All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 43 posts ]  Go to page Previous  1, 2, 3
Author Message
 Post subject: Re: Another Bitlocker woos
PostPosted: November 3rd, 2022, 2:11 
Offline

Joined: May 30th, 2014, 0:54
Posts: 125
Location: Universe
DR-Kiev wrote:
terminator2 wrote:
DR-Kiev wrote:
Run search Sedu pattern in hex on 2nd partition to double check


Hi DR-Kiev & vx1 , Thanks a lot.
Is this MRT specific function ? I could not find it in PC3K (V7.1XX). I have reread F3 manual also but could not find this settings.


sEDU = @508\x73\x45\x44\x55
btTEC = @507\x62\x74\x54\x45\x43

In recent versions it should already be added


I am sorry , how can I make search for this string in cloned copy post head transplant . I have not done so before and its not mentioned in ace manuals.
I tried to add these strings in grep search could not use it properly.
Hex view shows bTEC and sEDU eveywhere on cloned disk , but partition search in DE yields nothing ,neither any other softwares find any boot sectors.
I suspect this is the same case. Disk gives error while reading first sector & despite changing heads 8- 10 times this sector cannot get read.
There are some defective zones in the begining but later cloning is performed at 100mb/sec.
I want to at least isolate sEDU and bTEC affected sectors. Where can I get this information. We have raised ace tickets multiple times but they say it is not recoverable.


Top
 Profile  
 
 Post subject: Re: Another Bitlocker woos
PostPosted: November 3rd, 2022, 3:47 
Offline

Joined: November 7th, 2020, 5:31
Posts: 1091
Location: The_UK
athena wrote:
I want to at least isolate sEDU and bTEC affected sectors. Where can I get this information. We have raised ace tickets multiple times but they say it is not recoverable.
In DE -> Service - Grep Search. Add the references. Search. Once complete right click in results -> export to map. Service -> Fill with pattern -> sector was not read (or whatever you like).

Reread attempting to reduce misreads. Unless someone knows better ?

I don't think DE can do it on the fly as indicated MRT can though - it's not something that's come up here and none of it is listed in my version of DE of UDMA either.

_________________
Data Recovery Services in the UK.
https://www.usbrecovery.co.uk/


Top
 Profile  
 
 Post subject: Re: Another Bitlocker woos
PostPosted: November 5th, 2022, 2:44 
Offline

Joined: November 23rd, 2010, 13:32
Posts: 461
Location: brisbane
terminator2 wrote:
Oh . Thanks a ton DR-Kiev. :good: :-D
I will perform cloning again with these commands & post outcome.


Dear Team
Thank you for your help to solve this case. Unfortunately there is sad end to it.
I have taken back patient from customer and by changing heads multiple times have cloned it. I have identified bTEC sectors as well (sEDU were not found)
However all attempts to reread these sectors have failed .So even knowing exact technical issue why Bitlocker partition was missing ,I can't do anything practically. Total 18702 affected sectors (9.16MB) has been found.

Thank you all of you particularly DR-Kiev ,Lardman ,Michael chiklis ,vx1 to name a few.


Attachments:
final.PNG
final.PNG [ 29.37 KiB | Viewed 1294 times ]
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 43 posts ]  Go to page Previous  1, 2, 3

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot], Logic and 66 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group