PGP encrypted partiton turned to "raw"..unable to read!!

How to use TestDisk to recover lost partition
Post Reply
Message
Author
krisbutler
Posts: 2
Joined: 07 Jan 2013, 16:14

PGP encrypted partiton turned to "raw"..unable to read!!

#1 Post by krisbutler » 07 Jan 2013, 16:45

Hi,

I have the following problem, and wonder if anyone can help please? (I have been given the name of testdisk/photorec by Symantec tech support for this!!):

I have a work laptop with a 320gb HD. The hd was encrypted with PGP Whole Disc Encyption 10.2.0 MP1 and split into two partitions (100gb system, 220gb Data). The laptop one day, had a BSOD and upon reboot, the data partition was marked as RAW and inaccessible. This partition has all my work and data on it, but following a cmd line removal of PGP, the partition is still inaccessible. Symantec PGP support think that the partition is still possibly encrypted, but damaged and have offered little help in recovering or repairing. They advised try testdisk/photorec to see it that worked.

Can you offer any more advice - is the data lost for ever? I haven't used your software before, so any help in configuring/proceeding would be great

Thanks in advance
Kris

Sponsored links

User avatar
Fiona
Posts: 2836
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: PGP encrypted partiton turned to "raw"..unable to read!!

#2 Post by Fiona » 08 Jan 2013, 09:50

Actually, TestDisk works standard.
For example Intel MBR, Microsoft cylinder boundary or Intel MAC (EFI GPT) would be supported.
If you encrypt a partition or disk, it might be possible that each sector inclusive boot sector and MBR are encrypted also.
So it's not standard anymore.
Before you can diagnose it, encryption must be removed or at least should be decrypted.
Maybe, some techniques provided in this link;
https://www.itsecurity.ucla.edu/documen ... ft%203.pdf
But as long as you're not absolute sure, don't change anything to your disk/partition.
It can make data recovery impossible.

Fiona

krisbutler
Posts: 2
Joined: 07 Jan 2013, 16:14

Re: PGP encrypted partiton turned to "raw"..unable to read!!

#3 Post by krisbutler » 08 Jan 2013, 13:54

Hi Fiona,

I did decrypt the drive using a PGP recovery cd, but because the partition in question is showing as raw, PGP won't recognise/do anything with it...

Regards
Kris

Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests