Welcome, Guest. Please login or register.
Did you miss your activation email?
December 10, 2018, 08:59:41 PM
Home Help Search Login Register
News:

+  DIY DataRecovery.nl Support forum
|-+  Support
| |-+  DiskPatch (Moderators: Tom, Joep)
| | |-+  Bitlocker volume raw seems to be help
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: Bitlocker volume raw seems to be help  (Read 14624 times)
zorlar
member

Posts: 8


« on: October 14, 2014, 10:17:21 PM »

Hi
My D and E volume bitlocker encrypted disk.I formatted the computer disk (C).
E and D seems to be raw disks.I deleted my BitLocker recovery files.
I know Bitlocker password.I have my important data in E and D disc.



http://www.diydatarecovery.nl/forum/index.php/topic,1367.msg5471.html#msg5471

He has solved the problem.I do not understand how to use this PartitionGuru has.
PartitionGuru how the program should I use?

Thanks.
Logged
Joep
Developer and Support Tech
Administrator
member
*****
Posts: 1473


WWW
« Reply #1 on: October 14, 2014, 10:58:04 PM »

Hello,

For starters he made DiskPatch support analysis logfile. From that logfile we determined some values were odd/off:

Quote
381896001 is the size of the file system. The backup boot is not part of the file system but is directly following, so 381896001 + 1. Leave CHS as they are, they're obsolete and ignored by Windows anyway.

Now, we have just found numbers that don't exactly match. No way of telling if fixing this value in the partition table will fix things. I doubt it to be honest.

He used PartitionGuru to edit the values, he could have done that using DiskPatch as well. It remains to be seen if you have a similar issue. But before we can suggest anything, we need a DiskPatch support analysis logfile: http://www.diydatarecovery.nl/dp_manual/guide_supportanalysis.htm


Logged

--
Kind regards,
Joep - My blog @: www.disktuna.com - Try my JPEG Repair Tool: https://www.youtube.com/watch?v=WIUq03Deyy0
zorlar
member

Posts: 8


« Reply #2 on: October 15, 2014, 01:13:08 AM »

Stands in the way data is encrypted E and D disk.
The computer needs to see again BitLocker-protected drive E and D.
And I have to enter my password .


