Disappearing files - both in VeraCrypt and TrueCrypt - related to Directory Opus?
Open source disk encryption with strong security for the Paranoid
Brought to you by:
idrassi
Menu
▾
▴
Has anyone else had this problem - just started in the last few weeks?
I have recently (approx. last few weeks) had files disappear from both VeraCrypt and TrueCrypt encrypted file containers. Containers are as per the default setup settings with a pass phrase. In two of the TC containers , a subset of files disappeared, in the VC container everything vanished. Files were mostly JPGs, viewed with Windows Photo Viewer, with Directory Opus as the file explorer.
I have multiple backups going back a week, but, they were all in the same state, so, as I did not notice anything when mounting the containers it appears that the files must disappear on dismounting (I assume it is impossible for a subset of files to be cleanly deleted from an encrypted container) or on mounting before the files are displayed. I found a few files in the recycle bin, but, nothing like the number that disappeared.
Observations. It is in both TC and VC - so they share a range of code, but, clearly TC has not changed in many years, so, I wondering if it is an interaction of the same original code in both TC and VC with either Windows or Directory Opus, both, of which have updated in the recent past (Win10 9th Aug, Dir Opus 23 July)
Hardware / software config: ASUS RoG GL503VM, Win10, x64, Ver 1903. VeraCrypt 1.23 hotfix 2, x64. TrueCrypt 7.1a. Directory Opus Pro V12.16 x64.
Many thanks
Merf
Can you open the volume, right click on it explorer and click properties and see if everything is accounted for? Does it show like the files are still there, but not displayed or does it seem like the files are actually deleted as in you have much higher free space than you should for that container?
Can you try creating a new, maybe 1GB container and copy some random filess to it then dismount/mount and see if there still there? (When doing this, also open VeraCrypt, select the container thats mounted and click Volume Propperties and see what it tells you for 'data read since mount' and 'data written since mount') Do you have another PC you could try it on? If you don't have another pc to try it on, theres an troubleshooting option, a little bit more work and maybe harder for you if you've never done it before is to use a program like VirtualBox to install a brand new os OS, in which you can try it there and see. By doing this, you may be able to tell if some software on your machine is altering your data when mounted/dsimounted. This won't actually help tell which piece of software, or if its the os causing this but if it works fine a brand new os install, it'll limit some extra troubleshooting steps.
I have large-scale data loss and corruption with involvement of VC, but need to research more to publish the report.
I had to recreate an unusable VC partition (D:) and copied files back from the backup on K: (a VC container file). This resulted in many damaged files on D:, yet also in disappearance of whole trees on K:, but chkdsk /F could recover them (every time).
Windows on C: uses system encryption and is rather stable by itself. One theory is that the different kinds of encryption and also volume storage confuse Windows or VC.