A laptop user has a corrupted XP install (BSOD, Page fault in non paged area, same with safe mode) and using the SafeTech CD, i can authenticate with the SBFS but when I try to either remove EEPC or use A43 file manager to browse files to pull off, I instantly get a BSOD. Basically it BSOD's everytime it reads off the drive even if i used command prompt and go to the drive.
The drive is still encrypted and i've made a RAW image of it. is there anyway i can decrypt/pull files off it while it's in this image state? Alternatively, if the HDD is mounted in a caddy?
-in a caddy, host PC see's the drive and paritions as RAW (as expected) since they're still encrypted.
system: Dell E4300, Windows XP SP3, SB 5.2.5.
usually this is because you're using the wrong disk drivers - you didnt mention the specifics of the BSOD though.
Either switch the BIOS into ATA compatibility mode (then the built in WinPE drivers will work), or you could use SafeTech Standalone to remove?
If you want to slave the drive and decrypt with eetech, you're still going to need a WinPE disk if the machine you slave the drive to is encypted itself.
simply, you can only have one key in memory at a time, so if you boot though SafeBoot/EEPC, that's the only key you can use.
actually tried both standard ATA mode and AHCI with drivers loaded, both still bluescreen when trying to access the drive after authentication.
However, If i load the file manager first, then authenticate and go back, i can see the file/folder tree in the root of one of the drives but trying to do anything else results in a BSOD.
- normal boot, AHCI mode, 0x000050 Page fault in non paged area.
- ATA mode boot, 0x000007
using SafeTech CD in ATA mode after authentication in file manager, gives 0x0000050 Page fault in non paged area
the host machine i'm slaving it to isn't encrypted but i don't have an EEtech disk.
I thought that too so I tried with a newer version from a different IT team and same results.
I've got PE 3.1.10.
it's worked fine previously with all my other corporate imaged laptops.
first thing i tried. Tried another identical laptop and same result.
I'll just mark this as failed with no data recoverable and move on.
Many thanks for your suggestions Safeboot.