Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 10 bitlocker protected drive is not working.


  • Please log in to reply
46 replies to this topic

#1 jillianwyatt

jillianwyatt

  • Members
  • 27 posts
  • OFFLINE
  •  

Posted 03 July 2016 - 06:36 AM

Hi,

Detailed Case Information:
I have Windows 10 and BitLocker enabled.

HDD, Seagate 3TB, partitioned into 5 drives.

I did this mistake, I created a bootable USB by easy bcd and tested on host window during boot. Reached to the point where windows setup asks for disk selection, I clicked on the drive(setup says drive encrypted and can't continue) but didn't go further.

Then I boot nothing shows up. 

Tried to connect 3tb hard to another PC to unlock drive but it's not accepting correct password and recovery key.

I made windows image before encryption. After restoring that 2nd and 4th drives are not accessible, 5th is formatted and 3rd drive data is intact with minor data loss.

I ran testdisk-7.0 and found no drive in the quick search. The log file is pasted below.

Fri Jul  1 23:56:11 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=2199023255552
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=801567145984
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=2199023255552
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=801567145984
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=536481890304
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1232570679296
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=801564000256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=214748364800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=214746267648
Hard disk list
Disk /dev/sda - 2199 GB / 2048 GiB - CHS 267349 255 63, sector size=512
Disk /dev/sdb - 801 GB / 746 GiB - CHS 97451 255 63, sector size=512
Drive C: - 536 GB / 499 GiB - CHS 65223 255 63, sector size=512
Drive F: - 1232 GB / 1147 GiB - CHS 149851 255 63, sector size=512
Drive G: - 801 GB / 746 GiB - CHS 97451 255 63, sector size=512
Drive H: - 214 GB / 200 GiB - CHS 26108 255 63, sector size=512
Drive I: - 214 GB / 199 GiB - CHS 26108 255 63, sector size=512

Partition table type default to None
Drive F: - 1232 GB / 1147 GiB
Partition table type: Intel

Analyse Drive F: - 1232 GB / 1147 GiB - CHS 149851 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Drive F: - 1232 GB / 1147 GiB - CHS 149851 255 63

Results

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.

Note:

How I can repair BitLocker/boot sector on 2nd drive?

Thanking you anticipation.



BC AdBot (Login to Remove)

 


#2 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:02:56 PM

Posted 04 July 2016 - 02:05 PM

How to Unlock a Data Drive with BitLocker Recovery in Command Prompt


Posted Image


#3 jillianwyatt

jillianwyatt
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  

Posted 18 July 2016 - 02:59 AM

Hi,
 

FreeBooter

 

Thanks for your time. Trying your given link. I tried method 3 as other are not working in my case. The following error came up.
68140d1468827907-bitlocker-recovery-unlo


Please suggest what to do next.

Thanks a lot.

Attached Files


Edited by jillianwyatt, 18 July 2016 - 03:04 AM.


#4 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:02:56 PM

Posted 21 July 2016 - 12:12 AM

I'm sorry for the late reply i never got notification about new post at your thread.

 

TestDisk cannot recover encrypted deleted files even if it can they will be encrypted.

 

 

The following example displays the drives on the computer and identifies whether or not they are BitLocker-protected and the current encryption status.

manage-bde -status

The following example illustrates unlocking a BitLocker-protected drive by using a recovery password.
 

manage-bde –unlock E: -recoverypassword 111111-222222-333333-444444-555555-666666-777777-888888

Accesses encrypted data on a severely damaged hard disk if the drive was encrypted by using BitLocker. Repair-bde can reconstruct critical parts of the drive and salvage recoverable data as long as a valid recovery password or recovery key is used to decrypt the data.


Edited by FreeBooter, 21 July 2016 - 12:18 AM.

Posted Image


#5 jillianwyatt

jillianwyatt
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  

Posted 22 July 2016 - 09:53 AM

FreeBooter,

 

I ran test disk for the physical health of disk not for recovery.

 

 

I repaired Bitlocker using the following command

 

repair-bde H: J: -rp KEY -f -lf I:\log.txt

 

The following errors showed up

Attached File  repair status.png   41.68KB   0 downloads

Attached File  chkdisk status.png   15.42KB   0 downloads

 

Log file link is also given below.

http://www.filedropper.com/log_15

 

Thanks.

 


Edited by jillianwyatt, 22 July 2016 - 09:56 AM.


#6 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:02:56 PM

Posted 23 July 2016 - 04:15 PM

Run below commands.

J:

Bootrec  /FixMBR 


Bootrex /FixBoot


Chkdsk J:  /f

Posted Image


#7 jillianwyatt

jillianwyatt
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  

Posted 24 July 2016 - 10:18 AM

Still giving errors.

 

68162d1469373335-bitlocker-recovery-unloI think there is a software by Norton to remove bad starting sectors of a drive to read remaining data.

Thanks.



#8 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:02:56 PM

Posted 25 July 2016 - 02:28 AM

You have executed command wrong first type J: and press Enter key and type other commands one at time.


Edited by FreeBooter, 25 July 2016 - 02:30 AM.

Posted Image


#9 jillianwyatt

jillianwyatt
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  

Posted 27 July 2016 - 02:16 AM

Still giving the same error.

68172d1469603741-bitlocker-recovery-unlo



#10 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:02:56 PM

Posted 27 July 2016 - 08:14 AM

Connect the J: HDD to your computer make sure to disconnect all other HDD connected to computer and boot computer with Windows 10 Setup DVD and start Command Prompt execute below commands.


Bootrec  /FixMBR

 


Bootrex /FixBoot



Use below commands to find out drive letter assign to HDD that you want to check for files system errors.

Diskpart

List disk 

Select disk 0

List volume

exit

Replace the zero (0) number with disk number assign to HDD that you want to run Chkdsk command for.

 

The List Volume will list all volumes that are on HDD you have selected with Select Disk 0  command from the List Volume output find out the drive letter assign to partition you want to check for file system errors.

 

Execute below command but replace the X: letter with drive letter assign to partition you want to scan for file system errors and mark bad sectors.

Chkdsk  X:   /R


Posted Image


#11 jillianwyatt

jillianwyatt
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  

Posted 02 August 2016 - 06:00 AM

Still getting same error message.

 

68183d1470132985-bitlocker-recovery-unlo


Edited by jillianwyatt, 02 August 2016 - 06:02 AM.


#12 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:02:56 PM

Posted 02 August 2016 - 08:41 AM

Have you turn off bitlocker and decrypt data store on that hard disk drive?
Have you try the BitLocker Repair Tool command line tool to attempt to repair or decrypt a damaged BitLocker encrypted partition.

How to Use BitLocker Repair Tool to Recover a Drive in Windows 7 and Windows 8


Edited by FreeBooter, 02 August 2016 - 08:42 AM.

Posted Image


#13 jillianwyatt

jillianwyatt
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  

Posted 02 August 2016 - 12:51 PM

I repaired the drive and decrypted the data on J.
That drive is giving above errors.



#14 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:02:56 PM

Posted 02 August 2016 - 09:41 PM

Follow the instructions at below links to recover your data. You can use PhotoRec to try recovery files.


"TestDisk Step By Step"
http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step

Download TestDisk
http://www.cgsecurity.org/wiki/TestDisk


"PhotoRec Step By Step"
http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step

"Download PhotoRec"
http://www.cgsecurity.org/wiki/PhotoRec

Posted Image


#15 jillianwyatt

jillianwyatt
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  

Posted 03 August 2016 - 04:15 AM

According to my research encrypted data can't be recovered by Data recovery software's.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users