.../000:01/LOG> ### LOG START ###
.../000:01/LOG> DISKPATCH 4.0.300
.../000:01/LOG> (C) 2000-2013 DIY DataRecovery
.../000:01/LOG> Contact info: www.DIYDataRecovery.nl
.../000:01/LOG> MemFree: 63Kb
.../000:01/LOG> CommandLineParms: /sup
.../000:01/LOG> LogDate: 10-15-2014
.../000:01/CFG> FilePath="C:DPFILES\"
.../000:01/CFG> ReadRetries="32"
.../000:01/CFG> WriteRetries="32"
.../000:01/CFG> MaxReadErrors="32"
.../000:01/CFG> MaxWriteErrors="1"
.../000:01/CFG> ReadDelay="0"
.../000:01/CFG> LogEachReadError="1"
.../000:01/CFG> WriteAfterReadError="1"
.../000:01/CFG> VfyFixedBadSect="1"
.../000:01/CFG> CleanAfterDOD="1"
.../000:01/CFG> DiskReset="1"
.../000:01/CFG> SectorSkip="1024"
.../000:01/CFG> AutoSaveState="1"
.../000:01/CFG> DumpFoundSectors="0"
.../000:01/CFG> FixFats="1"
.../000:01/CFG> MaxFatScan="51200"
.../000:01/CFG> MaxDataColEntries="256"
.../000:01/CFG> IgnoreF8FF="0"
.../000:01/CFG> DownSizeExt="1"
.../000:01/CFG> ScanSignature="55AA"
.../000:01/CFG> Rebuild="00"
.../000:01/13H> Ext13H installed test requested
.../000:01/13H> Disk found at 128
.../000:01/13H> Ext13H version: EDD-3.0
.../000:01/13H> Ext13H Support: Extended disk access functions
.../000:01/13H> Ext13H Support: Enhanced disk drive functions
.../000:01/13H> Ext13H Flags: Cylinder/head/sector info is valid
.../000:01/13H> Drive Interface Info:
.../000:01/13H> Disk 128 X13H data : 65535/16/63 312581806/512
.../000:01/13H> Disk found at 129
.../000:01/13H> Ext13H version: EDD-3.0
.../000:01/13H> Ext13H Support: Extended disk access functions
.../000:01/13H> Ext13H Support: Enhanced disk drive functions
.../000:01/13H> Drive Interface Info:
.../000:01/13H> Disk 129 X13H data : 16383/16/63 976773168/512
.../000:01/13H> Ext13H tested ok
.../000:01/FDL> DiskList requested
.../000:01/FDL> Disk found at 128
.../000:01/FDL> Disk found at 129
### DISKLIST ###
__D_|________LBA_|___H_|__S_|___GB_|__GEO_|___SS_
128 | .312581806 | .16 | 63 | .149 | BIOS | .512
129 | .976773168 | 255 | 63 | .465 | BIOS | .512
..0 | .........0 | ..0 | .0 | ...0 | BIOS | ...0
..0 | .........0 | ..0 | .0 | ...0 | BIOS | ...0
.../000:01/IAS> AdmiSector init complete for disk 0 (128)
.../000:01/IAS> AdmiSector init complete for disk 1 (129)
.../000:01/KEY> DEMO/1
.../000:01/PFC> PQstuff signature not detected on disk 0 (128)
.../000:01/PFC> PQstuff signature not detected on disk 1 (129)
.../000:01/PFC> Disk health not checked
.../000:03/PFC> Partition State backup not found on disk 0 (128)
.../000:03/PFC> Partition State backup not found on disk 1 (129)
.../000:03/PFC> No Repair date found on disk 0 (128)
.../000:03/PFC> No Repair date found on disk 1 (129)
.../000:32/CSD> Start CheckDisk for disk 1 (129)
.../000:32/CSD> 0 (0 0 1)
.../000:32/CSD> 16064 (0 254 63)
.../000:32/CSD> 976768065 (60801 0 1)
.../000:32/CSD> 976773167 (60801 80 63)
.../000:32/CSD> CheckDisk complete, ReadErrors 0
.../000:32/USD> Disk 1 (129) selected
.../000:32/GSC> First DP run, geo info for disk 1 (129) not yet recorded
.../000:32/WAS> AdmiSectors in use : 0+ 1+
129/000:32/USD> MBR for disk 1 (129)
129/000:32/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C 8E C0 8E D8 BE 00 7C BF 00  |  3ÀŽĞ¼.|ŽÀŽØ¾.|¿.
016   06 B9 00 02 FC F3 A4 50 68 1C 06 CB FB B9 04 00  |  .¹..üó¤Ph..Ëû¹..
032   BD BE 07 80 7E 00 00 7C 0B 0F 85 0E 01 83 C5 10  |  ½¾.€~..|..…..ƒÅ.
048   E2 F1 CD 18 88 56 00 55 C6 46 11 05 C6 46 10 00  |  âñÍ.ˆV.UÆF..ÆF..
064   B4 41 BB AA 55 CD 13 5D 72 0F 81 FB 55 AA 75 09  |  ´A»ªUÍ.]r.ûUªu.
080   F7 C1 01 00 74 03 FE 46 10 66 60 80 7E 10 00 74  |  ÷Á..t.şF.f`€~..t
096   26 66 68 00 00 00 00 66 FF 76 08 68 00 00 68 00  |  &fh....f.v.h..h.
112   7C 68 01 00 68 10 00 B4 42 8A 56 00 8B F4 CD 13  |  |h..h..´BŠV.‹ôÍ.
128   9F 83 C4 10 9E EB 14 B8 01 02 BB 00 7C 8A 56 00  |  ŸƒÄ.žë.¸..».|ŠV.
144   8A 76 01 8A 4E 02 8A 6E 03 CD 13 66 61 73 1C FE  |  Šv.ŠN.Šn.Í.fas.ş
160   4E 11 75 0C 80 7E 00 80 0F 84 8A 00 B2 80 EB 84  |  N.u.€~.€.„Š.²€ë„
176   55 32 E4 8A 56 00 CD 13 5D EB 9E 81 3E FE 7D 55  |  U2äŠV.Í.]랁>ş}U
192   AA 75 6E FF 76 00 E8 8D 00 75 17 FA B0 D1 E6 64  |  ªun.v.è.u.ú°Ñæd
208   E8 83 00 B0 DF E6 60 E8 7C 00 B0 FF E6 64 E8 75  |  èƒ.°ßæ`è|.°.ædèu
224   00 FB B8 00 BB CD 1A 66 23 C0 75 3B 66 81 FB 54  |  .û¸.»Í.f#Àu;fûT
240   43 50 41 75 32 81 F9 02 01 72 2C 66 68 07 BB 00  |  CPAu2ù..r,fh.».
256   00 66 68 00 02 00 00 66 68 08 00 00 00 66 53 66  |  .fh....fh....fSf
272   53 66 55 66 68 00 00 00 00 66 68 00 7C 00 00 66  |  SfUfh....fh.|..f
288   61 68 00 00 07 CD 1A 5A 32 F6 EA 00 7C 00 00 CD  |  ah...Í.Z2öê.|..Í
304   18 A0 B7 07 EB 08 A0 B6 07 EB 03 A0 B5 07 32 E4  |  . ·.ë. ¶.ë. µ.2ä
320   05 00 07 8B F0 AC 3C 00 74 09 BB 07 00 B4 0E CD  |  ...‹ğ¬<.t.»..´.Í
336   10 EB F2 F4 EB FD 2B C9 E4 64 EB 00 24 02 E0 F8  |  .ëòôëı+Éädë.$.àø
352   24 02 C3 49 6E 76 61 6C 69 64 20 70 61 72 74 69  |  $.ÃInvalid parti
368   74 69 6F 6E 20 74 61 62 6C 65 00 45 72 72 6F 72  |  tion table.Error
384   20 6C 6F 61 64 69 6E 67 20 6F 70 65 72 61 74 69  |   loading operati
400   6E 67 20 73 79 73 74 65 6D 00 4D 69 73 73 69 6E  |  ng system.Missin
416   67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74  |  g operating syst
432   65 6D 00 00 00 63 7B 9A 0B C4 DD A7 00 00 80 20  |  em...c{š.Äݧ..€
448   21 00 07 BE 32 0C 00 08 00 00 00 18 03 00 00 BE  |  !..¾2..........¾
464   33 0C 07 FE FF FF 00 20 03 00 00 48 B5 1D 00 FE  |  3..ş... ...Hµ..ş
480   FF FF 07 FE FF FF 00 70 B8 1D 00 D8 D9 0D 00 FE  |  ...ş...p¸..ØÙ..ş
496   FF FF 0F FE FF FF 00 50 92 2B 00 08 A6 0E 55 AA  |  ...ş...P’+..¦.Uª
###
129/000:32/VEC> Start Verify EPBR Chain for disk 1 (129)
129/000:32/VEC> Listing current partitions on disk:
129/000:32/VEC>     NTFS (P)    (no name)        2048      202752       (0 Gb)
129/000:32/VEC>     NTFS (P)    (no name)      204800   498419712     (238 Gb)
129/000:32/VEC>     NTFS (P)        (Err)   498626560   232380416     (111 Gb)
129/000:32/VEC>     NTFS (L)        (Err)   731011072   245760000     (117 Gb)
129/000:32/VEC> Extended starts at 731009024 (45503 52 54)
129/000:32/VEC> Partition Table info for sector 0 (0 0 1)
129/000:32/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 .128 | ..07 | ....0..32..33 | ...12.190..50 | ......2048 | ....202752
..2 ...0 | ..07 | ...12.190..51 | .1023.254..63 | ....204800 | .498419712
..3 ...0 | ..07 | .1023.254..63 | .1023.254..63 | .498626560 | .232380416
..4 ...0 | ..0F | .1023.254..63 | .1023.254..63 | .731009024 | .245762048
129/000:32/VEC> 55AA sig Ok
129/000:32/VEC> Partition Table info for sector 731009024 (45503 52 54)
129/000:32/LOG> PartListDump requested at 731009024 (45503 52 54)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..07 | .1023.254..63 | .1023.254..63 | ......2048 | .245760000
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
129/000:32/VEC> 55AA sig Ok
129/000:32/LOG> Boot sector dump requested at 2048 (0 32 33)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 2048
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 202751
........MFT Location (dec): 8533
.MFT Mirror Location (dec): 2
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 4CD4023DD40229B2
........Volume Label (txt): (no name)
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/000:32/VEC> BS and BBS equal
129/000:32/LOG> Boot sector dump requested at 204800 (12 190 51)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 204800
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 498419711
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 2
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 7AE06896E0685A81
........Volume Label (txt): (no name)
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/000:32/VEC> BS and BBS equal
129/000:32/LOG> Boot sector dump requested at 498626560 (31038 17 20)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): 58456D
............OEM Name (txt): .%,Æ:ñ
....Bytes per Sector (dec): 4294941541
.Sectors per Cluster (dec): 24
....Reserved Sectors (dec): 4294947131
..............Unused (hex): F6FD1DC6E1
....Media Descriptor (hex): AD
..............Unused (hex): 5C17
...Sectors per Track (dec): 4294941932
.....Heads per Track (dec): 4294944024
......Hidden Sectors (dec): 2912479853
..............Unused (hex): B5882CDF
.............Unknown (hex): 8ED32B85
.......Total Sectors (dec): 4232147376
........MFT Location (dec): 896558312
.MFT Mirror Location (dec): 2314218207
....Clusters per FRS (dec): 3406887378
.Clusters/Indx Block (dec): 2230080144
...........Volume ID (hex): D6EEAF87F3D40A93
........Volume Label (txt): (Err)
............Checksum (hex): 50C5D77E
....Sector Signature (hex): D522
129/000:32/VEC> BS and BBS not equal, dump follows;
129/000:32/LOG> Boot sector dump requested at 731006975 (45503 20 21)
### BootSectorDump for BStype NTFS (B)
...........Jump Code (hex): 39D151
............OEM Name (txt): èÑn×=b f
....Bytes per Sector (dec): 4294946867
.Sectors per Cluster (dec): 241
....Reserved Sectors (dec): 4294939599
..............Unused (hex): ED0EE1EE12
....Media Descriptor (hex): 8C
..............Unused (hex): E6EB
...Sectors per Track (dec): 4294950314
.....Heads per Track (dec): 4294952196
......Hidden Sectors (dec): 3007496304
..............Unused (hex): E4D49DB6
.............Unknown (hex): 4290989E
.......Total Sectors (dec): 1321082992
........MFT Location (dec): 453198029
.MFT Mirror Location (dec): 2918613373
....Clusters per FRS (dec): 3867107020
