Please help

[Fatboy1550]

Can anyone tell me how to get past the bitlocker on my computer? My wife went to play a game on it and it said it had an update so she clicked to let it up date and when it restarted it asks for bitlocker security key, which we don't have. All my work stuff is on there and I can't get past it. Please help

[Fatboy1550]

It's windows Vista by the way thanks

[6Foot2]

These are your first two posts and you are asking how you might bypass a security setting on a computer. This rings alarm bells for us as you might be anyone with no posting history behind you. The device you are asking about might not be yours. I am not saying that you are involved in things underhand but these thoughts do come to mind when someone creates a post like this.

[Fatboy1550]

Oh I understand dave, I wasn't sure what else to try, and it is my computer it's to old for anyone or even me to want to steal it lol, I just have alot of files and equipment manuals on it for work and since I have been locked out of it I'm at a loss, and it would take me years to replace all of the files that were on there.

[elsiegee40]

Somebody will have installed bitlocker and that somebody is the person to get past it. I am afraid that Dave is correct and edugeek will not be able to help you.

[jmak]

Calling @Teresamay

 

She should be able to sort you out no bother!

 

[mrbios]

Assuming your laptop belongs to an organisation, that organisation will have configured bitlocker and they will have the key to unlock it.

 

If it's a personal laptop and you've encrypted it with bitlocker and lost the key......well.......hard luck.

 

[Oaktech]

Bitlocker isn't really something you can turn on accidentally either, you have to go through a lot of prompts...

 

The whole point of it is that once it is on, you can't get past it.

 

Sorry

[Gibson335]

I guess somebody needs to ask the obvious...have you really not got any backups?

[browolf]

Sounds like Ransomware.

[strawberry]

Oh I understand dave, I wasn't sure what else to try, and it is my computer it's to old for anyone or even me to want to steal it lol, I just have alot of files and equipment manuals on it for work and since I have been locked out of it I'm at a loss, and it would take me years to replace all of the files that were on there.

 

It was going to happen one way or the other, backups my friend are your friend. I suggest you take your laptop to your nearest pc shop and fork over a bundle of notes so they can attempt to fix it for you.

[Arthur]

The whole point of it is that once it is on, you can't get past it.

Once you have physical access to the device all bets are off. e.g.

 

• www.lostpassword.com/hdd-decryption.htm
  
• www.elcomsoft.co.uk/efdd.html
  

• www.blackhat.com/docs/eu-15/materials/eu-15-Haken-Bypassing-Local-Windows-Authentication-To-Defeat-Full-Disk-Encryption.pdf
  
• www.blackhat.com/docs/eu-15/materials/eu-15-Haken-Bypassing-Local-Windows-Authentication-To-Defeat-Full-Disk-Encryption-wp.pdf
  

http://i.imgur.com/MWjRS3G.png http://i.imgur.com/vKWss0v.png

 

http://i.imgur.com/R9xb4kk.png http://i.imgur.com/AGuj5Gf.png

 

http://i.imgur.com/ThOp1Um.png

[Arthur]

If the target computer is turned off

When you have physical access to the target computer you can simply turn it on and if it's your own PC you would already know the password to login. This would make a DMA attack significantly easier assuming the device had a Firewire port or ExpressCard slot (which a Vista-era laptop would probably have). You could simply use Inception or Volatility with the BitLocker plugin to extract the Full Volume Encryption Key from RAM.

 

In @Fatboy1550's case he may be out-of-luck since I don't think it's possible to get past the BitLocker recovery key screen without already knowing what it is.

 

 

Last 2 state after Nov 11th MS are patching the exploit for the vulnerability highlighted.

The OP's post is dated 5th November which would mean he wouldn't have this month's Patch Tuesday updates.

Edited November 26, 2015 by Arthur

[cpjitservices]

Have you tried pressing the Enter key ? There may be no password set.

[sted]

if it has biltockered and you login with a microsoft account you may find it stored the key in your onedrive iirc on my surface when i enctypted it it stored it there by default no idea if vista can do this

[Pashers]

I second @Fatboy1550 @DaveP, it's not a question if you want to steal it (you'll just swap the hard drive out). It's more so the principle of a laptop owned by an organisation which might have sensitive data.