What happens when an attacker finds that the dates of all the files in the first encrypted partition have never been opened perhaps for months?
My justification for this scenario is that Drive D is an encrypted backup of my Drive C. It is encrypted to minimize the risk of it being corrupted should my computer catch a virus. When dismounted (closed), my encrypted drive will be shown by Windows to be unformatted. As such, Windows will not normally write to it. Thus it offers a layer of security that should I lose all of my Drive C, I can recover by booting into my encrypted Drive D. I am not going to argue the fine print here. This is my justification for having encrypted my Drive D. If there are viruses which can cause Windows to format Drive D, so what? I will argue I am ignorant of such things. If doubts are raised they are impossible to prove without correctly guessing your second passphrase. Even if your attacker convinces you he knows DCPP offers the possibility of a hidden partition there is a plausible defence. Note: It is not a good idea to simply copy your Drive C installation to your Drive D, because all the registry