.Clusters/Indx Block (dec): 405065808
...........Volume ID (hex): 8D0EE20474961A0D
........Volume Label (txt): (Err)
............Checksum (hex): 92C80F95
....Sector Signature (hex): 388E
129/000:32/LOG> Boot sector dump requested at 731011072 (45503 85 23)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): D89964
............OEM Name (txt): ©¶ğÙ.ìy–
....Bytes per Sector (dec): 4294936305
.Sectors per Cluster (dec): 138
....Reserved Sectors (dec): 4294951601
..............Unused (hex): 2F4B17D62B
....Media Descriptor (hex): BF
..............Unused (hex): 4D9E
...Sectors per Track (dec): 4294957404
.....Heads per Track (dec): 4294956817
......Hidden Sectors (dec): 1702177104
..............Unused (hex): 53271445
.............Unknown (hex): 78B32953
.......Total Sectors (dec): 2383303228
........MFT Location (dec): 3758522675
.MFT Mirror Location (dec): 1276354178
....Clusters per FRS (dec): 2337140769
.Clusters/Indx Block (dec): 896270298
...........Volume ID (hex): 0A4422E6DCED69D8
........Volume Label (txt): (Err)
............Checksum (hex): 88C6ECED
....Sector Signature (hex): CD36
129/000:32/VEC> BS and BBS not equal, dump follows;
129/000:32/LOG> Boot sector dump requested at 976771071 (60801 47 46)
### BootSectorDump for BStype NTFS (B)
...........Jump Code (hex): 12BDDC
............OEM Name (txt): VKy.bBøò
....Bytes per Sector (dec): 14845
.Sectors per Cluster (dec): 173
....Reserved Sectors (dec): 4294960698
..............Unused (hex): 49C597A7FE
....Media Descriptor (hex): D2
..............Unused (hex): 4A53
...Sectors per Track (dec): 4294950086
.....Heads per Track (dec): 4294935624
......Hidden Sectors (dec): 1104855462
..............Unused (hex): 8B09CECF
.............Unknown (hex): C0317E8D
.......Total Sectors (dec): 2513695892
........MFT Location (dec): 517591143
.MFT Mirror Location (dec): 117779091
....Clusters per FRS (dec): 2304909817
.Clusters/Indx Block (dec): 1709170794
...........Volume ID (hex): FC77FA6344FB7E27
........Volume Label (txt): (Err)
............Checksum (hex): 6DAA2A57
....Sector Signature (hex): F9E0
129/000:32/VEC> Verify EPBR Chain completed
129/000:32/USD> Select disk completed
129/000:35/SCN> DiskScan requested, ScanType is 3
129/000:35/SCN> from 0 (0 0 1) to 976773167 (60801 80 63), 976773168 sectors
129/000:35/SCN> Starting QuickScan (pre-vista) at 63 (0 1 1)
129/000:35/CDC> No DataCollection entries, CleanDatacollection aborted
129/000:35/MPL> No DataCollection entries, MakePartList aborted
129/000:35/SCN> Next QuickScan location at 0 (0 0 1)
129/000:36/SCN> QuickScan finished
129/000:36/SCN> Starting SmartScan (pre-vista) at 0 (0 0 1) (JMP=16065, RNG=63)
129/041:24/SCN> SmartScan finished
129/041:24/SCN> DiskScan completed
129/041:24/SCN> ReadErrors for disk 1 (129): 0
129/041:32/LOG> DataCollection items found: 5 / 0
### DATACOLLECTION, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 129 | .........0 | ...NTFS | PTE1 | ......2048 | ....202752 | PRI | .
002 | 129 | .........0 | ...NTFS | PTE2 | ....204800 | .498419712 | PRI | .
003 | 129 | .........0 | ...NTFS | PTE3 | .498626560 | .232380416 | PRI | .
004 | 129 | .........0 | ....EXT | PTE4 | .731009024 | .245762048 | PRI | .
005 | 129 | .772244615 | ..FAT16 | PTE4 | 3518184313 | 3851552002 | LOG | .
129/041:32/LOG> DataCollection items found: 5 / 0
### DATACOLLECTION, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 129 | .........0 | ...NTFS | PTE1 | ......2048 | ....202752 | PRI
002 | 129 | .........0 | ...NTFS | PTE2 | ....204800 | .498419712 | PRI
003 | 129 | .........0 | ...NTFS | PTE3 | .498626560 | .232380416 | PRI
004 | 129 | .........0 | ....EXT | PTE4 | .731009024 | .245762048 | PRI
005 | 129 | .772244615 | ..FAT16 | PTE4 | 3518184313 | 3851552002 | LOG
129/041:32/LOG> PartList items created: 4
### PARTLIST ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ...NTFS | ..1 | ... | ... | ..0 | ..1 | ..1 | ..1 | 1 | ...
002 | ...NTFS | ..2 | ... | ... | ..0 | ..2 | ..2 | ..2 | 1 | ...
003 | ...NTFS | ..3 | ... | ... | ..0 | ..3 | ..3 | ..3 | 1 | ...
004 | ..FAT16 | ..5 | ... | ..0 | ... | ..5 | ..5 | ..5 | 1 | ...
### PARTLIST, INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ...NTFS | ......2048 | ....202752 | ....204799 | PRI | ... | ..V
002 | ...NTFS | ....204800 | .498419712 | .498624511 | PRI | ... | ..V
003 | ...NTFS | .498626560 | .232380416 | .731006975 | PRI | ... | ..V
004 | ..FAT16 | 3518184313 | 3851552002 | 3074769018 | LOG | ... | ..?
129/041:32/SST> SaveState requested for disk 1 (129)
129/041:32/WAS> AdmiSectors in use : 0+ 1+
129/041:32/SST> SaveState completed for disk 1 (129)
129/041:32/EXE> Analysis complete
129/041:35/LOG> RunTime: 041:35
129/041:35/LOG> ### CLOSE LOG ###

