Hi,
I have a bitlocker encrypted drive that is showing RAW partition. Using testdisk I can see two partitions
Disk \\.\PhysicalDrive1 - 320 GB / 298 GiB - CHS 4864 255 63
Current partition structure:
Partition Start End Size in sectors
Invalid NTFS or EXFAT boot
1 * HPFS - NTFS 0 32 33 38 94 56 614400
1 * HPFS - NTFS 0 32 33 38 94 56 614400
Invalid NTFS or EXFAT boot
2 P HPFS - NTFS 38 94 57 38913 37 36 624523264
2 P HPFS - NTFS 38 94 57 38913 37 36 624523264
Both show a invalid NTFS boot.. I'm rebuilding the boot sector currently, once this completes, will I be able to browse and copy the files off of the EFS?
I also get this if I do "Quick Search"
Disk \\.\PhysicalDrive1 - 320 GB / 298 GiB - CHS 4864 255 63
Analyse cylinder 14/4863: 00%
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
HPFS - NTFS 0 4 5 4 203 7 76800
If you could shed some light on what I am seeing, that would be great.
recovering files from a bitlocker encrypted drive
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
xerxes2985
- Posts: 1
- Joined: 16 Dec 2014, 18:38