TrueCrypt 500 GB disk CRC error mounts but not readable

Discussion in 'encryption problems' started by Indrajit Singh, Aug 18, 2017.

  1. Indrajit Singh

    Indrajit Singh Registered Member

    Joined:
    Aug 18, 2017
    Posts:
    2
    Location:
    Nigeria
    Hi folks
    I have a 500GB USB disk encrypted with Truecrypt.
    It started with CRC error
    The disk gets mounted when I mount it using the embedded backup header but not readable in windows 10.
    The properties in TC shows size as 450107595264 bytes with embedded backup header '' yes"

    I have followed the suggestions on https://www.wilderssecurity.com/threads/crc-error-truecrypt-cant-mount-volume.357357/
    I have done the following from the actions suggested by dantz
    1) Cloned the disk to a separate file on a new disk using Winhex. I cloned the disk from start sector as 0 to
    cover the full size. the cloned copy is same size as the TC volume.
    2) I also extracted the embedded backup header as a separate TC file using the process suggested.
    The file size is 65536.
    The current issues are:
    1) The cloned TC file does not mount with the error incorrect password or not a Truecrypt volume.
    I am absolutely sure of the password as the same password mounts the damaged disk using backup header. So the issue is not the password.
    2) The embedded header file also does not mount with the same error.
    Dantz suggestion were based on a 16 Gb disk and he suggests to exclude the first 32 sectors based on the disk size while cloning. I have not excluded any sectors. How do you arrive at the no. of sectors to be excluded based on the size of disk. Mine is 500 GB disk but used is 419 GB with the TC size as 450107595264.
    I am not sure if I am doing something wrong.
    I just compared the the original volume with the cloned file using Winhex . The result says" No difference found. However the files have different sizes"
    Any suggestions how to proceed.
    indrajit
     
  2. newbeez

    newbeez Registered Member

    Joined:
    Aug 26, 2017
    Posts:
    6
    Location:
    USA
    if you can still mount the Volume successfully. Right click on select "Repair Filesystem". I had this issue before and after running the repair process using chkdsk, I was able to read the contents of the volume.
     
  3. Indrajit Singh

    Indrajit Singh Registered Member

    Joined:
    Aug 18, 2017
    Posts:
    2
    Location:
    Nigeria
    Your suggestion does not work as windows still sees it as raw data and repair file system does not work. However I was able to retrieve my data by following the method suggested by dantz in the posting at https://www.wilderssecurity.com/threads/truecrypt-volume-error.358446/
    Had to figure out that the true crypt was not a device but partition. Was able to get the header back up using winhex.
    Once I was able to locate the exact location of my TC partition I was able to retrieve it using winhex. The extracted file mounts and the data is decrypted. I copied the whole data to a new disk.
    Thanks
     
Loading...