Unlocking ATA Password for Western Digital

[ugurcilhoroz]

Hi friends I have 2 WD HDD I need unlock but I cant create scripts. Can helps ?


WDC-WD3200BEKT-08PVMT1
WDC-WD1600BJKT-75F4T0

thanks

[ugurcilhoroz]

I use dump or dump2 script and get error first error : error drq second error : error report drive

[vagelisfr]

Attaching 22.bin. I'm a noob so please tell me where my password is.

Attachments

[dick]

Attaching 22.bin. I'm a noob so please tell me where my password is.

Take a look at the start address 102h and see if you can make it out.

[vagelisfr]

Attaching 22.bin. I'm a noob so please tell me where my password is.

If someone could just tell me where it begins and ends so i could save it to use with viktoria software. Thank you.

[vagelisfr]

Attaching 22.bin. I'm a noob so please tell me where my password is.

If someone could just tell me where it begins and ends so i could save it to use with viktoria software. Thank you.

h2oinsyde

Allready tried that. Straight on laptop, on mhdd and with victoria software. Wrong pass.Master and user...

[vagelisfr]

Attaching 22.bin. I'm a noob so please tell me where my password is.

If someone could just tell me where it begins and ends so i could save it to use with viktoria software. Thank you.

h2oinsyde

Allready tried that. Straight on laptop, on mhdd and with victoria software. Wrong pass.Master and user...

Sorry my mistake it worked. My fault thank you, you are great.

[dick]

Attaching 22.bin. I'm a noob so please tell me where my password is.

h2oinsyde is the password set by the bios but you asked for your password.
OLDDRIFT is your password.
Or maybe it never was yours?

[wejongfu]

Hi guys,
Thank you for your post´s!
I´ve gone from not knowing anything about ATA Passwords to unlocking a WD HDD from a customer, in just 14 hours. I did not even realized how few I knew. I´ve gone over this Topic 2 times, done my fair share of mistakes:
Used mhdd 4.6
Stared at the 22.bin for hours trying to find the password.
Did not exactly do as written in the post´s
Not able to type in the PW in MHDD in dec

But finally, if you read exactly and try to understand what you are trying to do and not only follow instructions, you get the job done.
Special thanks to is0-mick drc m0rbi0us abispac ri0tous and fzabkar your post´s help me realized my wrong approach!
I´ve gone from frustration to anxiety to helplessness to finally happiness all in 14 hours
Guy´s its all here, just read, think and try. It took me 14 hours to do the first WD HDD. For the next on, if I ever have to do this again, it will take me closer to 10 min

A hint: for the unlock I user hdat2, it allows you to input your PW in dec AND shows you the inputed PW in hex so you can double check.

Thank you all for support!

[nsmidl]

I'm from the Croatian and I need a your help
should the password from the hard disk

Attachments

22.txt

(512 Bytes) Downloaded 1114 times

[fzabkar]

Try the following command (all on one line):

hdparm --security-unlock $(printf '\x38\x3A\xD8\x63\x57\xC4\x98\x74\xB0\xD7\x91\x9C\x20\xAF\x88\x73\xCC\x74\xD0\xE9\x60\x37\x07\x4D\xA8\x24\x39\x23\x42\x25\xA8\x5F') /dev/ice

Replace "/dev/ice" with your actual device name, eg /dev/sdb.

[jaikishan77]

HDD doctor for WD it can help u easily

From CINDIA Data Recovery

[fzabkar]

I haven't tested the following script, but I believe it should retrieve the passwords from a WD Marvell drive. If you are inclined to try it, then please use an expendable drive before trying it on the real thing.

The procedure is based on the feedback I have received in the following discussion:

http://community.wd.com/t5/Desktop-Mobi ... m-p/757574

Essentially what the script attempts to do is to retrieve 0x20 bytes from section 0x13 of module 02 beginning at offsets 0x04 (user password) and 0x24 (master password).

Code:

; VSC enable

reset
waitnbsy
regs = $45 $0b $00 $44 $57 $a0 $80
waitnbsy

; read user password in module 02

regs = $d6 $01 $be $4f $c2 $a0 $b0
waitnbsy
checkdrq
sectorsfrom = rd_user.bin
waitnbsy
regs = $d5 $01 $bf $4f $c2 $a0 $b0
waitnbsy
checkdrq
sectorsto = userpwd.bin

; read master password in module 02

waitnbsy
regs = $d6 $01 $be $4f $c2 $a0 $b0
waitnbsy
checkdrq
sectorsfrom = rd_master.bin
waitnbsy
regs = $d5 $01 $bf $4f $c2 $a0 $b0
waitnbsy
checkdrq
sectorsto = masterpwd.bin

; end of script


rd_user.bin

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  2a 00 01 00 02 00 13 00 04 00 20 00 00 00 00 00
00000010  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
........
000001F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

rd_master.bin

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  2a 00 01 00 02 00 13 00 24 00 20 00 00 00 00 00
00000010  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
........
000001F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


If the above procedure works, then it would be a very simple matter to modify it to write zeros back to the drive.

