MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: Where is data?
PostPosted: March 12th, 2014, 0:57 
Offline

Joined: March 11th, 2008, 4:35
Posts: 1052
Location: Bangladesh
Well, I have a Seagate 2TB HDD, the HDD is working fine, No UNC/Bad Sectors. According to customer information, the HDD was being used as Portable by using a regular SATA-USB converter. I checked and there is no Encryption issue. Later, Customer claimed, the HDD had 1 partition and it would be used under winxp/win7. Suddenly there was a power failure during the usage of the HDD. then he found no data/partition. While I checked the HDD then found no Partition and even didn't find any partition on it by scanning the HDD. Later I checked the Sector "0". It had no data except the signature "55AA". And no data on sector 63. The first data sector started from sector 64 and almost the full HDD has hex data. Used file recovery software, but found few small amount of invalid data. Where is the problem? Anyone have any idea?

_________________
__________
There is no substitute for education and experience
THANK YOU
SHAHI
shahi.mahbub@gmail.com


Top
 Profile  
 
 Post subject: Re: Where is data?
PostPosted: March 12th, 2014, 2:27 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16955
Location: Australia
Can you show us sector 64?

As for sector 0, it appears that the customer may have accepted Windows' benign sounding offer to "initialise" the drive.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Where is data?
PostPosted: March 12th, 2014, 12:04 
Offline

Joined: January 8th, 2008, 5:21
Posts: 927
Location: uk
Maybe the drive has a Bitlocker volume?
Try a search in your hex editor as shown in the document Forensic Implications of Windows Vista Chapter 4.10.3–Identification Using a Hex Editor


Top
 Profile  
 
 Post subject: Re: Where is data?
PostPosted: March 12th, 2014, 12:55 
Offline

Joined: March 11th, 2008, 4:35
Posts: 1052
Location: Bangladesh
After several communication & discussion, client confirmed he had the HDD inside a PORTABLE CHASIS and gave the chasis, then I found there is USB-SATA Bridge IC with encryption. But the card is damage, will try to fix it and will update you the result.

CLIENT NEVER WANT TO GIVE REAL INFORMATION!

_________________
__________
There is no substitute for education and experience
THANK YOU
SHAHI
shahi.mahbub@gmail.com


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 27 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group