Go Back   Computer Forums > General Computing > Software and Operating Systems
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 11-23-2016, 09:11 AM   #1
Baseband Member
 
Join Date: Mar 2014
Location: Czech Republic
Posts: 63
Post chkdsk /F marked 900GB Truecrypt file as 0KB how can i recover it?

Hello,

something in my head told me i should not run chkdisk /F (fix/repair) on a HDD on which is hosted Truectypt container file, but i ran it because TC volume was disconnecting and system functions tied to this HDD was frozing.

I ran it with this log file generated. The result is that truecrypt container file was marked 0KB

And after submitting password in TC, i get: Error: Incorrect volume size.

I assume chkdisk somehow modified that true crypt file which was somehow "inconsistent".

According to the log file, please can anyone advice how to discover where was modification made to revert it inside hex editor?

===========
Here are some details i found regarding issue:

I found this topic where is adviced to use SW called "WinHex" to copy the file over to a new drive. Here is how the file beginning looks like. And here is some file created/modified in date when issue happend.

Im curious where is the beginning and where is the end of the volume file (disk.dat).

I read that Truecryt data can be recovered if header of the volume is not damaged, here is nice article on recovering data from damaged TC volume. What do you suggest please? (except doing regular backups)

Thank you
__________________

postcd is offline   Reply With Quote
Old 11-23-2016, 06:21 PM   #2
Baseband Member
 
Join Date: Mar 2014
Location: Czech Republic
Posts: 63
Default Re: chkdsk /F marked 900GB Truecrypt file as 0KB how can i recover it?

in the WinHEX i selected to Analyze block and it told me: "Cannot read from Sector 1 420 025 674 of Drive F:."

i moved to that sector "Navigation/Go to sector" and this hex code on that spot:
https://s20.postimg.org/u2yen4j0t/di...he_tc_file.gif
postcd is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 11:27 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0