Logged
Joep
Developer and Support Tech
Administrator
member
*****
Posts: 1473


WWW
« Reply #3 on: October 15, 2014, 09:26:04 AM »

Doesn't look promising. I suggest you run a megabyte aligned scan, you're not running Windows XP (=pre-vista scan) right?
Logged

--
Kind regards,
Joep - My blog @: www.disktuna.com - Try my JPEG Repair Tool: https://www.youtube.com/watch?v=WIUq03Deyy0
zorlar
member

Posts: 8


« Reply #4 on: October 15, 2014, 11:42:00 AM »

I selected Cylinder aligned (pre-Vista).



Now I choose Mbyte -aligned. I will write the result .
Logged
zorlar
member

Posts: 8


« Reply #5 on: October 15, 2014, 01:03:26 PM »

Mbyte -aligned scan


.../000:01/LOG> ### LOG START ###
.../000:01/LOG> DISKPATCH 4.0.300
.../000:01/LOG> (C) 2000-2013 DIY DataRecovery
.../000:01/LOG> Contact info: www.DIYDataRecovery.nl
.../000:01/LOG> MemFree: 63Kb
.../000:01/LOG> CommandLineParms: /sup
.../000:01/LOG> LogDate: 10-15-2014
.../000:01/CFG> FilePath="C:DPFILES\"
.../000:01/CFG> ReadRetries="32"
.../000:01/CFG> WriteRetries="32"
.../000:01/CFG> MaxReadErrors="32"
.../000:01/CFG> MaxWriteErrors="1"
.../000:01/CFG> ReadDelay="0"
.../000:01/CFG> LogEachReadError="1"
.../000:01/CFG> WriteAfterReadError="1"
.../000:01/CFG> VfyFixedBadSect="1"
.../000:01/CFG> CleanAfterDOD="1"
.../000:01/CFG> DiskReset="1"
.../000:01/CFG> SectorSkip="1024"
.../000:01/CFG> AutoSaveState="1"
.../000:01/CFG> DumpFoundSectors="0"
.../000:01/CFG> FixFats="1"
.../000:01/CFG> MaxFatScan="51200"
.../000:01/CFG> MaxDataColEntries="256"
.../000:01/CFG> IgnoreF8FF="0"
.../000:01/CFG> DownSizeExt="1"
.../000:01/CFG> ScanSignature="55AA"
.../000:01/CFG> Rebuild="00"
.../000:01/13H> Ext13H installed test requested
.../000:01/13H> Disk found at 128
.../000:01/13H> Ext13H version: EDD-3.0
.../000:01/13H> Ext13H Support: Extended disk access functions
.../000:01/13H> Ext13H Support: Enhanced disk drive functions
.../000:01/13H> Ext13H Flags: Cylinder/head/sector info is valid
.../000:01/13H> Drive Interface Info:
.../000:01/13H> Disk 128 X13H data : 65535/16/63 312581806/512
.../000:01/13H> Disk found at 129
.../000:01/13H> Ext13H version: EDD-3.0
.../000:01/13H> Ext13H Support: Extended disk access functions
.../000:01/13H> Ext13H Support: Enhanced disk drive functions
.../000:01/13H> Drive Interface Info:
.../000:01/13H> Disk 129 X13H data : 16383/16/63 976773168/512
.../000:01/13H> Ext13H tested ok
.../000:01/FDL> DiskList requested
.../000:01/FDL> Disk found at 128
.../000:01/FDL> Disk found at 129
### DISKLIST ###
__D_|________LBA_|___H_|__S_|___GB_|__GEO_|___SS_
128 | .312581806 | .16 | 63 | .149 | BIOS | .512
129 | .976773168 | 255 | 63 | .465 | BIOS | .512
..0 | .........0 | ..0 | .0 | ...0 | BIOS | ...0
..0 | .........0 | ..0 | .0 | ...0 | BIOS | ...0
.../000:01/IAS> AdmiSector init complete for disk 0 (128)
.../000:01/IAS> AdmiSector found on disk 1 (129)
.../000:01/KEY> DEMO/1
.../000:01/PFC> PQstuff signature not detected on disk 0 (128)
.../000:01/PFC> PQstuff signature not detected on disk 1 (129)
.../000:01/PFC> Disk health not checked
.../000:03/PFC> Partition State backup not found on disk 0 (128)
.../000:03/PFC> Partition State backup not found on disk 1 (129)
.../000:03/PFC> No Repair date found on disk 0 (128)
.../000:03/PFC> No Repair date found on disk 1 (129)
.../000:23/CSD> Start CheckDisk for disk 1 (129)
.../000:23/CSD> 0 (0 0 1)
.../000:23/CSD> 16064 (0 254 63)
.../000:23/CSD> 976768065 (60801 0 1)
.../000:23/CSD> 976773167 (60801 80 63)
.../000:23/CSD> CheckDisk complete, ReadErrors 0
.../000:23/USD> Disk 1 (129) selected
.../000:23/GSC> No geo change detected for disk 1 (129)
.../000:23/WAS> AdmiSectors in use : 0+ 1+
129/000:23/USD> MBR for disk 1 (129)
129/000:23/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C 8E C0 8E D8 BE 00 7C BF 00  |  3ŽĞ.|ŽŽؾ.|.
016   06 B9 00 02 FC F3 A4 50 68 1C 06 CB FB B9 04 00  |  ...Ph....
032   BD BE 07 80 7E 00 00 7C 0B 0F 85 0E 01 83 C5 10  |  .~..|.....
048   E2 F1 CD 18 88 56 00 55 C6 46 11 05 C6 46 10 00  |  .V.UF..F..
064   B4 41 BB AA 55 CD 13 5D 72 0F 81 FB 55 AA 75 09  |  AU.]r.Uu.
080   F7 C1 01 00 74 03 FE 46 10 66 60 80 7E 10 00 74  |  ..t.şF.f`~..t
096   26 66 68 00 00 00 00 66 FF 76 08 68 00 00 68 00  |  &fh....f.v.h..h.
112   7C 68 01 00 68 10 00 B4 42 8A 56 00 8B F4 CD 13  |  |h..h..BV..
128   9F 83 C4 10 9E EB 14 B8 01 02 BB 00 7C 8A 56 00  |  .ž....|V.
144   8A 76 01 8A 4E 02 8A 6E 03 CD 13 66 61 73 1C FE  |  v.N.n..fas.ş
160   4E 11 75 0C 80 7E 00 80 0F 84 8A 00 B2 80 EB 84  |  N.u.~...
176   55 32 E4 8A 56 00 CD 13 5D EB 9E 81 3E FE 7D 55  |  U2V..]ž>ş}U
192   AA 75 6E FF 76 00 E8 8D 00 75 17 FA B0 D1 E6 64  |  un.v..u.d
208   E8 83 00 B0 DF E6 60 E8 7C 00 B0 FF E6 64 E8 75  |  .`|..du
224   00 FB B8 00 BB CD 1A 66 23 C0 75 3B 66 81 FB 54  |  ...f#u;fT
240   43 50 41 75 32 81 F9 02 01 72 2C 66 68 07 BB 00  |  CPAu2..r,fh..
256   00 66 68 00 02 00 00 66 68 08 00 00 00 66 53 66  |  .fh....fh....fSf
272   53 66 55 66 68 00 00 00 00 66 68 00 7C 00 00 66  |  SfUfh....fh.|..f
288   61 68 00 00 07 CD 1A 5A 32 F6 EA 00 7C 00 00 CD  |  ah....Z2.|..
304   18 A0 B7 07 EB 08 A0 B6 07 EB 03 A0 B5 07 32 E4  |  . .. .. .2
320   05 00 07 8B F0 AC 3C 00 74 09 BB 07 00 B4 0E CD  |  ...ğ<.t....
336   10 EB F2 F4 EB FD 2B C9 E4 64 EB 00 24 02 E0 F8  |  .ı+d.$.
352   24 02 C3 49 6E 76 61 6C 69 64 20 70 61 72 74 69  |  $.Invalid parti
368   74 69 6F 6E 20 74 61 62 6C 65 00 45 72 72 6F 72  |  tion table.Error
