TrueCrypt volume won't dismount unless I do it Forcibly

I installed the latest truecrypt on windows 7 rtm. I mounted a volume and when I wanted to dismount a dialog poped up and said that files within the volume were in use and whether or not I would like to forcefully dismount. I used 'unlocker' to see what could possibly be using files within the volume and the results showed that nothing was in use. I forcefully dismounted and I subsequently lost my work that was altered. I realized than unlocker was with incompatible with windows 7, after searching for a solution I found Lockhunter which is windows 7 compatible. This is what is showed me.https://www.sevenforums.com/attachmen...=1&d=1254772119. I want to know how can I disable these processes from access/locking onto files on this volume?

Using utilities like "Unlocker" to actually "unlock" is inherently dangerous to your data.

The fact that an object is "locked" means that one or more processes/apps still expect to be able to work with that object in its present form. Those apps have registered their intentions towards the object with the OS, and in turn the OS prevents other apps from accessing the same object in an incompatible manner until the first app acknowledges that it's finished.

"Unlocker" and other similar utilities do not induce the original app to "hurry up and finish using the file". Instead, they merely delete the information record which allows the OS to keep track of that link, without regard to whether the original app is yet to save all data or anything of the sort. As you've unfortunately found out, that can lead to data corruption. Conceptually, it's not all that different to using Task Manager to terminate the first process because the second one wants access to the object.

In your example above, the active locks ("handles") are possibly caused by your anti-virus doing stuff (it can run as "system"), and an open Windows Explorer pane focused on the z: drive.

oracle2b said:

I've used unlocker to unlock apps like everything from being latched to a drive letter. without and lost of data.

And most of the time, Russian Roulette is an uneventful game.

oracle2b said:

What i'm seeing now is that system processes are interfering with me dismounting my truecrypt volume safely. I need help fixing this so that I can mount and dismount a volume without and lost of data.

It's not that simple. Both the System and Explorer processes may be running non-default code which is specific to your machine. If their behaviour has changed recently on your machine, the most likely cause is some type of security or inspection utility which you installed just prior to when the problem began. Uninstalling your AV and testing without it would be a good start.

AFAIK, Unlocker doesn't actually unlock anything under Win 7. It does forcibly delete stubborn files though.

torrentg said:

AFAIK, Unlocker doesn't actually unlock anything under Win 7. It does forcibly delete stubborn files though.

Only because it relies on sinking a driver down into kernel-mode to do its dirty work, and the author hasn't gone through the process of getting his driver signed, so Unlocker no werky under x64. (The OP mentioned he'd gone over to another product.)

The specific utility doesn't matter though. It's the practice of forcibly closing open app handles which is potentially hazardous to data integrity, irrespective of which mechanism/utility is used to do it.

My aim is to inform, not to chastise or moralise :)

oracle2b said:

Ok I've uninstalled Avira antivirus and rebooted my laptop. I mount the truecrypt volume only to be met with the same prompt on whether i'd like to forcibly dismount the volume. The same exact processes stated in my original post are the culprits. When I connect my 2 other external usb drives I never have any difficulty ejecting/removing the device safely.

Too bad. It was worth a shot.

Unfortunately, this is not an easy thing to troubleshoot. Your best bet might be to try to work out what's so special about the lone USB drive (out of 3?) that has a problem. Presumably there's something different either in content, or the way it's accessed. For example, maybe you're storing photos (exclusively) on that drive and Explorer is set to show thumbnails? Something along those lines anyway.