Page 1 of 1

PGP encrypted partiton turned to "raw"..unable to read!!

Posted: 07 Jan 2013, 16:45
by krisbutler
Hi,

I have the following problem, and wonder if anyone can help please? (I have been given the name of testdisk/photorec by Symantec tech support for this!!):

I have a work laptop with a 320gb HD. The hd was encrypted with PGP Whole Disc Encyption 10.2.0 MP1 and split into two partitions (100gb system, 220gb Data). The laptop one day, had a BSOD and upon reboot, the data partition was marked as RAW and inaccessible. This partition has all my work and data on it, but following a cmd line removal of PGP, the partition is still inaccessible. Symantec PGP support think that the partition is still possibly encrypted, but damaged and have offered little help in recovering or repairing. They advised try testdisk/photorec to see it that worked.

Can you offer any more advice - is the data lost for ever? I haven't used your software before, so any help in configuring/proceeding would be great

Thanks in advance
Kris

Re: PGP encrypted partiton turned to "raw"..unable to read!!

Posted: 08 Jan 2013, 09:50
by Fiona
Actually, TestDisk works standard.
For example Intel MBR, Microsoft cylinder boundary or Intel MAC (EFI GPT) would be supported.
If you encrypt a partition or disk, it might be possible that each sector inclusive boot sector and MBR are encrypted also.
So it's not standard anymore.
Before you can diagnose it, encryption must be removed or at least should be decrypted.
Maybe, some techniques provided in this link;
https://www.itsecurity.ucla.edu/documen ... ft%203.pdf
But as long as you're not absolute sure, don't change anything to your disk/partition.
It can make data recovery impossible.

Fiona

Re: PGP encrypted partiton turned to "raw"..unable to read!!

Posted: 08 Jan 2013, 13:54
by krisbutler
Hi Fiona,

I did decrypt the drive using a PGP recovery cd, but because the partition in question is showing as raw, PGP won't recognise/do anything with it...

Regards
Kris