All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 8 posts ] 
Author Message
 Post subject: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: May 28th, 2021, 17:02 
Offline

Joined: February 18th, 2009, 8:08
Posts: 266
Location: Manchester, UK
Hello all,

I am aware there is a subsequent update released on the 25th of May for PC3000, but please check this as I have noticed what appears to be a major bug in the handling of Bitlocker for the previous version released in April. I have not yet raised with Ace TS but will shortly.

The quick summary:
    Failed head assembly in WD HDD
    Replaced heads. Imaged HDD using SED decryption. 1 bad sector.
    Bitlocker was enabled.
    Customer provided correct password, which was entered into Data Extractor
    Extracted files normally via PC3000/Data Extractor

When the data was manually inspected it appeared that a large proportion of the files were corrupt. It seemed quite at random, but generally larger files. After various checks, re-imaging etc, the results could vary. It seemed very unusual. There seemed to be a repeated pattern written in parts of the extracted files which would cause partial corruption.

I then decided to mount the task, and then access the disk image via UFS Explorer Pro. The password was entered for Bitlocker. The files would extract normally. Please see the screen shots for opening the same image, from the same disk image in PC3000 and UFS Explorer respectively:

Attachment:
PC3000 Bitlocker corruption e.png
PC3000 Bitlocker corruption e.png [ 347.42 KiB | Viewed 4102 times ]


Attachment:
Bitlocker OK UFS.png
Bitlocker OK UFS.png [ 764.82 KiB | Viewed 4102 times ]


It appears that Data Extractor Data Extractor 5.12.3 has a fault where it is not decrypting files fully, and writing incorrect data to the files when saved from the disk image.

I'll make a few more checks this weekend and submit to Ace TS. I'll also update to the new version released 3 days ago to see if this has been resolved.

John

_________________
CDR - Manchester Data Recovery Services
0161 408 4857
http://www.cheadledatarecovery.co.uk/


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: June 13th, 2021, 7:22 
Offline

Joined: August 23rd, 2010, 5:42
Posts: 8
Did you try with last update 5,12,7 ?


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: June 23rd, 2021, 10:11 
Offline

Joined: February 18th, 2009, 8:08
Posts: 266
Location: Manchester, UK
Hello,

I can confirm that in 5.12.5 and 5.12.6 the fault still existed. I have just tried the latest version today 5.12.9 and I can confirm that Ace have patched the bug and Bitlocker decryption for extraction of files is now working normally.

I never had the chance to test 5.12.7 so I cannot confirm whether this was affected by the bug.

Best regards,
John

_________________
CDR - Manchester Data Recovery Services
0161 408 4857
http://www.cheadledatarecovery.co.uk/


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: July 21st, 2021, 5:07 
Offline
User avatar

Joined: September 27th, 2005, 4:26
Posts: 508
Location: Bulgaria, Sofia
Hi Guys,
In DE 5.12.10 the bug still present.

_________________
DataRecovery.bg


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: Yesterday, 8:23 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3160
Location: Greece
cheadledatarecovery wrote:
Hello,

I can confirm that in 5.12.5 and 5.12.6 the fault still existed. I have just tried the latest version today 5.12.9 and I can confirm that Ace have patched the bug and Bitlocker decryption for extraction of files is now working normally.


That's surprising. I just had the same issue with 5.12.9. All photos broken. Mounted task and ran UFS, all photos OK.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: Yesterday, 8:24 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3160
Location: Greece
Did anyone report this bug to Ace?

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: Yesterday, 9:17 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2398
Location: Ontario, Canada
I just let Roman know about this thread. It baffles me why this would be the first place to go when a bug is discovered. It is good to let others know about the bug too, but if we don't notify the developers, there is little chance that they will fix it in a timely manner.

_________________
Luke
SSD Data Recovery


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: Yesterday, 10:21 
Offline

Joined: November 7th, 2020, 5:31
Posts: 244
Location: The_UK
lcoughey wrote:
It baffles me why this would be the first place to go when a bug is discovered.
I expect people are looking for confirmation it's a replicable bug and not just a product of their particular environment or because it's Friday and it's been one of those weeks :D

_________________
Properly, Quickly, Cheaply - Pick any two.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 17 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group