Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 5 subscribers
  • Views 1844 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Emergency uninstall - SGE201: Hard Disk error

paxel

Hello.

I got a hard drive encrypted with SGE4.3. After physical test I found one bad sector. I made 1:1 copy of entire HDD (bad sector around LBA 64000000) to new hard drive (original 80GB IDE 2.5'', copy 80GB SATA 3,5'' and 80GB IDE 3,5''). I don't have original laptop, just hard drive to save data from. Also I have username and password (for system account).

Original HDD is still passing authentication but fails to boot into Windows. Cloned HDD does exactly the same so I guess it is properly cloned.

When trying to run emergency decryption on the copy, after authentication SGEASY returns error SGE201: Hard Disk error.

I tested hard drive and it is Ok, no physical problems. What could be the problem? I don't want to try to run it on original hard drive as it would most probably fail due to bad sector.

Thanks for any advise.

Paul

:1294


This thread was automatically locked due to age.
Parents
  • 0

    Hello again.

    Unfortunately neither BartPE nor WinPE worked for me as partition was corrupted and non accessible, shown as RAW.

    I found another way to recover data. As boot-loader was still working, I connected encrypted drive and blank drive to PC which allows to chose boot device on (boot-menu), started booting from HDD, entered login/password and pressed F7. Then booted from CD, started cloning software and cloned NTFS partition onto blank drive. Then connected that drive to another PC with recovery software installed and then I was able to scan and recover data.

    Best regards,

    Paul.

    :1314
Reply
  • 0

    Hello again.

    Unfortunately neither BartPE nor WinPE worked for me as partition was corrupted and non accessible, shown as RAW.

    I found another way to recover data. As boot-loader was still working, I connected encrypted drive and blank drive to PC which allows to chose boot device on (boot-menu), started booting from HDD, entered login/password and pressed F7. Then booted from CD, started cloning software and cloned NTFS partition onto blank drive. Then connected that drive to another PC with recovery software installed and then I was able to scan and recover data.

    Best regards,

    Paul.

    :1314
Children
No Data
Unfiltered HTML