TrueCrypt File Container Mounts but Filesystem is RAW

Discussion in 'encryption problems' started by Martin Ken, Mar 20, 2017.

  1. Martin Ken

    Martin Ken Registered Member

    Joined:
    Mar 20, 2017
    Posts:
    3
    Location:
    Ireland
    I have been looking at various other threads for a few days and have tried various options but no relief from my problem.

    This is an old truecrypt container file (ca.2014) that I think I created with a hidden volume inside an outervolume. I am not 100% sure though.

    When I open the container using a password I remembered which I dont know was the inner or outter volume password, it mounts and the filesystem is raw. Cant repair check or repair filesystem with TC as its filetype raw.

    http://imgur.com/a/KPFnH

    ^ That is a screenshot of the volume size on winhex and truecrypt. The difference seems to be at decimal 131072. At offset 131072 in winhex, it is the beginning of a large block of random data. Before that ther e is data from 0 - 496 (512 blocks).

    I've tried dans method of scraping off a block of data at 131072 for length 200000 and trying to open in truecrypt, if it fails, restore header, then view data in winhex to see if its legible. It didnt work for me after trying 5-6 64 byte increment increases.

    Help dan! Ill send you some BTC if we get it working.
     
  2. Stode

    Stode Registered Member

    Joined:
    Dec 13, 2012
    Posts:
    377
    Location:
    Finland
    ..for the record.. a decimal value of 131072 is 20000 in hexadecimal ..
     
  3. Martin Ken

    Martin Ken Registered Member

    Joined:
    Mar 20, 2017
    Posts:
    3
    Location:
    Ireland
    Thats a coincidence..
     
  4. Stode

    Stode Registered Member

    Joined:
    Dec 13, 2012
    Posts:
    377
    Location:
    Finland
    That's nice.
     
  5. Martin Ken

    Martin Ken Registered Member

    Joined:
    Mar 20, 2017
    Posts:
    3
    Location:
    Ireland
    Thanks for the input.
     
Loading...