cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Former Member
Not applicable
Report Inappropriate Content
Message 1 of 10

how repair mbr encrypted disc

Jump to solution

Hello,

one colleague ask me for help and to try to get back its data as last chance.

if we boot on it, i saw error EE020001

The disk got slowly and has stop working, our support was not able to fixe. no backup data since one year done by the user.

it is a encryption disc  version 7.1.3 ,  i looked the McAffee procedures for boot with usb key and remove DE and when that is done, i can restore orginal mbr for getting back uncrypted disc, 

My question, if the encrypted mbr is corrupted, is it possible to repair ? before run remove DE and restore orginal MBR. 

Thanks for your information

KR

JP

 

1 Solution

Accepted Solutions
Former Member
Not applicable
Report Inappropriate Content
Message 3 of 10

Re: how repair mbr encrypted disc

Jump to solution

The error EE020002 was not th real one, it was not able to write on sdd, and it is impossible to run Force Uncrypt or Remote DE directly on it

I clone the disc SSD to hdd in raw mode sector by sector, the crypt partition was readable.  

After that, i was able to run  to  the

- restore Encrypted Mbr,

- Remote DE,

- Restore Orginal MBR,

After 4 days work and succesfully status,  i can get back data from new disc, and i will give back to the User.

i will give my feedback  to our helpdesk and to my manager, the epo was not able for restore anything and was completely inefficient. That why they have requested my support. 

Thanks 

 

 

View solution in original post

9 Replies
Former Member
Not applicable
Report Inappropriate Content
Message 2 of 10

Re: how repair mbr encrypted disc

Jump to solution

as alternative, i build a winpe amd-64 with procédure 7.1  

add  DETech à un CD / DVD Microsoft WinPE v5 64 bits (
BIOS and UEFI)

with Folder and Files for CD / DVD WinPE 64 bits page 44

i can start winpe, i can run EETECH,  but when i try to load recover  file, i get error message below

"McAffe Drive Encryption not present" EE040001

winpe look not load driver eetech? how know winpe et eetech know the version of Drive encryption 7.1.3.590

i check several time the driver folder of winpe, they are present under windows system32 drivers and i make regedit for check key value, they are now correct.

ps! i use also detech standalone Drive Encryption 7.1.3.590  i got message error EE020002 incompatible version, but that is the version we use, i can use action worskpace for decrypt sector, but remove de, restore mbr crypted returrn code EE020002, not funny seem bug tools detech recovery, because the user disk use Driver Encryption 7.1.3.590, and i use bootable usb with detech 7.1.3.590,  EE020002 say i use EEPC (Endpoint Encrytpion) tools and not the 7.1 drive encryption recover tools, look for me an  illogic error or bug.

is it possible to clone crypted disc on another one for repair ?

j

Former Member
Not applicable
Report Inappropriate Content
Message 3 of 10

Re: how repair mbr encrypted disc

Jump to solution

The error EE020002 was not th real one, it was not able to write on sdd, and it is impossible to run Force Uncrypt or Remote DE directly on it

I clone the disc SSD to hdd in raw mode sector by sector, the crypt partition was readable.  

After that, i was able to run  to  the

- restore Encrypted Mbr,

- Remote DE,

- Restore Orginal MBR,

After 4 days work and succesfully status,  i can get back data from new disc, and i will give back to the User.

i will give my feedback  to our helpdesk and to my manager, the epo was not able for restore anything and was completely inefficient. That why they have requested my support. 

Thanks 

 

 

View solution in original post

Former Member
Not applicable
Report Inappropriate Content
Message 4 of 10

Re: how repair mbr encrypted disc

Jump to solution

Hello

I just want to let you know that your post on here helped me to recover a very important HDD in my job, for some very senior person.

I saw your comment about cloning the drive sector by sector, and this worked for me to overcome this mysterious error writing to the SSD.

So thanks for your post!

