Anything related to computer forensics (new section!)
December 7th, 2017, 8:56
I have an Asus EEE PC 1005P with a western digital sata disk WD1600BEVT-80A23T0. I never protected the HDD with pass but now it seems it's locked. The bios shows protection by user and master passwd. I tried mhdd and hdparm with the master password publicly available WDCWDC..... But didn't work. hdparm show the disk is locked and security high enabled. I want to unlock the disk without erase data. What do you recommend? I read about dump a bin file to check the passwd but I don't know how. Maybe extract the hdd and connect with usb adapter?
December 7th, 2017, 9:24
remember your password(chek asus bios)
you can try with zu, if you have knowledge http://www.hddoracle.com/viewtopic.php?f=95&t=166
or find some pro DR service near you
December 7th, 2017, 10:42
Thanks for the suggestions. ZU seems a very nice tool but I think it only works in IDE hdd and my wd is SATA. I'm right?
December 14th, 2017, 18:23
Must search for DR professional
December 16th, 2017, 18:24
Remove pw in laptop bios. Then you will be able to access. If you can’t get this far send to dr company.
December 25th, 2017, 11:48
Should be very easy assuming that you didn't set any sort of encryption.
If the "problem" is only related to ATA password just get WDMarvel DEMO and most likely you should be able to see config in RAM (module 02) and your password will be visible there. If not you can buy the tool and remove the password using it. As alternative you can try the free WDR DEMO but it will not work if your particular drive locks SA access when ATA password is present.
Ideally you would move your SATA drive to a working desktop machine and you wuld run something like a full version of WDMarvel or SeDiv (lacking something better like a PC-3000 station) and you should be able to unlock the ATA password even if the password is unknonw without any data loss.
As a final note if you can't do this yourself you might want to seek a reputable data recovery firm or someone with WD firmware tools to help you out at a reasonable fee...
October 14th, 2018, 12:37
Hi, I read all the thread twice and I could not unlock the ata password of a hd wd 1600 evt-22zct0, and test all the tools of the thread. The only thing he could do was extract the 22.bin file. I'll leave it to see if anyone can help me. I've been in this challenge for a week, day and night. I need help and if someone could explain how to decrypt the password from 22.bin.
please excuse my english
October 14th, 2018, 13:28
October 14th, 2018, 13:35
Your user password :
Use WDMarvel method, it's easy for new users ....http://www.hddoracle.com/viewtopic.php? ... 353#p15961
October 14th, 2018, 13:41
Extract the attached .rar file and you will get "password" file. Use that same file with this method :http://www.hddoracle.com/viewtopic.php?f=117&t=1072
As alternative :https://www.ebay.com/itm/ATA-Password-U ... 2674077475
October 14th, 2018, 15:25
Excuse my ignorance Mr. Spildit but I could not enter the password file since victory (use hirens boot cd). I do not know how to use WDC marvel, download the demo version but how do I run it to start it from a USB? I'm a Jr technician, know how to apologize
October 14th, 2018, 16:03
Thank you very much sir, for your help, I was able to realize the password. I still can not unlock the hard drive, I'm sorry because I read the thread several times and use each method. Also use the one I mentioned before but I could not either. I do not have a PC, only 2 laptops to find a solution. I did what you told me and it did not work. I do not want more to do to unblock, I'm not interested in paying, I want to learn a method
Is there no other way to enter the password?
I read in the middle of the thread that there was a form with altgr to be able to decipher it but I can not understand very well
October 14th, 2018, 16:05
I forgot to mention that when I try to use victory to enter the pass that you gave me, this happened ...
October 14th, 2018, 16:06
When I pre-order to scan the PCI ports it does not find, I'm sure it's because I'm from hirens. But then how would he do?
October 14th, 2018, 16:18
Buying a SATA adapter could solve the problem?
October 14th, 2018, 17:07
- Make sure that the drive is connected to SATA/IDE port and NOT USB. As you have laptop you should be OK as drive should be already in place.
- Go to BIOS and set the drive/port to IDE COMPATIBLE MODE !!! Do not use RAID, etc otherwise Victoria will not pick it up.
- Make sure you have Victoria set in PIO and scan ports. Rmove Slave checkmark, etc ...
- BIOS freezing security should NOT be a problem as you should be able to insert password to unlock drive anyway.
- Maybe BIOS doesn't assign port to the drive ? Try to run hiren's first and only when you are already on mini XP plug the drive to the system.
- USB will NEVER HELP.
- Try to unlock the drive in a friend's computer (desktop) ?
- On your screen capture Victoria is not picking up the drive at all so you can't send any password to it .... You have to SCAN, find a port where the drive is plugged and get Victoria to know that the drive is locked by ATA password (you will see a message) only then you can unlock by file or password, etc ...
October 14th, 2018, 17:37
I will review step by step mentioned. My problem is that when I select the "PIO" mode I do not see the port of the HDD, I will attach a photo to see it. Thank you very much for your help, I know that I can with this challenge
October 14th, 2018, 17:58
Try those 2 ports and if it still doesn't find the HDD try to select the slave option and click on those ports again ...
Make sure that BIOS is set for IDE/COMPATIBLE on the SATA port where you have the HDD ...
October 14th, 2018, 19:23
I tried again and it did not work. I checked that the BIOS is in "IDE" mode and it did not work either. On several occasions using different methods he always tells me: "The device is not ready" and a DQR error. I will leave attached some images
October 15th, 2018, 13:05
Test with a known working drive and make sure you are selecting the correct port.
Maybe your drive does have more problems in addition to the ATA password ?
Powered by phpBB © phpBB Group.