how bypass disk enc...
 
Notifications
Clear all

how bypass disk encrypted technology Microsoft Bitlocker

5 Posts
2 Users
0 Reactions
998 Views
(@security)
Active Member
Joined: 10 years ago
Posts: 16
Topic starter  

Hello all
I have a problem A disk is damaged physically and encrypted technology Microsoft Bitlocker
Disk encrypted using BitLocker on the operating system level.
Electronic panel of the tablet PCB sound not show any trace of burning or similar.
There was no unusual sound from the disk after you turn it demonstrates the internal damage.
Try to read the contents using DDI program failed, did not respond to the read head is There are no solutions, only
Disk repair material so that it can read its content. This requires a laboratory specialist and an expert in the physical recovery of hard drives ways Building architectural disk so that the system can run to identify the disk and try to restore files from it after decoding hard disk encryption Are there other solutions thank you


   
Quote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Hello all
I have a problem A disk is damaged physically and encrypted technology Microsoft Bitlocker
Disk encrypted using BitLocker on the operating system level.

You seemingly have TWO of them
1) you cannot access the data
2) the data when (and if) will become accessible will need to be decrypted

You cannot even attempt to solve problem #2 until problem #1 is solved.

Which solution do you expect short of laboratory recovery (maybe) for problem #1?

Telepathy?
Magic?

😯

Maybe there is a language issue of some kind, what do you mean by

Building architectural disk so that the system can run to identify the disk and try to restore files from it after decoding hard disk encryption

?
jaclaz


   
ReplyQuote
(@security)
Active Member
Joined: 10 years ago
Posts: 16
Topic starter  

Hello all
I have a problem A disk is damaged physically and encrypted technology Microsoft Bitlocker
Disk encrypted using BitLocker on the operating system level.

You seemingly have TWO of them
1) you cannot access the data
2) the data when (and if) will become accessible will need to be decrypted

You cannot even attempt to solve problem #2 until problem #1 is solved.

Which solution do you expect short of laboratory recovery (maybe) for problem #1?

Telepathy?
Magic?

😯

Maybe there is a language issue of some kind, what do you mean by

Building architectural disk so that the system can run to identify the disk and try to restore files from it after decoding hard disk encryption

?
jaclaz

Problem is resolved
Tools used
Clean room of Category V Class 5 Clian Room of AirClian System Inc.
Hard Disk surgery tools company Dolphin Data Lab
DDI program v4 of the company DeepSpar
The reform of the internal flaw
The disc has been opened in a clean room using Dophin Tools Data Lab, it was observed that a component of Platter one disc, and has read my head (the head from every direction).
Platter disc is clean and unscratched It is a good sign.
Was transferred alternative read heads of solid identical disk, it was used Scott Moulton techniques to replace the heads
It was to spend three hours to weigh read heads Head Stack Alignment after the disc is closed. And those who do not know, the opening of the WD disk type is a nightmare, because once you open the disc, the grains to read and write heads are lost irrevocably. When the disc closes again after replacing the heads, then you may spend several hours trying to reach the grains correct reading heads
Repair faulty disk operating system
Disk operating system on identical to the existing e-BOIS painting, and a failure to read one of them leads to send an error and not load the disc.
Disk at hand was the copy on disk is damaged, especially the region Logical Block Addressing (LBA) Translator is an important area to determine the reading and its border regions.
We used Hot Swap with the proper disk is identical (the proper disk driver, and after downloading it, is placed in a state of hibernation, and decrypts the disk for board-mail, and then placed his place damaged disk), and in this way we were able to disk driver, but he could not verify the information MAX LBA, Vtm entered manually into the system
Read data
It has read the data in three phases
The first phase of the rapid
It aims to read everything you could read it as normal.
Characterized by quickly reading compared to other methods.
Maligned that if Sctor one in Block delayed for 300 ml second, are left without reading the entire block and leaves for the second phase.
Has read each of which includes blocks 120 Sictor, and a time of no more than 300 ml again.
This process took two full days, and we got 70% of the data.
The second phase reverse
Aimed at trying to read all the abandoned data from the first phase.
Sctor Sctor are reading, but in reverse, that is, from another Alsctor to the beginning. This method is often unsuccessful with damaged Alsctorat.
This process lasted for three consecutive days.
We were able to read an additional 20% to become our 90% of the data
The third stage Flour
Aimed at trying to read all the evidence left in the previous phases.
Here the focus is on all Sctor separately, and try to read it repeatedly in multiple ways.
This phase cost us the read head so we were forced to change it again.
After four days, we got nearly 98% of the data, and the remaining 400 thousand Sctor at the beginning of the disk, and 200 thousand at the end we were not able to read them in any way
The new problem that I faced was that the data we were able to extract the encrypted data, let alone to quit MBR unread area as well
Also decode Bitlocker disk encryption hard and try to restore the client files
After repairing the physical damage to the disk originally served a copy of the disk on an external disk, the largest with a capacity of one was terabytes, failed digital investigative tools that we used in the restoration of the file system due to physical damage that hit many parts of the hard disk tracks, especially in the beginning of the disk
Therefore it resorted to follow one of the following methods
1. follow Microsoft's methodology in the reform of the encrypted hard drive technology Bitlocker (Bitlocker Recovery Tool)
This method requires an additional disk to transfer to the damaged disk content, you can refer to the following link to see the details of this method different condition
2. use a tool (other than Microsoft) for decryption and restore files.
Adopted the method of using a free tool (limit of 100 MB as the size of the files are restored) is the M3 Bitlocker Recovery


   
ReplyQuote
(@security)
Active Member
Joined: 10 years ago
Posts: 16
Topic starter  

I've resolved the problem after several days, but I asked this question until I find quick solutions rather than long-time


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

I've resolved the problem

Which is good. )

Please don't take this as an offence (or as an attempt to somehow violate your privacy) but where are you from/what is your native language? ?

It is extremely difficult (at least for me) to follow your report, it seems like something that was written in another language and then passed through a translator and posted without editing/corrections. 😯

Example

Sctor Sctor are reading, but in reverse, that is, from another Alsctor to the beginning. This method is often unsuccessful with damaged Alsctorat.

?

But really, I can understand maybe half of what you posted. x

This method requires an additional disk to transfer to the damaged disk content, you can refer to the following link to see the details of this method different condition

Which link?

jaclaz


   
ReplyQuote
Share: