All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: Data Recovery from an encrypted drive that was formatted
PostPosted: May 23rd, 2017, 0:03 
Offline

Joined: May 22nd, 2017, 7:02
Posts: 2
Location: India
By mistake I have formatted my external hard disk that had McAfee Encryption for removable media in place. There has been no action on this external hard disk subsequent to these steps. I tried some of the recovery tools, but none have helped. Is there any chance that I can recover my lost files? The disk is in perfect working condition and I have my password that I used to access the encrypted drive in prior to formatting.


Top
 Profile  
 
 Post subject: Re: Data Recovery from an encrypted drive that was formatted
PostPosted: May 23rd, 2017, 12:03 
Offline

Joined: November 7th, 2015, 13:04
Posts: 170
Location: Austin metro area TX USA
If possible, usb or dvd boot any backup / restore / clone program and either make a one-pass clone or make a one-pass sector by sector full image of that source HD onto any external target HD; store that 2nd copy in a safe place.
"...I tried some of the recovery tools, but none have helped..." -- exactly what software and what steps have been tried so far?

_________________
"Take care of thy backups and thy restores shall take care of thee." Ben Franklin revisited


Top
 Profile  
 
 Post subject: Re: Data Recovery from an encrypted drive that was formatted
PostPosted: May 23rd, 2017, 15:57 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2520
Location: Ontario, Canada
Here is my approach:

1. get a full sector-by-sector clone
2. attempt to force mcafee to decrypt clone with saved key (assuming you have one)
3. scan decrypted drive for lost data

You cannot skip to step 3 without first doing step 2.

_________________
Luke
Recovery Force Data Recovery


Top
 Profile  
 
 Post subject: Re: Data Recovery from an encrypted drive that was formatted
PostPosted: May 23rd, 2017, 16:24 
Offline

Joined: November 29th, 2006, 10:08
Posts: 7843
Location: UK
We had one a while ago, it wasn't formatted but the clone wasn't good enough boot. It was an SSHD with bad heads we had to fix up and clone.

We had to get the correct version of the McAfee decryption tool, get a "code of the day" to activate it and then import the saved key to start the decryption process. Thankfully the clients support company were able to supply these.

It then took 5 days to entirely decrypt the clone and then we were able to scan and extract the data.

_________________
PC Image Data Recovery
http://www.pcimage.co.uk

New!! HDD-PCB.COM for all your PCB and donor HDD requirements!


Top
 Profile  
 
 Post subject: Re: Data Recovery from an encrypted drive that was formatted
PostPosted: May 24th, 2017, 0:28 
Offline

Joined: April 16th, 2008, 4:50
Posts: 264
:good:
Quote:
Here is my approach:

1. get a full sector-by-sector clone
2. attempt to force mcafee to decrypt clone with saved key (assuming you have one)
3. scan decrypted drive for lost data

You cannot skip to step 3 without first doing step 2.

I will go with "Icoughey"
i have recovered many drives with FORCE DECRYPTION Method. You will get all the data assuming it was just Formatted.


Top
 Profile  
 
 Post subject: Re: Data Recovery from an encrypted drive that was formatted
PostPosted: May 24th, 2017, 1:17 
Offline
User avatar

Joined: December 8th, 2013, 4:48
Posts: 831
Location: Pakistan
lcoughey wrote:
Here is my approach:

1. get a full sector-by-sector clone
2. attempt to force mcafee to decrypt clone with saved key (assuming you have one)
3. scan decrypted drive for lost data

You cannot skip to step 3 without first doing step 2.


+1

_________________
Data Recovery Pakistan


Top
 Profile  
 
 Post subject: Re: Data Recovery from an encrypted drive that was formatted
PostPosted: May 24th, 2017, 4:56 
Offline

Joined: October 24th, 2014, 4:57
Posts: 219
Location: Remote Raid Help on planet Earth
It is very important what kind of version. For a new versions there are the soft for decryption, for old versions it is possible if the rescue disk has been created (nobody do this:)).

_________________
http://www.alfadatarecovery.com


Top
 Profile  
 
 Post subject: Re: Data Recovery from an encrypted drive that was formatted
PostPosted: June 15th, 2017, 2:36 
Offline

Joined: May 22nd, 2017, 7:02
Posts: 2
Location: India
ROb, Hi,
How do I get McAfee to force decrypt the drive? My IT Ops team tried, but McAfee does not seem to recognize this drive as being encrypted since it has been formatted. Any suggestions / pointers on how force decryption is done in such cases?


Top
 Profile  
 
 Post subject: Re: Data Recovery from an encrypted drive that was formatted
PostPosted: June 15th, 2017, 6:36 
Offline

Joined: April 16th, 2008, 4:50
Posts: 264
PM sent


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 62 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group