Strange Lacie 500GB external hard drive
February 25th, 2009, 6:33
I have a Lacie 500GB external hard drive SAMSUNG HD501LJ Where the power adaptor failed and the data is gone. Yes, GONE.
I have scanned the drives for HFS+ or any others but found nothing at all. Rstudio, nucleus, mediatools, x-ways, etc etc, nothing found.
Weird, does anyone have this experience in the past?
The drive Samsung HD501LJ checked using UDMA and all working fine.
I have scanned the drives for HFS+ or any others but found nothing at all. Rstudio, nucleus, mediatools, x-ways, etc etc, nothing found.
Weird, does anyone have this experience in the past?
The drive Samsung HD501LJ checked using UDMA and all working fine.
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 6:35
How does the disk appear in Winhex?
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 6:44
Also check the disk in a hex editor (winhex). Save a lot of time. You should be able to see if data is on the disk or if it's all zero's. If 'data' can be seen try UFS Explorer, then try a file signiture search.
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 9:28
Winhex screenshot:
File header search, none found.
File header search, none found.
- Attachments
-
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 9:30
Is it the same values throughout the disk?
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 9:37
no, i see some different data when i scroll it down.
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 9:48
Was it your Lacie or from customer? I suspect some intervention...
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 10:00
Customer's, i asked did anyone look at it before me, he said nobody. 
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 10:18
Is it encrypted? What about results from a file signiture search?
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 10:27
ahhhhh HDD Spaz, you have given me a brilliant clue now, the LACIE has biometric finger print , maybe its encrypted after all. I'll check it out tomorrow. thanks.
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 12:12
Not bad for a spaz eh? 
Ask your client to send his finger in the post.
Or you could look for prints on the unit and mould it with synthetic skin. then place print over your finger, wallaa! Yes, I watch too much CSI.
Ask your client to send his finger in the post.
Or you could look for prints on the unit and mould it with synthetic skin. then place print over your finger, wallaa! Yes, I watch too much CSI.
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 13:23
I have worked with 128-bit AES encrypted flash drives where the raw contents look like this. That was my first guess.
Re: Strange Lacie 500GB external hard drive
February 25th, 2009, 13:26
Had one of these recently with the fingerprint scanner. Unfortunately customer would not send in his finger so couldnt recover 
Actually, customer was no help at all and as soon as I began explaining about encryption he requested his media back so never really got a chance to look at it. No doubt it will be difficult.
Good luck with it
Actually, customer was no help at all and as soon as I began explaining about encryption he requested his media back so never really got a chance to look at it. No doubt it will be difficult.
Good luck with it
Re: Strange Lacie 500GB external hard drive
February 26th, 2009, 6:00
thanks guys, the drive indeed encrypted, I chopped customer's finger off to get the data. 
Powered by phpBB © phpBB Group.