All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 15 posts ] 
Author Message
 Post subject: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: May 28th, 2021, 17:02 
Offline

Joined: February 18th, 2009, 8:08
Posts: 292
Location: Manchester, UK
Hello all,

I am aware there is a subsequent update released on the 25th of May for PC3000, but please check this as I have noticed what appears to be a major bug in the handling of Bitlocker for the previous version released in April. I have not yet raised with Ace TS but will shortly.

The quick summary:
    Failed head assembly in WD HDD
    Replaced heads. Imaged HDD using SED decryption. 1 bad sector.
    Bitlocker was enabled.
    Customer provided correct password, which was entered into Data Extractor
    Extracted files normally via PC3000/Data Extractor

When the data was manually inspected it appeared that a large proportion of the files were corrupt. It seemed quite at random, but generally larger files. After various checks, re-imaging etc, the results could vary. It seemed very unusual. There seemed to be a repeated pattern written in parts of the extracted files which would cause partial corruption.

I then decided to mount the task, and then access the disk image via UFS Explorer Pro. The password was entered for Bitlocker. The files would extract normally. Please see the screen shots for opening the same image, from the same disk image in PC3000 and UFS Explorer respectively:

Attachment:
PC3000 Bitlocker corruption e.png
PC3000 Bitlocker corruption e.png [ 347.42 KiB | Viewed 23301 times ]


Attachment:
Bitlocker OK UFS.png
Bitlocker OK UFS.png [ 764.82 KiB | Viewed 23301 times ]


It appears that Data Extractor Data Extractor 5.12.3 has a fault where it is not decrypting files fully, and writing incorrect data to the files when saved from the disk image.

I'll make a few more checks this weekend and submit to Ace TS. I'll also update to the new version released 3 days ago to see if this has been resolved.

John

_________________
CDR - Manchester Data Recovery Services
0161 408 4857
http://www.cheadledatarecovery.co.uk/


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: June 23rd, 2021, 10:11 
Offline

Joined: February 18th, 2009, 8:08
Posts: 292
Location: Manchester, UK
Hello,

I can confirm that in 5.12.5 and 5.12.6 the fault still existed. I have just tried the latest version today 5.12.9 and I can confirm that Ace have patched the bug and Bitlocker decryption for extraction of files is now working normally.

I never had the chance to test 5.12.7 so I cannot confirm whether this was affected by the bug.

Best regards,
John

_________________
CDR - Manchester Data Recovery Services
0161 408 4857
http://www.cheadledatarecovery.co.uk/


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: July 21st, 2021, 5:07 
Offline

Joined: September 27th, 2005, 4:26
Posts: 505
Location: Bulgaria, Sofia
Hi Guys,
In DE 5.12.10 the bug still present.

_________________
DataRecovery.bg


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: July 22nd, 2021, 8:23 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3445
Location: Greece
cheadledatarecovery wrote:
Hello,

I can confirm that in 5.12.5 and 5.12.6 the fault still existed. I have just tried the latest version today 5.12.9 and I can confirm that Ace have patched the bug and Bitlocker decryption for extraction of files is now working normally.


That's surprising. I just had the same issue with 5.12.9. All photos broken. Mounted task and ran UFS, all photos OK.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: July 22nd, 2021, 8:24 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3445
Location: Greece
Did anyone report this bug to Ace?

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: July 22nd, 2021, 9:17 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2520
Location: Ontario, Canada
I just let Roman know about this thread. It baffles me why this would be the first place to go when a bug is discovered. It is good to let others know about the bug too, but if we don't notify the developers, there is little chance that they will fix it in a timely manner.

_________________
Luke
Recovery Force Data Recovery


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: July 22nd, 2021, 10:21 
Offline

Joined: November 7th, 2020, 5:31
Posts: 1072
Location: The_UK
lcoughey wrote:
It baffles me why this would be the first place to go when a bug is discovered.
I expect people are looking for confirmation it's a replicable bug and not just a product of their particular environment or because it's Friday and it's been one of those weeks :D

_________________
Data Recovery Services in the UK.
https://www.usbrecovery.co.uk/


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: July 24th, 2021, 14:27 
Offline

Joined: September 27th, 2005, 4:26
Posts: 505
Location: Bulgaria, Sofia
lcoughey wrote:
I just let Roman know about this thread. It baffles me why this would be the first place to go when a bug is discovered. It is good to let others know about the bug too, but if we don't notify the developers, there is little chance that they will fix it in a timely manner.