[fzabkar]

I haven't tested the following script ...

I have now verified that the script works on a WD2500BB. The only necessary changes are in regard to 8.3 file names.

See http://malthus.zapto.org/viewtopic.php? ... 4271#p4271

[PeRDu]

OK HERE GOES !!!!

i will attempt to step by step talk you through how i unlocked MY OWN

1, Download This http://hddguru.com/download/software/mhdd/mhdd32ver4.6iso.zip
2, Burn The ISO to a CD
3, Then Download This http://forum.hddguru.com/download/file.php?id=1434
4, Put a USB stick into the Computer FORMAT it to FAT32 and copy the contents of Step 3, to the USB stick
5, REMOVE all drive appart from the DRIVE you wish to retreive the 22.bin or 42.bin FILE from
6, Pop the USB stick into the compter put the CD in the drive and BOOT FROM CD !!
7, when you boot from CD hold F5 and you will be on a Command prompt Screen
8, TYPE C:/MHDD.exe and let it run
9, Type .dump this will create your 22.bin file and save it to the USB stick
10, Put the drive with windows back in load up windows and open the 22.bin with a HEX editor
http://download.cnet.com/3001-2352_4-10891068.html?spi=1d0165043acacd9f99df7e625b92ca3c&idl=n
11, You should see a file like everybody is posting up here with WDC WD3200BEVT-22ZCT running down the side or something similar
12, POST your results up here and me and the rest of the lads will TRY cant PROMISE, but we will TRY help get your password


Arden

thanx this way work on WD my passport es 1TB ? plz help so tnx

[Maelstrom]

Greetings to everybody!

I have the similar problem that other guys have here. HDD is WD2500bevs-22ust0.

My laptop Acer Aspire 5920 died once (guess smth happened with motherboard), and I had used the hdd password before it happened, so I can't restore the information from its disk now.
The most funny thing is that I know the password (!). It is "12312312". And despite that I can't restore the access to hdd. I tried to type my password in MHDD and Victoria (both "master" and "user" variants), but they returns me "error" or "wrong".

I've carefully read the topic and have been able to obtain the .bin file by using the scripts. It's also funny that I've even found there my password coded into hex!! (highlighted on the screenshot, where '0200' = '1', '0300' = '2' etc)

So, my question is what i'm doing wrong? And how can I enter the password which was "12312312" with MHDD or Victoria?

PS I've also tried enter with Right_Alt and NUMpad (001 002 003 001 002 003 001 002), but it hasn't helped.

PPS It's quite important for me to recover the information, so is it possible with soft i've mentioned?

Thank you all in advance, guys!

Attachments

[dick]

Hi! You seem to have done everything right.
Try using Victoria for Windows version. Then try "12312312" (as plain text) or "0203040203040203" (as Hex).

One problem might be the bios is freezing the password function. You would know this in Victoria for Windows as in the passport window it might show security "frozen" in which case you would need to plug in the drive immediately after the system has booted in to windows. Good luck!

[Maelstrom]

Thank you for the replying!

Will try it as soon as I get to a working machine.

Also, I've found another solution here that may be suitable for cases which are similar to mine, will try it too:

viewtopic.php?f=1&t=8374&start=540 (issue described by Samantha_14 and answer by fzabkar)

[fzabkar]

@Maelstrom, the following MHDD script should disable your drive's password. It uses the standard ATA SECURITY DISABLE PASSWORD command -- it does not write to the firmware.

The password is transmitted to the drive via a 512-byte file (disablpw.bin). The first 2 bytes constitute the control word (00 00). This is then followed by the 32-byte password. The rest of the file is padded with zeros. You should place this file in the same directory as MHDD.EXE.

Code:

; send ATA SECURITY DISABLE PASSWORD command to disable password

reset
waitnby
regs = $00 $00 $00 $00 $00 $a0 $f6
waitnby
checkdrq
sectorsfrom disablpw.bin

disablpw.bin

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  00 00 02 00 03 00 04 00 02 00 03 00 04 00 02 00
00000010  03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
........
000001F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

[Maelstrom]

Success!

fzabkar, have got error reading drq with this script in mhdd.. (after the string "checkdrq")

But also have tried HDAT2 v5 and finally done the unlocking with it by entering user-password in the HEX-mode: 02000300etc(whole password in hex)+0000(filling free space in the field up to 32 symbols with nulls). And it has worked

So, thank you very much guys and your great forum