Get a Pentest and security assessment of your IT network.

Cyber Security

Booting AV Disks & TrueCrypt Drives

TL;DR

This guide explains how to boot from antivirus rescue disks and access data on drives encrypted with the older TrueCrypt software. It covers BIOS/UEFI settings, potential issues, and alternative tools if TrueCrypt isn’t working.

Booting From an Antivirus Rescue Disk

  1. Download the ISO: Get the latest rescue disk ISO image from your antivirus provider (e.g., Kaspersky, Bitdefender, Avira).
  2. Create Bootable Media: Use a tool like Rufus (https://rufus.ie/) to create a bootable USB drive.
    • Select your USB drive in Rufus.
    • Choose the downloaded ISO image.
    • Leave other settings as default (usually MBR for BIOS or GPT for UEFI).
    • Click ‘Start’. Warning: This will erase all data on the USB drive!
  3. Change Boot Order in BIOS/UEFI: Restart your computer and enter the BIOS/UEFI setup.
    • The key to enter varies (usually Del, F2, F12, Esc). Check your motherboard manual.
    • Find the ‘Boot’ section.
    • Change the boot order so that the USB drive is listed before your hard drive.
    • Save changes and exit.
  4. Boot from the Rescue Disk: Your computer should now boot from the antivirus rescue disk. Follow the on-screen instructions to scan for and remove malware.

Accessing TrueCrypt Encrypted Drives

TrueCrypt is no longer actively maintained, so using it carries security risks. Consider migrating your data to VeraCrypt (a fork of TrueCrypt) if possible.

  1. Download and Install VeraCrypt: Download VeraCrypt from https://www.veracrypt.fr/ and install it on a working computer.
  2. Mount the TrueCrypt Volume:
    • Open VeraCrypt.
    • Click ‘Select File’ or ‘Select Device’ to choose your encrypted container file or partition.
    • Choose a mount point (a drive letter where the volume will appear).
    • Click ‘Mount’.
    • Enter your TrueCrypt password when prompted.
  3. Access Your Data: The encrypted volume should now be accessible as a normal drive in Windows Explorer (or your operating system’s file manager).

Troubleshooting

  1. USB Drive Not Booting:
    • Double-check the boot order in BIOS/UEFI.
    • Try a different USB port.
    • Recreate the bootable USB drive using Rufus with different settings (e.g., MBR vs GPT).
    • Ensure your BIOS/UEFI supports booting from USB.
  2. TrueCrypt Volume Not Mounting:
    • Verify you are using the correct password. Passwords are case-sensitive!
    • Make sure you have selected the correct container file or partition.
    • Try mounting as a hidden volume (if applicable).
    • Check the VeraCrypt documentation for specific error messages and solutions: https://www.veracrypt.fr/wiki/Main_Page
  3. UEFI Secure Boot: If you have UEFI with Secure Boot enabled, it may prevent booting from the rescue disk. You might need to temporarily disable Secure Boot in your BIOS/UEFI settings.
Related posts
Cyber Security

Zip Codes & PII: Are They Personal Data?

Cyber Security

Zero-Day Vulnerabilities: User Defence Guide

Cyber Security

Zero Knowledge Voting with Trusted Server

Cyber Security

ZeroNet: 51% Attack Risks & Mitigation