384   20 6C 6F 61 64 69 6E 67 20 6F 70 65 72 61 74 69  |   loading operati
400   6E 67 20 73 79 73 74 65 6D 00 4D 69 73 73 69 6E  |  ng system.Missin
416   67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74  |  g operating syst
432   65 6D 00 00 00 63 7B 9A 0B C4 DD A7 00 00 80 20  |  em...c{.İ..
448   21 00 07 BE 32 0C 00 08 00 00 00 18 03 00 00 BE  |  !..2..........
464   33 0C 07 FE FF FF 00 20 03 00 00 48 B5 1D 00 FE  |  3..ş... ...H..ş
480   FF FF 07 FE FF FF 00 70 B8 1D 00 D8 D9 0D 00 FE  |  ...ş...p....ş
496   FF FF 0F FE FF FF 00 50 92 2B 00 08 A6 0E 55 AA  |  ...ş...P+...U
###
129/000:23/VEC> Start Verify EPBR Chain for disk 1 (129)
129/000:23/VEC> Listing current partitions on disk:
129/000:23/VEC>     NTFS (P)    (no name)        2048      202752       (0 Gb)
129/000:23/VEC>     NTFS (P)    (no name)      204800   498419712     (238 Gb)
129/000:23/VEC>     NTFS (P)        (Err)   498626560   232380416     (111 Gb)
129/000:23/VEC>     NTFS (L)        (Err)   731011072   245760000     (117 Gb)
129/000:23/VEC> Extended starts at 731009024 (45503 52 54)
129/000:23/VEC> Partition Table info for sector 0 (0 0 1)
129/000:23/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 .128 | ..07 | ....0..32..33 | ...12.190..50 | ......2048 | ....202752
..2 ...0 | ..07 | ...12.190..51 | .1023.254..63 | ....204800 | .498419712
..3 ...0 | ..07 | .1023.254..63 | .1023.254..63 | .498626560 | .232380416
..4 ...0 | ..0F | .1023.254..63 | .1023.254..63 | .731009024 | .245762048
129/000:23/VEC> 55AA sig Ok
129/000:23/VEC> Partition Table info for sector 731009024 (45503 52 54)
129/000:23/LOG> PartListDump requested at 731009024 (45503 52 54)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..07 | .1023.254..63 | .1023.254..63 | ......2048 | .245760000
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
129/000:23/VEC> 55AA sig Ok
129/000:23/LOG> Boot sector dump requested at 2048 (0 32 33)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 2048
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 202751
........MFT Location (dec): 8533
.MFT Mirror Location (dec): 2
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 4CD4023DD40229B2
........Volume Label (txt): (no name)
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/000:23/VEC> BS and BBS equal
129/000:23/LOG> Boot sector dump requested at 204800 (12 190 51)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 204800
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 498419711
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 2
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 7AE06896E0685A81
........Volume Label (txt): (no name)
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/000:23/VEC> BS and BBS equal
129/000:23/LOG> Boot sector dump requested at 498626560 (31038 17 20)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): 58456D
............OEM Name (txt): .%,:
....Bytes per Sector (dec): 4294941541
.Sectors per Cluster (dec): 24
....Reserved Sectors (dec): 4294947131
..............Unused (hex): F6FD1DC6E1
....Media Descriptor (hex): AD
..............Unused (hex): 5C17
...Sectors per Track (dec): 4294941932
.....Heads per Track (dec): 4294944024
......Hidden Sectors (dec): 2912479853
..............Unused (hex): B5882CDF
.............Unknown (hex): 8ED32B85
.......Total Sectors (dec): 4232147376
........MFT Location (dec): 896558312
.MFT Mirror Location (dec): 2314218207
....Clusters per FRS (dec): 3406887378
.Clusters/Indx Block (dec): 2230080144
...........Volume ID (hex): D6EEAF87F3D40A93
........Volume Label (txt): (Err)
............Checksum (hex): 50C5D77E
....Sector Signature (hex): D522
129/000:23/VEC> BS and BBS not equal, dump follows;
129/000:23/LOG> Boot sector dump requested at 731006975 (45503 20 21)
### BootSectorDump for BStype NTFS (B)
...........Jump Code (hex): 39D151
............OEM Name (txt): n=b f
....Bytes per Sector (dec): 4294946867
.Sectors per Cluster (dec): 241
....Reserved Sectors (dec): 4294939599
..............Unused (hex): ED0EE1EE12
....Media Descriptor (hex): 8C
..............Unused (hex): E6EB
...Sectors per Track (dec): 4294950314
.....Heads per Track (dec): 4294952196
......Hidden Sectors (dec): 3007496304
..............Unused (hex): E4D49DB6
.............Unknown (hex): 4290989E
.......Total Sectors (dec): 1321082992
........MFT Location (dec): 453198029
.MFT Mirror Location (dec): 2918613373
....Clusters per FRS (dec): 3867107020
.Clusters/Indx Block (dec): 405065808
...........Volume ID (hex): 8D0EE20474961A0D
........Volume Label (txt): (Err)
............Checksum (hex): 92C80F95
....Sector Signature (hex): 388E
129/000:23/LOG> Boot sector dump requested at 731011072 (45503 85 23)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): D89964
............OEM Name (txt): ğ.y
....Bytes per Sector (dec): 4294936305
.Sectors per Cluster (dec): 138
....Reserved Sectors (dec): 4294951601
..............Unused (hex): 2F4B17D62B
....Media Descriptor (hex): BF
..............Unused (hex): 4D9E
...Sectors per Track (dec): 4294957404
.....Heads per Track (dec): 4294956817
......Hidden Sectors (dec): 1702177104
..............Unused (hex): 53271445
.............Unknown (hex): 78B32953
.......Total Sectors (dec): 2383303228
........MFT Location (dec): 3758522675
.MFT Mirror Location (dec): 1276354178
....Clusters per FRS (dec): 2337140769
.Clusters/Indx Block (dec): 896270298
...........Volume ID (hex): 0A4422E6DCED69D8
........Volume Label (txt): (Err)
