Chip Off - Ace Labo...
Clear all

Chip Off - Ace Laboratory - Russia

8 Posts
6 Users
Posts: 6
Active Member
Topic starter

I was wondering if anyone has undertaken any traning courses with Ace Laboratory in Russia?

If so, what's your opinion?

I have completed the Chip Removal course with Kev Mansell (Control-F), but this does not cover the software (PC-3000 or SalvationData) to interpret the data. Especially when manually inputting Flash devices.

I know they have a sister company in Canada (DeepSpar); I'm not sure whether anyone has been there either? ?

Posted : 07/11/2013 4:05 pm
Posts: 253
Reputable Member

What kind of class are you looking for?

I got trained by DeepSpar, so I might be able to answer some of your questions.

Posted : 11/11/2013 9:27 pm
Posts: 529
Honorable Member

I was wondering if anyone has undertaken any traning courses with Ace Laboratory in Russia?

It is very well. wink

I know they have a sister company in Canada (DeepSpar); I'm not sure whether anyone has been there either? ?

ACE LAb hasn't got sister company in Canada.

Posted : 11/11/2013 9:48 pm
Posts: 5133
Illustrious Member

ACE LAb hasn't got sister company in Canada.

Well, let's call them "resellers"

PC-3000 for Windows UDMA
by ACE Laboratory Russia
A set of industrial-strength tools developed by ACE Laboratory Russia and brought to you by DeepSpar. Diagnose and fix drive-level firmware failures, as well as some electronic issues, for almost any drive. 8 out of 10 medium and large data recovery companies use PC-3000. More…
Phase II Disk Imaging

DeepSpar Disk Imager
This product, developed by DeepSpar Data Recovery Systems, is the first dedicated hard drive imaging device built specifically for data recovery, to handle disk-level problems. Dramatically improve imaging speed, accuracy, and integrity of retrieved data with DeepSpar Disk Imager.

Get more data with less risk. More…
Phase III Data Retrieval

PC-3000 Data Extractor
by ACE Laboratory Russia
A software add-on to the PC-3000 system developed by ACE Laboratory Russia and brought to you by DeepSpar. PC-3000 Data Extractor diagnoses and fixes file system issues so you can get to your client's data. More…


Posted : 12/11/2013 12:01 am
Posts: 253
Reputable Member

Deepspar don't resell PC-3000 products anymore. Which sucks a lot, because now we must go through AceLab directly for PC-3000 license renewals and they don't accept credit cards… ?

So, I'm running a version that is dating from 2012 because I can't renew the license. Our agency cannot purchase stuff with Western Union or bank transfers.

I'm really looking forward to them using current-gen payment methods.

Posted : 12/11/2013 12:25 am
Posts: 6
Active Member
Topic starter

I've been working for Governmental Cyber Crime Centre since 2003 and have attended a plethora of forensic computing courses World Wide… Apart from any in Russia.

I have been trained in Salvation Data HDD repair and the use of Deep Spar.

I am now conducting Chip Off examinations of Mobile Devices and Flash (USB) Memory. The problem I have is not knowing how to use the software to PC-3000 Flash Edition software to manually decode flash memory.

I can't find supporting documentation to even explain the .SOL files.

I have an 8GB Flash Chip that I have managed to get a succesful read… But I can't get it to reconstitute and work!!!


Posted : 15/11/2013 2:43 pm
Posts: 1442
Noble Member

Do not underestimate the Russians, Indians, Pakistanis and Chinese when it comes to hard core chip-off work. I watched third-world lab worker reball a micro-FCBGA with a $2 soldering iron, like as if he was just making a salami sandwich. The result was better looking than something off of a $10K reflow workstation!

When I image chips I verify that it is not encrypted, resolve XOR, resolve object order, locate artifacts, finally eliminate extraneous data.

Presuming the data is not encrypted - because then you are up the creek.

Figure the XOR out, if XORed - many flash storage devices use XOR to decorrelate the data. Tedious but doable.

It is necessary to play around with chips/blocks/planes/pages (objects) to figure out the layout.

Presuming you already ran the data through with the right XOR value, locate file system artifacts to identify the file system. for example, FAT32 or NTFS have very distinct markers. It helps with arranging the objects.

Sometimes it is not FS artifacts but file signatures which help me with boundaries.

Once I have objects in order, the file system type, the rest just falls into place. Get the sector boundaries, eliminate ECC, over-provisioning, etc. what remains is a raw (dd) image.

Have fun.

Posted : 15/11/2013 8:20 pm
Posts: 84
Trusted Member

As this post is in the Mobile Forensics Section, I am guessing you are trying to read chips from mobile devices?

If that is the case, then why are you using the Deepspar for mobile phones? I believe its main function is for memory type devices like SD cards, thumb drives, compact flash cards, SSD drives, etc.

If you want a good solution for reading memory chips from cell phones, then you should be using the UP48 UP828 programmer and adapters. They focus on the chips that we encounter on mobile devices. They also support most of the chips you find on memory devices as well.

Most of the phones are now moving to the eMMC style chips that can be read from eMMC SD adapters where a programmer is not required.

For Chipoff training directly related to Mobile Forensics, I would try Teel Tech Training, mostly in Canada and the USA but in 2014, Europe and Asia is in the plans. I might know someone there if you need more info. wink


Posted : 19/01/2014 12:07 pm
Share to...