Solved

PGP (.pgd) file opens with passphrase, but contents are no longer there.

Posted on 2007-11-20
4
1,560 Views
Last Modified: 2013-11-08
I have been using a PGP virtual disk for over a year that has grown to over 25GB in size.  This file resides on a 1TB RAID-5 array on a system that is protected by redundant APCs and routed through 3 switches to protect it as much as possible from any anomalies such as lightning / surges / blackouts.  I do this because I rarely have time to maintain my own stuff.  Onto the point - - All has been well until last night, at which point I opened this file using my passphrase (which was cached because I had opened the file the night before), it mounted to drive M: as usual, but there was only a single Word document on M: - None of my folders or files were to be found.  Everything had been there the night before, and nothing was shutdown or restarted, nothing automatically updates on my systems, and I am the only person with physical access.  My systems all use independent randomly generated passwords that are roughly 20 characters long, so a "hack" is an extremely doubtful probability.
To check the file as much as I knew how, I copied it to an external drive, and then ran a "Compact Unused Space" action on the copy, which did not change its file size at all, leading me to believe there is something there, but for whatever reason, it no longer shows up, no matter which system I use to open the file.
I have spoken with PGP's Tech Support, to which their only answer was "pull from your backup copy" - which is unfortunately 2 months old due to the fact that the system reliability made me feel comfortable to the point of letting backups go to the back burner.  The worst part is, is that performing backups more frequently could be a bad thing - Considering the file was working when I used it last, if it had backed up that night automatically, then my backup would have been replaced by this file that magically emptied itself.
So the question is, Has anybody ever experienced this situation, or otherwise know of a solution to the problem?  The folks over at PGP cannot explain this and say they have never had this exact problem before, so they were largely unable to help out.
Thanks in advance for any answers that do help!  Matt
0
Comment
Question by:MNTTS
  • 2
  • 2
4 Comments
 
LVL 33

Accepted Solution

by:
Dave Howe earned 500 total points
Comment Utility
once mounted, you can run conventional disk-recovery tools against the mounted volume. I would suggest you mount a *copy* of the pgp drive, then run tools such as GetDataBack against the logical drive letter.
I have successfully recovered deleted files from a truecrypt volume using that method.
0
 

Author Comment

by:MNTTS
Comment Utility
DaveHowe,
I have attempted such recovery using EZRecovery with no luck, but I will try the software you recommend and post back with my results.... EZRecovery wouldn't allow me to select the drive, as it apparently only "sees" physical drives and their partitions.
Thanks,
Matt
0
 

Author Comment

by:MNTTS
Comment Utility
This worked successfully for me - The software recognized the virtual disk as a logical drive... The only (slight) downside is that the software had a pricetag, but that's minor considering it recovered 23.9GB of data (the entirety it would appear).  Thank you for your comment and providing the solution to this nagging problem (which appears to be very common, unfortunately).  A piece of advice I will share that I have found - rather than backing up the encrypted file itself, as I was doing, it is more wise to create a second virtual disk on another media, mount both, and do a file synchronization between the two virtual disks.  This helps ensure the backup copy is populated, and you're not copying a potentially corrupt file over the last backup that was good!  Thanks Again, Matt
0
 
LVL 33

Expert Comment

by:Dave Howe
Comment Utility
yeah. Downside - its commercial software. Upside it isn't EXPENSIVE commercial software (compared to the cost of a data recovery center), and its worth every penny. my copy has paid for itself at least a dozen times over.

one of the problems with encryption is that a lot of data recovery places won't touch it - I suspect that will change now vista has drive crypto bundled in, but I also suspect the prices will reflect the fact that you can't just download a cheap tool from the internet to compete against them :)

perhaps you can sell your services as an experienced *encrypted partition* data recovery expert now? :)
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

By default, Carbonite Server Backup manages your encryption key for you using Advanced Encryption Standard (AES) 128-bit encryption. If you choose to manage your private encryption key, your backups will be encrypted using AES 256-bit encryption.
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
This video teaches viewers how to encrypt an external drive that requires a password to read and edit the drive. All tasks are done in Disk Utility. Plug in the external drive you wish to encrypt: Make sure all previous data on the drive has been …
This Micro Tutorial will teach you how to reformat your flash drive. Sometimes your flash drive may have issues carrying files so this will completely restore it to manufacturing settings. Make sure to backup all files before reformatting. This w…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now