............Checksum (hex): 88C6ECED
....Sector Signature (hex): CD36
129/000:23/VEC> BS and BBS not equal, dump follows;
129/000:23/LOG> Boot sector dump requested at 976771071 (60801 47 46)
### BootSectorDump for BStype NTFS (B)
...........Jump Code (hex): 12BDDC
............OEM Name (txt): VKy.bB
....Bytes per Sector (dec): 14845
.Sectors per Cluster (dec): 173
....Reserved Sectors (dec): 4294960698
..............Unused (hex): 49C597A7FE
....Media Descriptor (hex): D2
..............Unused (hex): 4A53
...Sectors per Track (dec): 4294950086
.....Heads per Track (dec): 4294935624
......Hidden Sectors (dec): 1104855462
..............Unused (hex): 8B09CECF
.............Unknown (hex): C0317E8D
.......Total Sectors (dec): 2513695892
........MFT Location (dec): 517591143
.MFT Mirror Location (dec): 117779091
....Clusters per FRS (dec): 2304909817
.Clusters/Indx Block (dec): 1709170794
...........Volume ID (hex): FC77FA6344FB7E27
........Volume Label (txt): (Err)
............Checksum (hex): 6DAA2A57
....Sector Signature (hex): F9E0
129/000:23/VEC> Verify EPBR Chain completed
129/000:24/USD> Select disk completed
129/000:27/SCN> DiskScan requested, ScanType is 3
129/000:27/SCN> from 0 (0 0 1) to 976773167 (60801 80 63), 976773168 sectors
129/000:27/SCN> Starting QuickScan (vista) at 2048 (0 32 33)
129/000:27/SCN> Next QuickScan location at 204800 (12 190 51)
129/000:27/SCN> Next QuickScan location at 498624512 (31037 239 51)
129/000:28/SCN> Next QuickScan location at 0 (0 0 1)
129/000:28/SCN> QuickScan finished
129/000:28/SCN> Starting SmartScan (vista) at 0 (0 0 1)
129/000:28/RDS> Read past EOD intercept for disk 129 at 4294967295 (267349 89 4)
129/058:49/SCN> SmartScan finished
129/058:49/SCN> DiskScan completed
129/058:49/SCN> ReadErrors for disk 1 (129): 0
129/068:39/LOG> DataCollection items found: 16 / 4
### DATACOLLECTION, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 129 | ......2048 | ...NTFS | ..BS | ......2048 | ....202752 | PRI | .
002 | 129 | ....204799 | ...NTFS | .BBS | ......2048 | ....202752 | PRI | .
003 | 129 | ....204800 | ...NTFS | ..BS | ....204800 | .498419712 | PRI | .
004 | 129 | .498624511 | ...NTFS | .BBS | ....204800 | .498419712 | PRI | .
005 | 129 | .........0 | ...NTFS | PTE1 | ......2048 | ....202752 | PRI | .
006 | 129 | .........0 | ...NTFS | PTE2 | ....204800 | .498419712 | PRI | .
007 | 129 | .........0 | ...NTFS | PTE3 | .498626560 | .232380416 | PRI | .
008 | 129 | .........0 | ....EXT | PTE4 | .731009024 | .245762048 | PRI | .
009 | 129 | ......2048 | ...NTFS | ..BS | ......2048 | ....202752 | PRI | I
010 | 129 | ....174079 | ...NTFS | .BBS | ......2048 | ....172032 | PRI | .
011 | 129 | ....204799 | ...NTFS | .BBS | ......2048 | ....202752 | PRI | I
012 | 129 | ....204800 | ...NTFS | ..BS | ....204800 | .498419712 | PRI | I
013 | 129 | .133572607 | .NOVELL | PTE3 | .133616127 | .....19049 | LOG | .
014 | 129 | .498624511 | ...NTFS | .BBS | ....204800 | .498419712 | PRI | I
015 | 129 | .498626559 | ...NTFS | .BBS | ....204800 | .498421760 | PRI | .
016 | 129 | .731009024 | ...NTFS | PTE1 | .731011072 | .245760000 | LOG | .
129/068:39/LOG> DataCollection items found: 16 / 4
### DATACOLLECTION, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 129 | ......2048 | ...NTFS | ..BS | ......2048 | ....202752 | PRI
002 | 129 | ....204799 | ...NTFS | .BBS | ......2048 | ....202752 | PRI
003 | 129 | ....204800 | ...NTFS | ..BS | ....204800 | .498419712 | PRI
004 | 129 | .498624511 | ...NTFS | .BBS | ....204800 | .498419712 | PRI
005 | 129 | .........0 | ...NTFS | PTE1 | ......2048 | ....202752 | PRI
006 | 129 | .........0 | ...NTFS | PTE2 | ....204800 | .498419712 | PRI
007 | 129 | .........0 | ...NTFS | PTE3 | .498626560 | .232380416 | PRI
008 | 129 | .........0 | ....EXT | PTE4 | .731009024 | .245762048 | PRI
010 | 129 | ....174079 | ...NTFS | .BBS | ......2048 | ....172032 | PRI
013 | 129 | .133572607 | .NOVELL | PTE3 | .133616127 | .....19049 | LOG
015 | 129 | .498626559 | ...NTFS | .BBS | ....204800 | .498421760 | PRI
016 | 129 | .731009024 | ...NTFS | PTE1 | .731011072 | .245760000 | LOG
129/068:39/LOG> PartList items created: 7
### PARTLIST ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ...NTFS | ..5 | ..1 | ..2 | ..0 | ..5 | ..5 | ..5 | 3 | ..A
002 | ...NTFS | ... | ... | .10 | ..0 | .10 | .10 | .10 | 1 | ..B
003 | ...NTFS | ..6 | ..3 | ..4 | ..0 | ..6 | ..6 | ..6 | 3 | ..A
004 | ...NTFS | ... | ... | .15 | ..0 | .15 | .15 | .15 | 1 | ..B
005 | .NOVELL | .13 | ..0 | ..0 | ..0 | .13 | .13 | .13 | 1 | ..-
006 | ...NTFS | ..7 | ... | ... | ..0 | ..7 | ..7 | ..7 | 1 | ...
007 | ...NTFS | .16 | ... | ... | ..0 | .16 | .16 | .16 | 1 | ...
### PARTLIST, INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ...NTFS | ......2048 | ....202752 | ....204799 | PRI | ..A | ..V
002 | ...NTFS | ......2048 | ....172032 | ....174079 | PRI | ..B | ..V
003 | ...NTFS | ....204800 | .498419712 | .498624511 | PRI | ..A | ..V
004 | ...NTFS | ....204800 | .498421760 | .498626559 | PRI | ..B | ..V
005 | .NOVELL | .133616127 | .....19049 | .133635175 | LOG | ..- | ..?
006 | ...NTFS | .498626560 | .232380416 | .731006975 | PRI | ... | ..V
007 | ...NTFS | .731011072 | .245760000 | .976771071 | LOG | ... | ..V
129/068:39/SST> SaveState requested for disk 1 (129)
129/068:39/WAS> AdmiSectors in use : 0+ 1+
129/068:40/SST> SaveState completed for disk 1 (129)
129/068:40/EXE> Analysis complete
129/068:42/LOG> RunTime: 068:42
129/068:42/LOG> ### CLOSE LOG ###

Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1473


WWW
« Reply #6 on: October 15, 2014, 02:59:13 PM »

For the 2 volumes you need:

006 | ...NTFS | .498626560 | .232380416 | .731006975 | PRI | ... | ..V
007 | ...NTFS | .731011072 | .245760000 | .976771071 | LOG | ... | ..V


nothing is found that can help DiskPatch rebuild a partition table. DiskPatch can't help here. Whatever you did it was thorough, no boot sectors are found and the ones that ARE found do not show signs of bitlocker. Not much we can do here, sorry.

Logged

zorlar
member

Posts: 8


« Reply #7 on: October 15, 2014, 03:23:52 PM »

Someone has solved that problem .
He did what ? I did not understand fully .

"Problem Fixed.

Here's the details.

First, THe problem was with Microsoft. They can Even Make two versions their own software compatible. BitLocker for Vista nad BitLocker for Windows 7 are completely (well Not that different) to different stories. Vista Bitlecker is too secure paranoid and has limited chance of recovery if you screw things up :p  And It demands a lot of things (TPM, seperate partitioning ... blah blah blah..). ANd Vista's version is not soo compatiible with Win 7. Win 7 version is soo much cool and forgiving Smiley

So What I did was....

Fisrt used a another machine and crated a bitlocker partition with windows 7. Just to check how the partition header sector will look like. Then I used a tool that can view the actual hex data.
What Has happend was that, when Linux installation couldnt identyfy the beitlocker partition header It agestted that partition and there was a empty sector before the real starting sector.

So What we did was edited the first few bits of the partition and make it looks like a NTFS partition.

Then use testDisk to edit the partition table and register my partition.

restarted, and Vista Showed my partition as a bitlocker encrypted partition.

Then, used the Windows 7 installation CD and used its recovery console to unlock the partition.
or
reinstall windows 7 and decrytpted the whole drive and reinstalled the vista back again Wink

"

Another solution http://forum.hddguru.com/viewtopic.php?t=24771&start=

"Then use testDisk to edit the partition table and register my partition.

restarted, and Vista Showed my partition as a bitlocker encrypted partition."

How was registering disk ? showed bitlocker disk. ?

Help me pls
Logged
Joep
Developer and Support Tech
Administrator
member
*****
Posts: 1473


WWW
« Reply #8 on: October 15, 2014, 06:15:34 PM »

Hello,

I am sorry but we can't, we don't have the time, to examine all kind of forum threads all around the internet you point to, for free. The thread you initially referred to (on our forum) is a different situation from yours: In that case we DID have boot sectors. In your case we do NOT have boot-sectors for the bit-locked partitions. Possibly the boot sectors are there, but we didn't find them using DiskPatch on the expected locations, which turns this into a bit of a wild goose chase. I am really sorry we can't help you.
Logged

--
Kind regards,
Joep - My blog @: www.disktuna.com - Try my JPEG Repair Tool: https://www.youtube.com/watch?v=WIUq03Deyy0
zorlar
member

Posts: 8


« Reply #9 on: October 15, 2014, 07:19:40 PM »

Thank you for your help . In this case How should I follow a path .Recovering raw disk impossible?  Does the possibility of rescue ? Has a chance to recover ? According to him, I will search. thanks..
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1473


WWW
« Reply #10 on: October 16, 2014, 01:47:27 PM »

No, there is no chance of recovery here with the tools we offer. Reading a bitlocker volume that is encrypted without the supporting structures can not be done (so iRecover can not help). Without the boot sectors it is over. You can try to contact Microsoft but they will say the same. If we would have the disk here then MAYBE (but probably not, given the damage) but we do not take in disks.
So, if our tools and the help we offer with the tools can't fix this, it's finished.
Maybe there's help here:
https://www.google.com/?gfe_rd=cr&ei=Q78_VOfJJMmA7Qau64CYBg&gws_rd=ssl#newwindow=1&q=recover+data+from+encrypted+bitlocker+volume
Logged

zorlar
member

Posts: 8


« Reply #11 on: October 19, 2014, 03:40:25 PM »



My goal is to repair the boot sectors at. Testdisk I did Deep Search with TestDisk.
TestDisk complete volume shaped :S:S.
My question is Is it really format ? or just repair boot sectors at it?
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1473


WWW
« Reply #12 on: October 20, 2014, 09:46:49 AM »

I'm sorry but I don't understand. I don't know what else to say; we can not rebuild the boot sectors if they are destroyed and were part of a bitlocker volume. All you can try is to find the boot sector backups, but DiskPatch should have found these and didn't. So I can't help any further.

The image on the left shows (part of) a boot sector but I can't make out what it belongs to, the image isn't complete. The boot sector shown though is not bitlockered, so I'm guessing it belongs to the normal NTFS volume at the start of the disk.
Logged

zorlar
member

Posts: 8


« Reply #13 on: October 20, 2014, 03:04:44 PM »

Do all disc formatting TestDisk scored ? or just repair the boot sector was part ? I wonder if it. I chose only just over DiskPart from the deep search .I think that you just revamped the boot in this sector .





still data  in encrypted form there?

Full size

http://i.hizliresim.com/1naX0A.png
http://i.hizliresim.com/Lo8L0G.jpg
http://i.hizliresim.com/rdX7XM.jpg

I sorry Sad(
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1473


WWW
« Reply #14 on: October 21, 2014, 03:56:09 PM »

I don't know. The screenshots don't show LBA addresses so I don't know what sector I'm looking at.
Logged

Pages: [1] Go Up Print 
« previous next »
Jump to:  


Login with username, password and session length

Powered by MySQL Powered by PHP Powered by SMF 1.1.20 | SMF © 2013, Simple Machines Valid XHTML 1.0! Valid CSS!