Fujitsu User Password Lock : MHY2120BH

[tyneweartech]

Hi All,

Sorry I'm really noob at this, first time coming across an encrypted HDD password and it's a PITA. Really struggling with bypassing the password. The user has already said they're happy to wipe it, but I'm struggling to unlock the unit to do a secure erase. The laptop initially had a BIOS password / Supervisor password. Cleared these

The HDD has been encrypted with a User ONLY password (security High by the way not Max)

Things tried so far:.....

HDAT2
I tried to unlock the device using Master password (32 spaces, or WDCWDC, etc no luck just fails)
Master Password Revision Code : FFFeh

MHDD2
I tried running .dump & .dump2, no script files intially. I found one on the forum by another user, but when running this I receive a No DRQ error message on Line 8. Are the scripts files you make specific to every model or HDD, or is there a generic script that you run which dumps the password data into the 21.bin and 22.bin files?

I can run the DISPWD command and it comes up as "Done" (I leave it as blank spaces)
When I type UNLOCK and select the option for "Master" it comes up as fail (I tried 32 spaces)

ATAPWD
Tried removing the password (tried all options really) every single one
"Command rejected by drive"

VICTORIA
I can go into PIO mode via Hirens' Boot CD (Mini Windows XP) but gives an error about DISPWD and drive being Frozen
I'm assuming this is because I haven't unlocked the drive yet.


Also, additionally. I have tried connecting the drive into Windows (Disk not intialised message) and when trying to format I received an I/O device error (I'm guessing this is because it's locked it's denying access to the drive). I also tried running the "HDD Unlock Wizard program" (think it's A-FHDD or something like that) and it detects the drive but says the Firmware is not supported


Could anyone suggest or offer help on where I need to go. I'm assuming the first step is dumping the info from the HDD but I need to get a correct working script or understand where I need to go from here.

For reference the script I'm using :

; rm modul id 42
reset
waitnbsy
regs = $57 $44 $43 $00 $00 $a0 $8a
waitnbsy
regs = $00 $02 $00 $00 $0F $E0 $21
waitnbsy
checkdrq
sectorsto = 42.bin
; End.

[tyneweartech]

Also this is the breakdown of the drive

Attachments

[fzabkar]

I tried to unlock the device using Master password (32 spaces, or WDCWDC, etc no luck just fails)

Is there any reason why you are attempting to unlock a Fujitsu HDD with a Western Digital Corporation master password?

Is this a WD drive that has been hacked with HDDHackr?

[guru]

Data isn't needed. Use master password and erase....

[guru]

After reading your initial post I see that you tried to erase using master password.

You could try

https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase

I don't use commercial tools as a rule so I can't help there.


You could hack a MHDD script for

1: Security Erase Prepare Command 0xf3 ( no data )
2: Security Erase Command 0xf4 ( data out )


Plenty of info on the net, make sure your drive is not frozen by bios, a re-hot plug should clear it.

[Moltke]

tyneweartech
if the laptop is old, you can try to read here
http://dogber1.blogspot.de/2009/05/tabl ... -bios.html

guru
What if the master password is changed?

[tyneweartech]

The posted MHDD scripts are for WD drives ...

Guess what ... VSC = Vendor Specific Commands meaning the ARE NOT ATA standard meaning that each manufacturer have it's own way to access firmware.

The posted MHDD Script attempts to retrieve module 42 on OLD wd drives.

So ....

1 - Either YOU KNOW THE PASSWORD and you can unlock the drive.

2 - Some of the master passwords that you have can be used as "Master" to ERASE THE DRIVE with data loss IF YOU ARE VERY LUCKY TO GUESS A MASTER PASSSWORD THAT WORKS.

3 - You send the drive to some data recovery firm to unlock with very expensive tools like PC-3000.

4 - You buy a PC-3000 unit yourself ($6000 USD to $7000 USD) and you unlock the drive yourself.

Regards.

Booger! I knew it could come to that, hence why I suggested about purchasing a new HDD for the user. I'm just waiting to hear back from them. I'll still most likely keep their old HDD to play around with and try and crack to improve my experience, although it's providing a difficult project


I thought those commands may have been vendor specific. Could you suggest anywhere I can read up on programming MHDD scripts for the vendors or places I could look. I read the MHDD manual but could only find references to using scripts and not creating them

I tried to unlock the device using Master password (32 spaces, or WDCWDC, etc no luck just fails)

Is there any reason why you are attempting to unlock a Fujitsu HDD with a Western Digital Corporation master password?

Is this a WD drive that has been hacked with HDDHackr?

Thank you. I'm well aware WDC is a Western Digital Password, but when searching around the net I found the Fujitsu master password was 32 spaces, although some sites suggested some drives may be using WDC. I can't remember when reading if it was Seagate who were bought out by Western Digital or another manufacturer

Data isn't needed. Use master password and erase....

I wish it was that easy, master password isn't working

Data isn't needed. Use master password and erase....

Agree.

Master password should be 32 spaces (if it wasn't changed).

Unfortunately it was, unless I'm doing it wrong. I used MHDD and inputted 32 characters for master password and it came up fail. I made sure the identifier was set as Master first. I've tried a variety of the common apps with 32 spaces and they all came up as wrong password. I'm sure I recall reading somewhere that the Master Revision Code was a certain hexidecimal value to allow you to identify if it was the original master password.

After reading your initial post I see that you tried to erase using master password.

You could try

https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase

I don't use commercial tools as a rule so I can't help there.


You could hack a MHDD script for

1: Security Erase Prepare Command 0xf3 ( no data )
2: Security Erase Command 0xf4 ( data out )


Plenty of info on the net, make sure your drive is not frozen by bios, a re-hot plug should clear it.

Thank you, I'll do more research into this whilst I'm waiting to hear back from the user. It's proving a lengthy task

tyneweartech
if the laptop is old, you can try to read here
http://dogber1.blogspot.de/2009/05/tabl ... -bios.html

guru
What if the master password is changed?

Thanks, I'll have a look into those. I'm waiting to hear back from the user on the HDD replacement suggestion as it's not a BIOS lock so fitting a new HDD should allow me to reinstall Windows again

[guru]

Hardly ever seen MASTER password different to default factory MASTER password.

But it's possible

[guru]

Lengthy task for cracking a £30 drive......?

It's probably cheaper just to buy a new one and replace

[tyneweartech]

Lengthy task for cracking a £30 drive......?

It's probably cheaper just to buy a new one and replace

I know, I mentioned earlier that I decided it was no longer worth cracking the drive. The user wants the laptop repaired and I know I can source a replacement for around £30 I'm just waiting to hear back from them

I'm still going to keep the drive, the user was happy to lose all their data, but I'll use it as an opportunity to improve my knowledge with password protected disks and at the very least I have a test disk I can play with at problem solving.

I remember reading a post on this site, or another forum from a user who suggested using TTL adapters. Can't remember their username but their site was hddoracle.com (I think)

This post is past me cracking the password as I've already decided to buy a new HDD and replace. Although I'd still like to look into methods of working out how to solve it, so I'll be keeping an eye on these forums