All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 47 posts ]  Go to page Previous  1, 2, 3  Next
Author Message
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 12:02 
Offline

Joined: November 27th, 2012, 21:59
Posts: 94
Location: Upstate NY, USA
So there is no module 25... That would explain a lot :/

Also wtf no module 32?

Here is what I get when I dump mod 25:
Code:
VSC menu
q) Quit
p) Previous menu
h) Toggle script help
1) WD dump mod 42 (older Caviar drives)
2) WD royl (Marvel) dump mod 02
3) WD royl (Marvel) dump mod 32
4) WD royl (Marvel) patch mod 02 (slow fix)
5) WD royl (Marvel) patch mod 32 (slow fix)
6) WD royl (Marvel) dump all modules
7) WD royl (Marvel) dump selected module
Enter your choice:
> 7
7
Enter module number in decimal (0x for hex):
> 25
25
Model: WDC WD10JMVW-11AJGS0
Serial: WD-WX31A93T3159
Command failed!
sense_key=0x5 asc=0x21 ascq=0x4
error=0x4 count=0x46 lba=0x37 device=0xa0 status=0x51 altstatus=0x0
command_status= 0x0
data_transferred= 0x200


Attachments:
vwang modules.zip [851.77 KiB]
Downloaded 103 times
Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 13:05 
Offline

Joined: November 27th, 2012, 21:59
Posts: 94
Location: Upstate NY, USA
From my understanding it looks like the JM538S can be brute forced. Is this still possible if mod 25 is missing?


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 16:02 
Offline

Joined: March 30th, 2016, 12:29
Posts: 98
Location: Germany
JGAN wrote:
From my understanding it looks like the JM538S can be brute forced. Is this still possible if mod 25 is missing?

Yes.


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 20:31 
Offline

Joined: January 29th, 2012, 1:43
Posts: 352
Location: United States
JGAN wrote:
So there is no module 25... That would explain a lot :/

Also wtf no module 32?

Here is what I get when I dump mod 25:
Code:
VSC menu
q) Quit
p) Previous menu
h) Toggle script help
1) WD dump mod 42 (older Caviar drives)
2) WD royl (Marvel) dump mod 02
3) WD royl (Marvel) dump mod 32
4) WD royl (Marvel) patch mod 02 (slow fix)
5) WD royl (Marvel) patch mod 32 (slow fix)
6) WD royl (Marvel) dump all modules
7) WD royl (Marvel) dump selected module
Enter your choice:
> 7
7
Enter module number in decimal (0x for hex):
> 25
25
Model: WDC WD10JMVW-11AJGS0
Serial: WD-WX31A93T3159
Command failed!
sense_key=0x5 asc=0x21 ascq=0x4
error=0x4 count=0x46 lba=0x37 device=0xa0 status=0x51 altstatus=0x0
command_status= 0x0
data_transferred= 0x200

FYI when dumping a module by number it is usually implied that the module is given in hex, so to dump mod 25 would be 0x25, 32 would be 0x32. But your output from the dump all has very few modules, there should be many more. After all you said you applied the slow fix to both modules 02 and 32, so 32 must exist... :?


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 20:50 
Offline

Joined: November 27th, 2012, 21:59
Posts: 94
Location: Upstate NY, USA
The manual said I could give it in decimal, but I will try hex just to make sure. Not sure why there is no mod 32 when dumping all modules either, but I can dump 32 by selecting it manually. Very strange.

Anyways Roberto, attached is sector 0 & 1 dumped using dmde.


Attachments:
vwang sectors.zip [549 Bytes]
Downloaded 93 times
Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 21:03 
Offline

Joined: January 29th, 2012, 1:43
Posts: 352
Location: United States
JGAN wrote:
The manual said I could give it in decimal, but I will try hex just to make sure. Not sure why there is no mod 32 when dumping all modules either, but I can dump 32 by selecting it manually. Very strange.

Yes, you can give it in decimal, and to give it in hex requires preceding with 0x. But when speaking of module numbers it is implied they are in hex, so to dump actual mod 32 would be 0x32. Giving 32 decimal is modiule 0x20. As for not dumping all modules, I think the script will exit if it encounters an error, and modules are not in order so it could have exited before dumping all.


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 21:07 
Offline

Joined: November 27th, 2012, 21:59
Posts: 94
Location: Upstate NY, USA
That was my guess too. Before I look into making one, is there a HDDsupertool script to dump modules and just skip errors?


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 21:22 
Offline

Joined: January 29th, 2012, 1:43
Posts: 352
Location: United States
JGAN wrote:
That was my guess too. Before I look into making one, is there a HDDsupertool script to dump modules and just skip errors?

No, but should not be too hard to modify original to keep going. It parses mod 01 and attempts to read the modules in the order they are in there. But I always try to include error checking in the scripts so if something fails it could stop, to prevent someone from having faulty data. Might be able to just comment out a few lines to let it keep going...

