Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

Troubleshooting
Research
Professional Opinions
Ask a Question
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

troubleshooting Question

Recover Partitions After PGP WDE Decryption

Avatar of ChristopherDunn
ChristopherDunn asked on
Windows XPEncryptionDisaster Recovery
4 Comments1 Solution2146 ViewsLast Modified:
Hello,

Background: I recently got a malware infection which combined with a Windows update to yield a blue screen when any starting mode was chosen (safe, command prompt, regular, last known good). As the hard drive was PGP encrypted, I chose to decrypt it to begin troubleshooting.

Problem: I removed the hard drive from my laptop and plugged it into my desktop, where I mounted it as a hard drive to one of my virtual machines that has PGP. I decrypted the drive and everything looked fine from the VM. I then detached the drive and put it back into the laptop. I get the boot menu but then it immediately goes to blue screen.

Recovery console doesn't work (can't recognise the file system). I booted from an Ultimate Boot PE environment, and it sees two partitions but cannot access them. DiskPart and Disk Manager sees the partitions but cannot access them either. Chkdsk cannot read them either. One disk recovery tool "FileRecovery" sees the lettered partitions with nothing in them, and it sees 2 partitions called NONAME. If I look into the NONAME partitions, all of the data is there. How do I fix the partitions so that they point to the data?

PS I'm an IT professional, so I don't need baby steps.

Thanks!
ASKER CERTIFIED SOLUTION
Avatar of BlueThunda
BlueThundaFlag of United States of America image

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Commented:
This problem has been solved!
Unlock 1 Answer and 4 Comments.
See Answers