Bitlocker drive partitions deleted

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
tmrunner
Posts: 2
Joined: 30 May 2015, 09:47

Bitlocker drive partitions deleted

#1 Post by tmrunner »

Good morning,

I do have a 500 GB Harddisk which originally had 3 partitions on it
500 MB Boot Manager partition
500 MB recovery partition
476 GB Bitlocker enrcrypted partition

I happened yesterday that the partitions got deleted by human error and now I am wondering if I will be able to recover the bitlocker partition which shows up as unassigned space in the Diskmanager.
I do have the bitlocker recovery key on an USB device which is why I hope that testdisk will be able to recover it.
Anything that needs to be done in particular ?

many thanks
Thomas

tmrunner
Posts: 2
Joined: 30 May 2015, 09:47

Re: Bitlocker drive partitions deleted

#2 Post by tmrunner »

All,
I did eventually manage to get all of my data restored and I`d like to share the solution.

All in all it´s a combination of testdisk and M3 bitlocker recovery.

Firstly I used testdisk and ran a scan on the damaged disk. It just identified an already recovered boot partition but nothing else
I ran another deep scan subsequently which took another 3 hours and it found 3 partitions based on data of the backup MBR.

I changed the flag from "Deleted" to "Primary" again and testdisk came up with a message that the 2 MBRs were not identical. I recovered them and testdisk showed them as being identical again.

The MFT couldn´t be read from the bitlocker disk which is why I bought the M3 bitlocker recovery tools.
The tool asked for my bitlocker key and after entering it the tool started to rebuild the mft and all of a sudden showed the entire content of the deleted bitlocker partition. Afterwards I restored all data to a new disk and all works fine again.
kind regards
Thomas

Locked