true crypt

eumail · 11-04-2009, 09:37 AM

Since when I switched from XP to Vista, my encripted (Truecrypt) files have become "read only" and no way to get them back to "free" ones. Could you help me ? I have found the following on truecrypt web site but I don't know what to do. Where are the upper filters ? As you will have understood, I am no expert ... Thanks

"It seems that truecrypt registered itself as one of the "UpperFilters" in the following registry entry to render all unqualified volumes write protected.

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
"UpperFilters"="truecrypt"

So, remove "truecrypt" from the "UpperFilters" and reboot the system -- write protection is gone. For example. simply rename or delete the "UpperFilters" entry if truecrypt is the only one in it.

And of course you know how to get it back.

Anybody can help me ? Thanks Giovanni

kevmacca · 11-04-2009, 05:16 PM

it means you need to use regedit and browse to that entry and delete truecrypt from it, you might need someone with experience using regedit if you are not sure of going into the registry yourself.

**TheOutcaste** · 11-04-2009, 08:42 PM

ControlSet001 may not be the one you are booting with, and even if it is, the CurrentControlSet tree will overwrite it when you shut down.
You would need open regedit and navigate to here instead:

Code:

HKEY_LOCAL_MACHINE\SYSTEM\ControlControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}

and delete the UpperFilters entry if it does say TrueCrypt
Or use this reg file:

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
"UpperFilters"=-

Copy and paste the above into Notepad, save it on your Desktop as FixCrypt.reg (Be sure to set Notepad Save as Type box to All Files)
Double click the file to merge it into the registry, then Reboot

Or use this version to set UpperFilters back to the default of VolSnap:
[HKEY_LOCAL_MACHINE\SYSTEM\ControlControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
"UpperFilters"=hex(7):56,00,6f,00,6c,00,53,00,6e,00,61,00,70,00,00,00,00,00[/code]

eumail · 11-05-2009, 04:28 AM

Thanks to everybody but ... it doesn't work .. I have managed to get into regedit but no way to find "upperfilters". There isn't not even the "controlcontrolset" .. I get to 712A27 .... but nothing else ... HELP !
Thanks Giovanni

**TheOutcaste** · 11-05-2009, 08:55 PM

Uh oh, my bad for that typo. It's CurrentControlSet, not ControlControlSet

eumail · 11-06-2009, 04:53 AM

No way ... after . 71A27CDD .. no way to find upperfilters. Anyway, I found a solution, copying my files to another HD, formatting and deleting the truecrypt file and creating a new one. It remains for me a mistery why all this happened. Another Vista's gift .. ??
Thanks to everybody
Giovanni

11-04-2009, 09:37 AM	#1 (permalink)
eumail Registered User Join Date: Apr 2008 Posts: 19 OS: Win XP	true crypt Since when I switched from XP to Vista, my encripted (Truecrypt) files have become "read only" and no way to get them back to "free" ones. Could you help me ? I have found the following on truecrypt web site but I don't know what to do. Where are the upper filters ? As you will have understood, I am no expert ... Thanks "It seems that truecrypt registered itself as one of the "UpperFilters" in the following registry entry to render all unqualified volumes write protected. Code: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] "UpperFilters"="truecrypt" So, remove "truecrypt" from the "UpperFilters" and reboot the system -- write protection is gone. For example. simply rename or delete the "UpperFilters" entry if truecrypt is the only one in it. And of course you know how to get it back. Anybody can help me ? Thanks Giovanni

11-04-2009, 05:16 PM	#2 (permalink)
kevmacca Registered User Join Date: Mar 2007 Location: manchester UK Posts: 212 OS: xp,vista,windows 7	Re: true crypt it means you need to use regedit and browse to that entry and delete truecrypt from it, you might need someone with experience using regedit if you are not sure of going into the registry yourself.

11-04-2009, 08:42 PM	#3 (permalink)
TheOutcaste TSF Enthusiast Join Date: Mar 2009 Location: Portland, OR Posts: 815 OS: MS-Dos 6.22 - Win7	Re: true crypt ControlSet001 may not be the one you are booting with, and even if it is, the CurrentControlSet tree will overwrite it when you shut down. You would need open regedit and navigate to here instead: Code: HKEY_LOCAL_MACHINE\SYSTEM\ControlControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F} and delete the UpperFilters entry if it does say TrueCrypt Or use this reg file: Code: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] "UpperFilters"=- Copy and paste the above into Notepad, save it on your Desktop as FixCrypt.reg (Be sure to set Notepad Save as Type box to All Files) Double click the file to merge it into the registry, then Reboot Or use this version to set UpperFilters back to the default of VolSnap: [HKEY_LOCAL_MACHINE\SYSTEM\ControlControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] "UpperFilters"=hex(7):56,00,6f,00,6c,00,53,00,6e,00,61,00,70,00,00,00,00,00[/code] __________________ Microsoft MVP - Windows Desktop Experience Of course I know all the answers; I just don't always match the answers to the right questions. Rated R for Violence -- When your PC flies through a window, that's violent, right?

11-05-2009, 04:28 AM	#4 (permalink)
eumail Registered User Join Date: Apr 2008 Posts: 19 OS: Win XP	Re: true crypt Thanks to everybody but ... it doesn't work .. I have managed to get into regedit but no way to find "upperfilters". There isn't not even the "controlcontrolset" .. I get to 712A27 .... but nothing else ... HELP ! Thanks Giovanni

11-05-2009, 08:55 PM	#5 (permalink)
TheOutcaste TSF Enthusiast Join Date: Mar 2009 Location: Portland, OR Posts: 815 OS: MS-Dos 6.22 - Win7	Re: true crypt Uh oh, my bad for that typo. It's CurrentControlSet, not ControlControlSet __________________ Microsoft MVP - Windows Desktop Experience Of course I know all the answers; I just don't always match the answers to the right questions. Rated R for Violence -- When your PC flies through a window, that's violent, right?

11-06-2009, 04:53 AM	#6 (permalink)
eumail Registered User Join Date: Apr 2008 Posts: 19 OS: Win XP	Re: true crypt No way ... after . 71A27CDD .. no way to find upperfilters. Anyway, I found a solution, copying my files to another HD, formatting and deleting the truecrypt file and creating a new one. It remains for me a mistery why all this happened. Another Vista's gift .. ?? Thanks to everybody Giovanni