I think this was eUSB, not endpoint encryption which did this? If so the files should be in your user temp directory still?
You need to tell us exactly what product/version you are using though to really get any help.
with some digging aorund it seems that the Encryption Endpoint s/w created a whole bunch of .dsk<nnn> files, each of 2GB in size i.e. encrypted.dsk1 up to encrypted.dsk931 so looks like a set of partitions of some sort were created.
Is there any chace that my data is locked away in some of these files or does the mere existence of these files suggest that my data has been completed wiped and replaced by these instead? if the former, is there a way to decrypt these files and gt my data back?
software product version information is as follows:
McAfee Endpoint Encryption for PC 5.2.6
Hmm.. EEPC can't do what you suggest - are you sure you're not using Endpoint Encryption for File/Folder?
The files you've found sound like an Endpoint Encryption for Removable Media container - usually that is created, and your orignal content moved back into it - you don't have an executable on the drive to run?
Have you contacted your company helpdesk about this?
it's possible - could it be the case that Endpoint Encryption for PC comprises Endpoint Encryption for File/Folder perhaps?
how can i tell for definite - is there a location in my Windows registry or perhaps a certain folder or file on my system that would indicate that?
no, the two products are separate, but your company could indeed have installed both. You can tell easily enough - what options do you have on the icon in your tool tray? do you have right-click encrypt options?
regardless though, check your temp directory, and call your corporate helpdesk - they should be able to help you.
here's what's on my Desktop
I've chcked my TEMP directory and there is nothing there of note
I have already engaged my helpdesk colleagues and they've drawn a blank
In Windows Explorer when I right click on the Drive that represents my external hard drive and go to Properties it reports that all but 4 MB of the 2 TB is full, yet Windows Explorer doesn't show any file contents, even when I have "Show Hidden & System Files" checked
Is there any other advice you can provide to help me troubleshoot this further - do you think by old data is actually gone or do you think McAfee Encryptrion s/w has just masked it from view, in whihc case I need to know how I can go about recovering it
are you SURE you don't have MFEEERM.exe anywhere on your system? Everything would indicate that the encryption worked perfectly, especially if you don't have the data in your user TMP directory.
What happened to all the .dsk files you mentioned above?
I was assisting Garry to recover his data and this is what I found:
are you SURE you don't have MFEEERM.exe -
When I booted to the Win Tech CD I found the following folders:
There were two folders on the drive: McAfee EERM
System Volume Information
In the McAfee EERM folder there were a number of files – encrypted.dsk1 up to encrypted.dsk931. Each one was about 2GB in size.
I was able to copy 4 files to another external hard drive but not able to open them
What happened to all the .dsk files you mentioned above -
These files are only visible when you boot to the Win Tech CD and are still on the external hard drive. I do not know what these files are other than they are 2GB in size and there were about 931 of them on the drive.