I have corrupted HDD in user's laptop but it encrypt by McAfee Endpoint Encryption. I try to Decrypt it using EEtech but unsuccessful, it stays at 0% for 3 days. So user decided to send to 3rd Party company to do Deep Data Recovery, and he manage to get all the data.
Now the problem is we can see all the files, but we cannot open it. according to the guy who do the recovery it because of McAfee software lock the files. So i need advise from the team, how do i unlocked this files? is there any software from McAfee we can install to unlock all the files?
above is the error in every files we try to acess
"Cannot open the file .... because the file format or file extension is not valid.
What you suggest would only be possible if the drive was not encrypted - If it was, the file names would not be recoverable.
you posted your question in the consumer section of this forum though, and you're using an enterprise data protection product - if you still have the problem, post in the business data protection forum.
McAfee Drive Encryption does not perform file level encryption. Drive Encryption encrypts each sector on the drive and has no knowledge of individual files and has no ability to "lock" a file. Is it possible the system was running File and Removable Media Protection (formally Endpoint Encryption for Files and Folders)? FRP can encrypt individual files and decrypting drive will not decrypt the individual files as MDE and FRP use two different methods of encryption.