Its been reported, and solved with replacing a DLL. Probably there will be some bug fix release soon , unfortunately not feeling confident I can share the dll on common chat.
The threat helped a lot since the case was weird enough to suspect lots of other things prior decrypting. In my case solved huge headache!

_________________
DataRecovery.bg


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: August 10th, 2021, 11:50 
Offline

Joined: February 18th, 2009, 8:08
Posts: 292
Location: Manchester, UK
Bug found at the weekend when AceTS closed, so reported on the Monday after. But my expectation of Ace TS was that they would immediately assume it was a fault with my systems rather than a fault in PC3k/DE, hence why I wanted to check with a few others first for similar faults. Needless to say when I did report to AceTS I got that response, and it took about 3 emails before they were prepared to take a proper look, by which point a flurry of updates had been applied in the Update Box, which made me think they were probably 'working on it'.

John

_________________
CDR - Manchester Data Recovery Services
0161 408 4857
http://www.cheadledatarecovery.co.uk/


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: August 10th, 2021, 13:14 
Offline
User avatar

Joined: August 15th, 2006, 3:01
Posts: 3459
Location: CDRLabs @ Chandigarh [ India ]
cheadledatarecovery wrote:
Bug found at the weekend when AceTS closed, so reported on the Monday after. But my expectation of Ace TS was that they would immediately assume it was a fault with my systems rather than a fault in PC3k/DE, hence why I wanted to check with a few others first for similar faults. Needless to say when I did report to AceTS I got that response, and it took about 3 emails before they were prepared to take a proper look, by which point a flurry of updates had been applied in the Update Box, which made me think they were probably 'working on it'.

John


John,
What version Of DE is This Please ,I am on 5.12.11

_________________
Regards
Amarbir S Dhillon , Chandigarh Data Recovery Labs [India]
Logical,Semi Physical And Physical Data Recovery
Website-> http://www.chandigarhdatarecovery.com


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: October 1st, 2021, 15:11 
Offline

Joined: September 17th, 2016, 16:06
Posts: 430
Location: India
same thing encountered today. I was stress free thanks to the fact I encountered this post about 5-6 days ago.

Work around is to mount the BL partition as read only and use R-Studio to browse...all looks well :)


:)


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: October 5th, 2021, 11:46 
Offline

Joined: February 18th, 2009, 8:08
Posts: 292
Location: Manchester, UK
@sin - I am glad it was of use.

J

_________________
CDR - Manchester Data Recovery Services
0161 408 4857
http://www.cheadledatarecovery.co.uk/


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: October 6th, 2021, 16:05 
Offline

Joined: September 17th, 2016, 16:06
Posts: 430
Location: India
Any day my friend....I have always had a knack of browsing through stuff and learn what ever I can..
A small line read somewhere can go long way

Similary for even my examinations, a small line read here and there always fetched good marks :D

I should thank for your inputs
--


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: October 12th, 2021, 11:24 
Offline
User avatar

Joined: October 17th, 2011, 10:12
Posts: 13
Location: Prague, the Czech Republic
Hi All!
We forwarded the information on this strange behaviour with Bitlocker to ACE Lab developers, and it will be fixed in the next major update. Just follow our news on the latest updates!

_________________
Best regards
ACE Lab Team
ts.acelab.eu.com / blog.acelab.eu.com


Top
 Profile  
 
 Post subject: Re: MAJOR bug in Data Extractor 5.12.3 - Bitlocker
PostPosted: October 12th, 2021, 12:30 
Offline
User avatar

Joined: August 15th, 2006, 3:01
Posts: 3459
Location: CDRLabs @ Chandigarh [ India ]
ACE wrote:
Hi All!
We forwarded the information on this strange behaviour with Bitlocker to ACE Lab developers, and it will be fixed in the next major update. Just follow our news on the latest updates!


Hi,
Glad To See You Here ...

_________________
Regards
Amarbir S Dhillon , Chandigarh Data Recovery Labs [India]
Logical,Semi Physical And Physical Data Recovery
Website-> http://www.chandigarhdatarecovery.com


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 15 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 7 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group