Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 5 subscribers
  • Views 1843 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Emergency uninstall - SGE201: Hard Disk error

paxel

Hello.

I got a hard drive encrypted with SGE4.3. After physical test I found one bad sector. I made 1:1 copy of entire HDD (bad sector around LBA 64000000) to new hard drive (original 80GB IDE 2.5'', copy 80GB SATA 3,5'' and 80GB IDE 3,5''). I don't have original laptop, just hard drive to save data from. Also I have username and password (for system account).

Original HDD is still passing authentication but fails to boot into Windows. Cloned HDD does exactly the same so I guess it is properly cloned.

When trying to run emergency decryption on the copy, after authentication SGEASY returns error SGE201: Hard Disk error.

I tested hard drive and it is Ok, no physical problems. What could be the problem? I don't want to try to run it on original hard drive as it would most probably fail due to bad sector.

Thanks for any advise.

Paul

:1294


This thread was automatically locked due to age.
  • 0

    Hi Paul,

    thank you very much for submitting this one. With regards to this one things seems to be a little bit tricky. Actually I cannot give you a detailed step by step description how to solve this (just because of the given information) however I can give you these information:

    First of all you can find detailed information for SGE201 in this KBA: http://www.sophos.com/support/knowledgebase/article/108198.html

    Beside this there is the possibility to start a WinPE (KBA 6019) or a BartPE (KBA 107019) in oder to recover you data.

    Shoudl this alos not solve the problem or bring you any further please open a support ticket since furhter and deeper analysis would be required then.

    Regards

    Dan

    :1306
  • 0

    Hi Daniel.

    Thanks for reply.I already found informations from link you provided, and indeed I boot emergency tools before PBA, using emergency boot CD from my customer, also tried tool from here: http://www.sophos.com/support/knowledgebase/article/107623.html

    I would try using BartPE to, but first of all I need to ask my customer to provide me with installation disc to extract Bart_PE plugin from it (is there any other source I could get it from?).   

    Does it make any difference if version used on that HDD is 4.30.0 while article says about 4.50.x?

    Regards

    Paul

    :1309
  • 0

    Hello again.

    Unfortunately neither BartPE nor WinPE worked for me as partition was corrupted and non accessible, shown as RAW.

    I found another way to recover data. As boot-loader was still working, I connected encrypted drive and blank drive to PC which allows to chose boot device on (boot-menu), started booting from HDD, entered login/password and pressed F7. Then booted from CD, started cloning software and cloned NTFS partition onto blank drive. Then connected that drive to another PC with recovery software installed and then I was able to scan and recover data.

    Best regards,

    Paul.

    :1314
Unfiltered HTML