User avatar
Bankole Oladoja
Experienced DR Tech
Posts: 322
Joined: Tue Jan 13, 2015 11:24 am
Location: Nigeria
Contact: Website Facebook Skype

Formatted BitLocker Partition Recovery

Fri Nov 17, 2017 12:01 pm

Hello Guys,

A Client mistakenly formatted an external HardDrive, with an active BitLocker on it, she has the password though. I have tried some software that claim to have the capability but no result, couldn't even get Raw files..
Has anyone been able to solve a similar case ?
Oladoja Bankole
Exclusive Data Recovery Lab. EDARLAB
Abuja, Nigeria.
http://www.edarlab.com
Tel: 08032419528

User avatar
Amarbir[CDR-Labs]
Data Recovery Pro
Posts: 511
Joined: Sat Jan 17, 2015 4:35 pm
Location: Chandigarh ,India
Contact: Website Skype

Formatted BitLocker Partition Recovery

Fri Nov 17, 2017 12:32 pm

Well,
Yes i have ,May i know what have you tried till today
Regards
Amarbir S Dhillon ,CDR Labs [ Chandigarh ,India ]
DataRecovery - The Affordable Way In India
Youtube Channel -> https://www.youtube.com/channel/UCbIeLFJWxTux8TQu_QSCsgQ?view_as=subscriber

User avatar
Bankole Oladoja
Experienced DR Tech
Posts: 322
Joined: Tue Jan 13, 2015 11:24 am
Location: Nigeria
Contact: Website Facebook Skype

Formatted BitLocker Partition Recovery

Fri Nov 17, 2017 11:51 pm

Amarbir[CDR-Labs] wrote:Source of the post Well,
Yes i have ,May i know what have you tried till today

I have tried Easeus and M3 Data Recovery
Oladoja Bankole
Exclusive Data Recovery Lab. EDARLAB
Abuja, Nigeria.
http://www.edarlab.com
Tel: 08032419528

User avatar
Amarbir[CDR-Labs]
Data Recovery Pro
Posts: 511
Joined: Sat Jan 17, 2015 4:35 pm
Location: Chandigarh ,India
Contact: Website Skype

Formatted BitLocker Partition Recovery

Sat Nov 18, 2017 2:40 am

Well,
I am sure M3 Can Do It ,I Have Used That Many Times With Success
Regards
Amarbir S Dhillon ,CDR Labs [ Chandigarh ,India ]
DataRecovery - The Affordable Way In India
Youtube Channel -> https://www.youtube.com/channel/UCbIeLFJWxTux8TQu_QSCsgQ?view_as=subscriber

User avatar
Bankole Oladoja
Experienced DR Tech
Posts: 322
Joined: Tue Jan 13, 2015 11:24 am
Location: Nigeria
Contact: Website Facebook Skype

Formatted BitLocker Partition Recovery

Mon Nov 20, 2017 8:58 pm

I was able to solve this problem in two ways...
First...
With this command, 'repair-bde C: D: -rp 111111-222222-333333-444444-555555-666666-777777-888888'

this option assumes 'C' was original encrypted volume, and 'D' is destination target.

1111-2222-3333... -> this would be 48 digit recovery key.

Encryption algorithm is already known, and as key is supplied.

This automatically decrypt 'C' to 'D' and because it was formatted its possible you may need to scan for data to find it after decryption is done.

Note: Should you have the Password instead of Key, use this command, "repair-bde C: D: -pw"

This first option works perfectly for me, and data is fully recovered.


The Second Option, which is also gave very good good result.

It may be possible that native boot record remains intact and you may be able to decrypt without the first method.

You can search for BitLocker boot record, using R-Studio, in my case I found the boot record to be 64, You can either image from Sector 64, to end of the drive. (Sector 64 to end).
LBA 64 is bitlocker record and LBA 0 contains new MBR from client format, this MBR has no information about my encrypted partition since this is a new MBR, so for this we need to 'cut' this data out so when we connect image, first sector is bitlocker record and not the new MBR. Then when windows sees image it will identifty password is present and ask for it. It possible maybe some file records are overwritten or damaged, probably some metadata like MFT records are damaged, so we need to scan it after entering password.



Either way, Data was fully recovered.
Oladoja Bankole
Exclusive Data Recovery Lab. EDARLAB
Abuja, Nigeria.
http://www.edarlab.com
Tel: 08032419528


User avatar
Amarbir[CDR-Labs]
Data Recovery Pro
Posts: 511
Joined: Sat Jan 17, 2015 4:35 pm
Location: Chandigarh ,India
Contact: Website Skype

Formatted BitLocker Partition Recovery

Tue Nov 21, 2017 1:31 pm

Regards
Amarbir S Dhillon ,CDR Labs [ Chandigarh ,India ]
DataRecovery - The Affordable Way In India
Youtube Channel -> https://www.youtube.com/channel/UCbIeLFJWxTux8TQu_QSCsgQ?view_as=subscriber

User avatar
Jared
Forum Admin
Posts: 3517
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Formatted BitLocker Partition Recovery

Tue Nov 21, 2017 2:08 pm

Yes, but he actually was able to find the answer he needed. That's half the magic of being successful in this business. :D

User avatar
vijayan
Data Recovery Noob
Posts: 23
Joined: Sat Oct 08, 2016 1:41 pm
Location: Ram Infotech Data Recovery No 102 Lb Road Adyar,chennai
Contact: Website Facebook

Formatted BitLocker Partition Recovery

Fri Apr 06, 2018 2:50 pm

M3 DATA RECOVERY TOOL 100 % POSSIBLES



Bankole Oladoja wrote:Hello Guys,

A Client mistakenly formatted an external HardDrive, with an active BitLocker on it, she has the password though. I have tried some software that claim to have the capability but no result, couldn't even get Raw files..
Has anyone been able to solve a similar case ?
RAM INFOTECH DATA RECOVERY
NO 102 LB ROAD ADYAR CHENNAI
TAMIL NADU
CALL 9841983643/46
http://www.raminfotechdatarecovery.com

Return to “Logical Data Recovery & Data Recovery Software”

Who is online

Users browsing this forum: No registered users and 1 guest