PGP encrypted partiton turned to "raw"..unable to read!!

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
krisbutler
Posts: 2
Joined: 07 Jan 2013, 16:14

PGP encrypted partiton turned to "raw"..unable to read!!

#1 Post by krisbutler »

Hi,

I have the following problem, and wonder if anyone can help please? (I have been given the name of testdisk/photorec by Symantec tech support for this!!):

I have a work laptop with a 320gb HD. The hd was encrypted with PGP Whole Disc Encyption 10.2.0 MP1 and split into two partitions (100gb system, 220gb Data). The laptop one day, had a BSOD and upon reboot, the data partition was marked as RAW and inaccessible. This partition has all my work and data on it, but following a cmd line removal of PGP, the partition is still inaccessible. Symantec PGP support think that the partition is still possibly encrypted, but damaged and have offered little help in recovering or repairing. They advised try testdisk/photorec to see it that worked.

Can you offer any more advice - is the data lost for ever? I haven't used your software before, so any help in configuring/proceeding would be great

Thanks in advance
Kris

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: PGP encrypted partiton turned to "raw"..unable to read!!

#2 Post by Fiona »

Actually, TestDisk works standard.
For example Intel MBR, Microsoft cylinder boundary or Intel MAC (EFI GPT) would be supported.
If you encrypt a partition or disk, it might be possible that each sector inclusive boot sector and MBR are encrypted also.
So it's not standard anymore.
Before you can diagnose it, encryption must be removed or at least should be decrypted.
Maybe, some techniques provided in this link;
https://www.itsecurity.ucla.edu/documen ... ft%203.pdf
But as long as you're not absolute sure, don't change anything to your disk/partition.
It can make data recovery impossible.

Fiona

krisbutler
Posts: 2
Joined: 07 Jan 2013, 16:14

Re: PGP encrypted partiton turned to "raw"..unable to read!!

#3 Post by krisbutler »

Hi Fiona,

I did decrypt the drive using a PGP recovery cd, but because the partition in question is showing as raw, PGP won't recognise/do anything with it...

Regards
Kris

Locked