Edit: I am implying that you could modify it, as I do not have the time to play with that right now. I have other priorities :)


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 21:31 
Offline

Joined: November 27th, 2012, 21:59
Posts: 94
Location: Upstate NY, USA
Already done. Commented out line 248 in wd_royl_dump_mod_all. Not pretty, but works. Dumping all modules currently and attached the script for future reference.


Attachments:
wd_royl_dump_mod_all_continue_on_error.txt [7.22 KiB]
Downloaded 124 times
Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 21:52 
Offline

Joined: November 27th, 2012, 21:59
Posts: 94
Location: Upstate NY, USA
Attached are all the modules I could dump.


Attachments:
vwang modules_complete.zip [13.49 MiB]
Downloaded 94 times
Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 21:58 
Offline

Joined: November 27th, 2012, 21:59
Posts: 94
Location: Upstate NY, USA
maximus wrote:
JGAN wrote:
The manual said I could give it in decimal, but I will try hex just to make sure. Not sure why there is no mod 32 when dumping all modules either, but I can dump 32 by selecting it manually. Very strange.

Yes, you can give it in decimal, and to give it in hex requires preceding with 0x. But when speaking of module numbers it is implied they are in hex, so to dump actual mod 32 would be 0x32. Giving 32 decimal is modiule 0x20. As for not dumping all modules, I think the script will exit if it encounters an error, and modules are not in order so it could have exited before dumping all.


Just re-read this. Does that mean that the key is stored in module 0x25 (decimal 37)? If so, then that module exists!


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 3rd, 2016, 23:00 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 10269
Location: Australia
Module 0x25 does indeed contain a key. Perhaps Roberto's software can now decrypt your data. Otherwise the author of reallymine may be able to help you.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 4th, 2016, 1:16 
Offline

Joined: March 30th, 2016, 12:29
Posts: 98
Location: Germany
fzabkar wrote:
Module 0x25 does indeed contain a key. Perhaps Roberto's software can now decrypt your data.

Yes it can... have tested it on the uploaded sectors 0 and 1 and it works.
Encryption key is fine.

Result is attached


Attachments:
decrypted.zip [254 Bytes]
Downloaded 106 times
Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 4th, 2016, 1:43 
Offline

Joined: November 27th, 2012, 21:59
Posts: 94
Location: Upstate NY, USA
That's interesting, I see it now -- the "WDv1" and key afterwards in module 25.

Where do you suggest I go from here to decrypt the data? It doesn't look like reallymine supports giving it a key manually.

Thanks again for everyone's assistance! Couldn't have made it this far without all of you :D


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 4th, 2016, 1:51 
Offline

Joined: March 30th, 2016, 12:29
Posts: 98
Location: Germany
JGAN wrote:
Where do you suggest I go from here to decrypt the data? It doesn't look like reallymine supports giving it a key manually.

I can send you my decryption tool which can decrypt encrypted and uncompressed images.

You can take an image of your drive with dmde for example.
After that you need another location with enough free space for the decrypted image.
The decrypted image can than be copied back with dmde to a drive you want or mounted with other tools.

If you want to use my tool... let me know when you have finished taking the encrypted image.
I'll then send you my tool.


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 4th, 2016, 3:30 
Offline

Joined: November 27th, 2012, 21:59
Posts: 94
Location: Upstate NY, USA
Thanks,
Quick (generic) question: When doing things like dumping modules or creating sector by sector images of drives, can I use the drive I ddrescued to? Or are the SA different?


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 6th, 2016, 14:22 
Offline

Joined: March 30th, 2016, 12:29
Posts: 98
Location: Germany
@JGAN

I need your email for sending the decryption tool.
I think it's not possible to send binary files over private messages... or did I miss something?


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 6th, 2016, 14:27 
Offline

Joined: March 30th, 2016, 12:29
Posts: 98
Location: Germany
Depending on your windows version you might need .dot Net Framework from Microsoft to be able to run the application.

You can get it from the microsoft homepage:
https://www.microsoft.com/de-de/downloa ... x?id=30653

There is also an offline installer:
https://www.microsoft.com/de-de/downloa ... x?id=42642

I would take the offline installer.
With .dot Net Framework (you need min v4 or higher) installed there should be no problems in running the application.
If any problems occur, please let me know.

Update:
Decrypting Tool is now attached.
See Password in private message.


Attachments:
ImageDecrypter.rar [58.32 KiB]
Downloaded 173 times
Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: October 7th, 2016, 12:39 
Offline

Joined: March 30th, 2016, 12:29
Posts: 98
Location: Germany
Quote:
Attachments:
ImageDecrypter.rar [58.32 KiB]
Downloaded 5 times

Someone in need of the password? :)
Send me private message... then I'll send you the password.


Top
 Profile  
 
 Post subject: Re: WD My Passport Ultra, no partition map and slow reads
PostPosted: November 22nd, 2016, 1:15 
Offline

Joined: November 22nd, 2016, 0:51
Posts: 12
Location: United States
Roberto,
I just joined and can't PM you. Can you PM me the password please?
Much appreciated and thank you!


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 47 posts ]  Go to page Previous  1, 2, 3  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Bing [Bot], Google [Bot], Tomset and 29 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group