[Bourak]

Hello everybody
This is my first post here. I really hope you guys can help me
i have a 250gb Container that has a hidden volume of 150gb.( encrypted with truecrypt 3 years ago).
Two days ago, i tried to open the Hidden volume after mounting it, but windows said "The disk structure is corrupted and unreadable".
I tried to fix it with TrueCrypt "Chkdsk" but it said that the "Master table file is damaged, and windows will try to fix it", i waited around 30 mins and then it said windows couldnt fix it :(.
I read a couple of threads online and tried to let Truecrypt restore the volume header, but no luck :(. I also tried WinHex, but got lost :(. im a noob in these stuff.
I copied the container to another hard disk and i mounted it then i formatted the hidden volume, it opened but without any of my data, tried to restore the files, got like 2% of them only.

The container size is 250gb, the Hidden volume is 150. I think the problem is i wrote more than 100gb on the Outer volume.
any fix for that :( ?


Guys please, could you help me to either fix the original hidden volume or restore my files from the formatted disk, The data i have hidden worth too much to me :(( ?

Thank you in advance guys:)

-------
I dont know if this helps but when i tried to scan the hidden volume " from the copy that i didnt format" with Recuva, it found the same files ( the 1% files that were found with the formatted copy of the volume ). and Recuva showed a header for the hidden volume
FF D8 FF E1 56 C0 45 78 69 66 00 00
49 49 2A 00 08 00 00 00 0C 00 0F 01
02 00 06 00 00 00 9E 00 00 00 10 01
02 00 0D 00 00 00 A4 00 00 00 12 01
03 00 01 00 00 00 01 00 00 00 1A 01
05 00 01 00 00 00 C4 00 00 00 1B 01
05 00 01 00 00 00 CC 00 00 00 28 01
03 00 01 00 00 00 02 00 00 00 32 01
02 00 14 00 00 00 D4 00 00 00 3B 01
02 00 01 00 00 00 00 00 00 00 13 02
03 00 01 00 00 00 02 00 00 00 98 82
02 00 01 00 00 00 00 00 00 00 69 87
04 00 01 00 00 00 68 01 00 00 25 88
04 00 01 00 00 00 8A 23 00 00 8C 2A
00 00 43 61 6E 6F 6E 00 43 61 6E 6F
6E 20 45 4F 53 20 37 44 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 48 00 00 00 01 00 00 00
48 00 00 00 01 00 00 00 32 30 31 32
3A 30 38 3A 32 30 20 30 30 3A 35 38
3A 30 32 00 00 00 00 00 00 00 00 00
00 00 00 00

Thanks:)

[JohnNuka]

Hello everybody
This is my first post here. I really hope you guys can help me
i have a 250gb Container that has a hidden volume of 150gb.( encrypted with truecrypt 3 years ago).
Two days ago, i tried to open the Hidden volume after mounting it, but windows said "The disk structure is corrupted and unreadable".
I tried to fix it with TrueCrypt "Chkdsk" but it said that the "Master table file is damaged, and windows will try to fix it", i waited around 30 mins and then it said windows couldnt fix it :(.
I read a couple of threads online and tried to let Truecrypt restore the volume header, but no luck :(. I also tried WinHex, but got lost :(. im a noob in these stuff.
I copied the container to another hard disk and i mounted it then i formatted the hidden volume, it opened but without any of my data, tried to restore the files, got like 2% of them only.

The container size is 250gb, the Hidden volume is 150. I think the problem is i wrote more than 100gb on the Outer volume.
any fix for that :( ?


Guys please, could you help me to either fix the original hidden volume or restore my files from the formatted disk, The data i have hidden worth too much to me :(( ?

Thank you in advance guys:)

-------
I dont know if this helps but when i tried to scan the hidden volume " from the copy that i didnt format" with Recuva, it found the same files ( the 1% files that were found with the formatted copy of the volume ). and Recuva showed a header for the hidden volume
FF D8 FF E1 56 C0 45 78 69 66 00 00
49 49 2A 00 08 00 00 00 0C 00 0F 01
02 00 06 00 00 00 9E 00 00 00 10 01
02 00 0D 00 00 00 A4 00 00 00 12 01
03 00 01 00 00 00 01 00 00 00 1A 01
05 00 01 00 00 00 C4 00 00 00 1B 01
05 00 01 00 00 00 CC 00 00 00 28 01
03 00 01 00 00 00 02 00 00 00 32 01
02 00 14 00 00 00 D4 00 00 00 3B 01
02 00 01 00 00 00 00 00 00 00 13 02
03 00 01 00 00 00 02 00 00 00 98 82
02 00 01 00 00 00 00 00 00 00 69 87
04 00 01 00 00 00 68 01 00 00 25 88
04 00 01 00 00 00 8A 23 00 00 8C 2A
00 00 43 61 6E 6F 6E 00 43 61 6E 6F
6E 20 45 4F 53 20 37 44 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 48 00 00 00 01 00 00 00
48 00 00 00 01 00 00 00 32 30 31 32
3A 30 38 3A 32 30 20 30 30 3A 35 38
3A 30 32 00 00 00 00 00 00 00 00 00
00 00 00 00

Thanks:)

[/quote]This is not possible, your data is lost forever[/quote]

[Bourak]

This is not possible, your data is lost forever[/quote]
[/quote]

Thanks for the fast replay, but may i know why :\ ?

[Ozedath]

This is not possible, your data is lost forever

[/quote]

Thanks for the fast replay, but may i know why :\ ?
[/quote]

These are the encryption ciphers used by TrueCrypt:

• AES
  
• Serpent
  
• Triple DES
  
• Twofish
  
• AES-Twofish
  
• AES-Twofish-Serpent
  
• Serpent-AES
  
• Serpent-Twofish-AES
  
• Twofish-Serpent
  

They are all chained block cipher encryption schemes meaning that each block of ciphertext depends on the previous one, except the first block of course. This means that if your data got corrupted at some point in that 150 GB ciphertext everything after that point can no longer be decrypted.

But TrueCrypt mentions that the data got corrupted meaning that it is unable to start decryption at all, as in it got corrupted in its headers. The hex dump you posted is of no use. Moreover, you don't know in how many points the data got corrupted.

[Bourak]

Okay :(. Thank you so much for time