bitlocker

If TPM is disabled in the BIOS, this may be worth a try. I've never tried it on a bitlocker system.

http//www.piotrbania.com/all/kon-boot/

–Chad

NO, unfortunately kon-boot is a tool to workaround "normal" Windows passwords (i.e. Winlogon), and has nothing to do with bitlocker (or any hard drive encryption tool).

The given link is for the old (Free ) ) version, homepage of the new, Commercial version is here
http//www.kryptoslogic.com/?area=2&item=2

See FAQ's
http//www.kryptoslogic.com/?area=2&item=2&page=4

Can Kon Boot bypass hard drive encryption?

No. Kon Boot will only bypass authentication of Windows based local passwords.

jaclaz

jaclaz,

thanks for the clarification. i figured it was a long shot (and would have been VERY surprised if it worked). I've never seen bootlocker on a non TPM system… wasn't sure what "workarounds" were available. kon-boot and passware ram dump over firewire first to mind.

–Chad

thanks guy's - were going to attempt it without freezing the ram, but instead leaving it in a very cold room with AC down as low as poss.

F-Response have released a video in conjunction with passware for bitlocker drives. I'm unsure if the password has to be entered and stored in memory prior to running the tools but never the less it is interesting.

hi, yes saw that video the other day.

I thought that bitlocker wouldnt store info in the ram until login, but as the system doesnt seem to have TPM enabled in the BIOS we may well have a chance at getting it, its worth a go anyway

I'm just in the process of Zero'ing a USB mem stick before I attempt it.