Jump to content

Guardianedge Help


dimaj
 Share

Recommended Posts

Hey guys!

I have a huge problem which I desperately need help with...

Me, being as stupid as I am, never backed up my HDD, which is encrypted with GuardianEdge. (It's my work computer). Last night I though it would be a great idea to install Ubuntu 10.04 on SDHC card, so that I could plug it in into any computer and get my linux environment. What I didn't realize is that during installation my MBR got overwritten and grub was installed.

This morning, I came to work (all happy that I have linux on SD card) and was greeted with a happy grub prompt. At that point, I thought it would be a good idea to restore my NTLDR. So, I ran ms-sys -m /dev/sda from Ubuntu LiveCD. After reboot I was greeted with even happier message "Error loading operating system."

I suspect that my MBR was also encrypted and after MBR has been overwritten, I can no longer decrypt my main partition for booting purposes.

So, here comes the question... is there any way to recover some data from that hard drive? I've worked for 3 weeks on a project (no backups and not checked in) and I really don't want to do it over again.

Any help and ideas are appreciated.

dimaj

Link to comment
Share on other sites

You can give this tools a try, but I am not 100% certain whether you will be able to retrieve your data, since you have already installed a different file system.

You will need to install your HDD onto another machine, in order to try to restore the files.

http://www.cgsecurity.org/wiki/TestDisk

http://foremost.sourceforge.net/

http://www.digitalforensicssolutions.com/Scalpel/

Link to comment
Share on other sites

  • 2 weeks later...

Did you ever have any luck with this? I have some experience with data recovery from encrypted partitions, and it's nice to see followups.

From my experience however, once your encrypted MBR has been overwritten, you're pretty much out of luck, assuming GuardianEdge is configured for whole-disk encryption. The tools linked to above are good for file carving, but are useless if you can't decrypt the disk. I've even been on the phone with GuardianEdge when a client's MBR became corrupted, and they weren't able to help me.

Wish I had better news for you! Let us know if you're able to recover anything and what steps you took...

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...