Welcome to Smokey's Security Forums.
Guests have only limited access to the board and it's features, please consider registering to gain full access!
Registration is free and it only takes a few moments to complete.

Smokey's Security Forums

Please login or register.

Login with username, password and session length
Advanced search  

News:

Internet hit by wave of ransom malware.

Criminals re-used an attack from 2008 to hit the Internet with a huge wave of ransomware in recent weeks, a security company has reported.

Internet hit by wave of ransom malware

OTL Log Analysis and Malware Removal - Qualified PC Disinfection & Cleaning - Microsoft Security Info & Alert Center - Official Jetico Inc. Support Forums

Share this topic on FacebookShare this topic on MySpaceShare this topic on Del.icio.usShare this topic on DiggShare this topic on RedditShare this topic on StumbleUponShare this topic on TwitterAuthorTopic: encrypted drives no longer accessible  (Read 403 times)

0 Members and 1 Guest are viewing this topic.

crosscheck

  • Member
  • *
  • Offline Offline
  • Posts: 3
Re: encrypted drives no longer accessible
« Reply #4 on: December 17, 2009, 07:50:20 PM »
Sorry to reply to my own post, but I wanted to give a quick update to say that Jetico support has been working with me on this problem for the last few days and it looks like all data has been recovered from the corrupt drive. I am still not sure what caused the original problem, but I am sure that Jetico support has been very helpful. I appreciate everything they've done to ensure that the data on my drive was recovered!

:beer:

crosscheck

  • Member
  • *
  • Offline Offline
  • Posts: 3
Re: encrypted drives no longer accessible
« Reply #3 on: December 13, 2009, 06:55:29 PM »
I am having exactly the same problem as the other user.

I have two Firewire drives encrypted and they have been working perfectly until today. Now, one of them will mount fine and the other says it mounts, but it doesn't mount. Windows explorer gives the same error as it did to the other user as well "file or folder is corrupt and not readable". It also gives me the "mounted" message much quicker than the drive that actually mounts, just as the other user says.

The two things that I've changed recently are:

1. I updated to the latest version of Volume Encryption a few days ago. The drive has worked fine since then.

2. I upgraded Kaspersky 8 to Kaspersky 2010 today. The drive failed to mount immmediatly after re-booting after installing the latest Kaspersky.

Also, when this drive is mounted, it shows no "Capacity" "Free Space" or "File System" in the Volume Encyption program.

I tried uninstalling Kaspersky, but it did not resolve the problem. I also tried plugging it into USB instead of Firewire and that did not change anything.

I am using Windows XP with all of the latest updates and patches.

I will contact you via email. I hope that the drive is still in tact, but just needing some help to be mounted.  I cannot access my data at this time. I hope that you can help get it back.

Jetico

  • Jetico Support Engineer
  • *
  • Offline Offline
  • Posts: 611
Re: encrypted drives no longer accessible
« Reply #2 on: December 07, 2009, 08:59:22 AM »
Could you please send first 256 sectors from one of the disks to
Jetico technical support ( mailto:support@jetico.com ).

You may use BestCrypt Volume Encryption (BCVE) to save the sectors
to file in the following way.

In BCVE program please select USB disk (for example, it may be "Disk 2")
(i.e. click on rectangle with "Disk 2" in low pane of BCVE), then
run command "View/Save/Restore sectors on selected disk" command
from "Sectors" menu.

Then press "Save sectors" button, in appeared window set "Start sector"
to 0, "Number of sectors" to 256 and then save contents of first 256 sectors to, for example, C:\256_sectors.bin file.

Please send us the C:\256_sectors.bin file, we hope that information from the file will help us to recover the partition.

Please also write us what version of Windows you are running.

Did some special happen before the problem arose? (Installation of
some program, connecting the USB disks to some other computer, updating
Windows, or some other specific event)?

tzokotTopic starter

  • Member
  • *
  • Offline Offline
  • Posts: 1
encrypted drives no longer accessible
« Reply #1 on: December 05, 2009, 02:12:16 AM »
Hi,

I have two external USB-drives attached to my pc, both are encrypted. Since my  last reboot i can no longer access them. Mounting works, although significantly faster than usual. But i cannot access files via windows explorer after mounting a drive.
The error message is (translated): "drive x: is not accessible." "file or folder is corrupt and not readable". Decryption is btw not possible, it just says "decryption process was not completed" after a second.

I am using version 2.14.00, driver 2.19. I don't have a rescue disk.

What can i do to be able to access the drives again?
 

* Permissions
You can't post new topics.
You can't post replies.
You can't post attachments.
You can't modify your posts.
BBCode Enabled
Smilies Enabled
[img] Enabled
HTML Disabled


Except where otherwise stated, all content Copyright © 2006 - 2010 Smokey Services™ -- All rights reserved

Surf Smokey's with confidence: all external links in posts are checked and rated by WOT - Web of Trust
Security Knowledge-, Alert- & News Center and Comprehensive Microsoft Windows Information & Download Center
Board- and databases search functions and the download of post attachments are only available to registered board members

    


==>Think your PC is infected? Click here for OTL Log Analysis and Malware Removal Assistance<==


Smokey's Security Forums provide full qualified OTL Log Analysis & Cleaning Services
OTL (formerly OTListIt2) by OldTimer is a sophisticated, comprehensive log analysis tool to clean PCs with malicious content

Microsoft Security Info & Alert Center - most recent, real-time released Microsoft Security Bulletins, Alerts, Advisories and Vulnerabilities:
<div style="background-color: none transparent;"><a href="http://www.rsspump.com/?web_widget/rss_widget" title="rss widget">Rss widget</a></div>