Adam

Former Member
Not applicable
Report Inappropriate Content
Message 5 of 10

Re: how repair mbr encrypted disc

Jump to solution

Hello, addybgrilla-san,

As I wrote in the reply to jpbordi's post above, could you please share your knowledge and steps about how you could decrypt the data from the HDD?

I would highly appreciate it if you could kindly share your valuable knowledge for us.

Best Regards,

Koshi NAKAMURA

Former Member
Not applicable
Report Inappropriate Content
Message 6 of 10

Re: how repair mbr encrypted disc

Jump to solution

Hi, Jpbordi

I have had the same problem you faced.

In accordance with your post, I made raw mode cloned hdd from the corrupted ssd.

But, I have no idea on how to decrypt the cloned hdd.

Could you please tell me what I need to do to decrypt the cloned (external) hdd?

Did you use the EETech.exe when you decrypt the hdd?

And, did you install the hdd instead of the corrupted ssd into the PC?

Thanks so much for your kind helping hand in advance.

Koshi NAKAMURA

Former Member
Not applicable
Report Inappropriate Content
Message 7 of 10

Re: how repair mbr encrypted disc

Jump to solution

I dont know your specific case, but you must know which version of drive encryption and have acces support for download tools, eetech version depend of encryption version driver loaded

i use EETECH, not winpe

you must input mac affee code authorization calculator

you must input backup file recovery key file (aes) from user

you can check  partition encrypted on the first sector if the decrypt is working fine, you must be able to read some string message data

sample, 

https://viandikafauzi.com/wp-content/uploads/2018/08/First-sector.jpeg 

if ok, you can run remote DE for decryption

when decryption is done, you must restore original master boot record

when done and if you have access to data, copy all file on clean disk for saving.

https://www.youtube.com/watch?v=4dac7Pm0zL8

 because recovery is a very long process, for me, that take 4 days for decrypt 40 GB all the disk before i restore the master boot record initial.

i hope that can help you, good luck,

 

https://viandikafauzi.com/2018/08/how-to-manually-decrypt-a-drive-using-eetech/

Former Member
Not applicable
Report Inappropriate Content
Message 8 of 10

Re: how repair mbr encrypted disc

Jump to solution

Hello, jpbordi-san,

First of all, thank you so much for providing us with very detailed procedure.
I can't sufficiently convey my gratitude to you in my poor English writings. Very sorry. 😞

Under the COVID-19 calamity circumstance, most of my coleagues are doing home teleworking.
Some of them encountered the same trouble "BCD corruption" while they're doing "Windows 10 Feature Update" via VPN at their home. Unfotunately, McAfee Drive Encryption were used on those PCs. That is the situation of my problem.

I saw the "EE120000" error when I ran EETech.exe "Crypte Sectors" feature to the coruppted SSD..
I will try to decrypt the HDD based on the procedure you kindly provided us and will report the results to this forum for knowledge sharing.

Best regards,
Koshi NAKAMURA

Former Member
Not applicable
Report Inappropriate Content
Message 9 of 10

Re: how repair mbr encrypted disc

Jump to solution

alternative way like say by other user for EE120000 error, you can do in this way after check encryption partition  first and last sectors 

Load the first sector you want to test into the workspace and decrypt it (its in memory only), and also the last one. If both decrypt nicely, you know everything inbetween is encrypted as well and you can use the force decrypt option.

https://community.mcafee.com/t5/Encryption-ePO-Managed/Error-EE120000-Endpoint-Encryption-is-not-cur...

Former Member
Not applicable
Report Inappropriate Content
Message 10 of 10

Re: how repair mbr encrypted disc

Jump to solution

Hello jpbordi-san,

Firstly, I'm sorry for my belated reply because my office was closed on July 22nd and 23rd due to a holiday in Japan.
Thank you so much for your further guidance. 

I'm in the process of repairing work, and I'll let you know when the results come out.

Kind Regards,
Koshi NAKAMURA

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community