Hi Friends
I have got a case for Bitlocker decryption
As per customer his laptop came with bitlocker enabled by default and he was not aware what bitlocker is.
His IT dept formatted C drive and put new OS. After this his 2 other drives have become inaccessible and are showing Bitlocker encryption.
Due to formatting Bitlocker keys are lost. Customer has not taken any type of backup.
Is decryption possible using pc3000 udma ?

If no key is known, there's no solution.
PC3000 can decrypt it only if you know the key.

_________________
http://www.pclab.com.pt facebook.com/PCLAB.A.T
ACELab partner

Sometimes possible.

If laptop used Microsoft account login, have client check their microsoft hotmail/outlook account, keys could be stored in there.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners

Thanks northwind. I have heard that those laptops where bitlocker was previously enabled default , full deryption is possible without key /password (depends upon type of protector as well)
However if bitlocker is enabled later manually then UDMA cannot decrypt it.

Yeah, you can try to find the key, but as I said above, if no key, no decryption.

There are several cases of "auto" encryption without intervention of the user and the keys can be found on email or Microsoft accounts.

_________________
http://www.pclab.com.pt facebook.com/PCLAB.A.T
ACELab partner

OK thanks , I will ask customer to get microsoft account details.

Tip: sometimes the shop that sold the computer createed a microsoft account and user will not know anything about it
I got a few cases like that and after further inquirying the computer shop and get account name and password, we found that bitlocker key was indeed stored in M$ account.

Why they encrypted user´s data when no one asked and do not povide a key, or at least warn customer is a statement that some people should not be running computer shops