Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

MBR corruption data recovery

Hi,

My situation is not that great, I have a client, that was using some Safeguard encryption on their laptop. Unfortunately, which product and which version is unknown since the IT department has changed managers recently. 

What happened was, some errors have shown up, as far as I understand, MBR got corrupted. Someone at their IT department decided to run fixmbr off of the windows CD, which caused "NTLDR is missing" error at bootup. This basically means that the whole MBR was erased, and rewritten without Safeguard information in it. 

Of course, I don't get a PBA screen, and windows does not boot up. To make matters worse, the client hasn't backed up the kernel. 

I've run into some pdf's saying that I could run "BE_Restore.exe", and use the repair option in it. As far as I understand, that file resides on the installation CD, and is version dependent. Could someone confirm both of those? Also, could I download those, all of the versions, and try each? 

What I've tried so far is booting to Emergency CD v4.60.0 and trying the Repair option. Uninstall and Disable were grayed out. After some time, it said that it couldn't find the kernel, and gave me an error. 

Tech support told me over the phone that I'd need to try multiple Emergency CD's (different versions, something like 12), and they'd send me a link to them. Somehow, they didn't, but could someone here provide those, so I can try them? 

What would be my next course of action? 

Thank you for any help, in advance!

EDIT: 

As a matter of fact, I just found out that the version is Safeguard Easy 4.20. Once again, thanks for any help!

:4647


This thread was automatically locked due to age.
  • Hi Linkxs,

    If you still have an active support contract with Sophos/Utimaco, you can download a copy of the 4.20 SGE from the 'My Utimaco' download section of the website. The easiest way I know is to go to www.utimaco.de and click on MyUtimaco top right, log on with the support credentials you should have then once logged on, click download, products from the top menu and then expand the SafeGuard Easy Multi-platform. I can see v. 5.50 at the top and all versions back to v.4.11.0.138 at the bottom. V.4.20.2.162 is third from bottom so should be easy to download the ISO, burn it and use that for a quick recovery. I just hope you have the username/password to remove/unencrypt.

    Matt

    :4667
  • Hi All,

    I have the same problem with one of our laptops, MBR was somehow corrupted and deleted.

    And offcourse we don't have a backup of the kernel, i'm not able to create a new MBR i have tried several tools.

    I have Safe Guard Easy 4.50 and i have the admin password

    Is there a way to connect the harddrive the another pc (USB or SATA) and recover the data? 

    The only thing i could find was Safe Guard Enterprise has an option to do that but i have Safe Guard Easy

    Does anybody have an idea how to solve this.... I have tried most things from the knowledge base!

    Thanks in advance

    Regard

    David

    :5848