribed in many posts before by Dantz.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.