Sign-in / Sign-up
Your question
Solved

Decrypt TrueCrypt Image

Tags:
  • Image
  • Computers
  • TrueCrypt
  • Windows 7
Last response: in Windows 7
June 11, 2014 11:11:46 AM

Hey! I'm sorry if this is in the wrong section, I couldn't quite find a perfect section.

So, a computer crashed here to the point where it couldn't start up. Dell is sending us a hard drive, so I would like to grab files off of the broken computer.

I loaded up CAINE (a forensic tool, able to grab disk images with it) and imaged the boken computer's drive on to my external drive (raw format).

It's about 70% done, then it hit me ... How will I decrypt the disk since it has AES256 encryption on it using Truecrypt? The obvious answer it just mounting the image, but I have a feeling it won't work for some reason.

Is there any process to decrypt the image so I can grab files from it?


Thanks a lot guys and sorry again if this is in the wrong section.

More about : decrypt truecrypt image

a c 286 $ Windows 7
June 11, 2014 11:18:23 AM

if Truecrypt wouldn't decrypt it. your data is gone. hope you got backup.
m
0
l
June 11, 2014 11:28:19 AM

rgd1101 said:
if Truecrypt wouldn't decrypt it. your data is gone. hope you got backup.


I haven't tried, the imaging is still running, I was just asking if there is a specific process to do it because the way I'm thinking ... I feel like something is going to go wrong.
m
0
l

Best solution

a b $ Windows 7
June 11, 2014 12:45:24 PM

amathian said:
Hey! I'm sorry if this is in the wrong section, I couldn't quite find a perfect section.

So, a computer crashed here to the point where it couldn't start up. Dell is sending us a hard drive, so I would like to grab files off of the broken computer.

I loaded up CAINE (a forensic tool, able to grab disk images with it) and imaged the boken computer's drive on to my external drive (raw format).

It's about 70% done, then it hit me ... How will I decrypt the disk since it has AES256 encryption on it using Truecrypt? The obvious answer it just mounting the image, but I have a feeling it won't work for some reason.

Is there any process to decrypt the image so I can grab files from it?


Thanks a lot guys and sorry again if this is in the wrong section.


Do you have any CD that contain the TrueCrypt Recovery Disc? if your hdd is Encrypted with TrueCrypt, it should come with a CD/file/password. You will need to run a full permanent disk decryption to get the data back. CAINE can help you recover disk/image but still need to Decrypt the disk/image to get the data back.
Share