WD5000BMVW USB disk

[ICD]

Hello,

I have a WD disk with USB interface with broken heads (WD5000BMVW-11AMCS2). When I was looking for a donor, the information of the donor includes the micro jogs. I do not have a way to read the microjogs on my broken disk.

Does someone can explain how this microjogs parameters works?

I always have problems changing and getting compatible heads for WD drives.

Thanks & Regards

[fzabkar]

Here is a good explanation of microjogs:
http://malthus.zapto.org/viewtopic.php?f=3&t=24#p1721

See also http://www.deepspar.com/blog/Donor-Drive.html

... taking Western Digital drives as an example, several vendor-specific parameters located in the ROM and RAM of the drive help in finding a donor with better compatibility:

Head map
Microjog adaptives
Drive information table
Firmware release

Unfortunately, none of these parameters are located on a drive’s label. However, you can retrieve them using some data recovery tools.

An HDD Oracle forum member has written a tool to extract important donor matching data from MOD 47.

See http://malthus.zapto.org/viewtopic.php?f=59&t=1009

MOD 0A and MOD 0D contain "DCM", head map and firmware version information, including head and media type.

If you could upload your drive's ROM, then we could extract the relevant data.

[northwind]

This website is blocked by most antiviruses because it contains dangerous content.

ESET SMART SECURITY
Access denied
Access to the web page was blocked.
http://malthus.zapto.org/viewtopic.php?f=59&t=1009

The web page is on the list of websites with potentially dangerous content.

[hhddrec]

do not worry the webpage is safe.

try to desctivate temporally NOD32 and then you will can access.

[jerovsek]

probably only nod(not on duty) block this site

[fzabkar]

http://google.com/safebrowsing/diagnost ... ddguru.com

Safe Browsing
Diagnostic page for hddguru.com

What is the current listing status for hddguru.com?

This site is not currently listed as suspicious.

What happened when Google visited this site?
Of the 456 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-09-03, and the last time suspicious content was found on this site was on 2014-09-03.

Malicious software includes 38 trojan(s), 11 virus.

This site was hosted on 2 network(s) including AS36351 (SOFTLAYER), AS3800 (IONITY).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, hddguru.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

Yes, this site has hosted malicious software over the past 90 days. It infected 0 domain(s), including .

[HaQue]

a lot of tools created for drive level and system level modification show as viruses.. Many homebrew people use packers and exe protectors to protect their work, but not always commercial ones. They can be the same as what is used to pack malware.

You should scan any file you download, "trusted" site or not. as well as have browsing protection for drive by downloads as a matter of course.

[LarrySabo]

Thanks, fzabkar for that link. Never heard of it before; it should come in very handy.

For Northwind's and the OP's benefit, here are the results for the link you gave re. microjogs: http://google.com/safebrowsing/diagnost ... =59&t=1009

Safe Browsing
Diagnostic page for malthus.zapto.org

What is the current listing status for malthus.zapto.org?
This site is not currently listed as suspicious.

What happened when Google visited this site?
Google has not visited this site within the past 90 days.

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, malthus.zapto.org did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

[northwind]

http://google.com/safebrowsing/diagnostic?site=hddguru.com

Safe Browsing
Diagnostic page for hddguru.com

What is the current listing status for hddguru.com?

This site is not currently listed as suspicious.

What happened when Google visited this site?
Of the 456 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-09-03, and the last time suspicious content was found on this site was on 2014-09-03.

Malicious software includes 38 trojan(s), 11 virus.

This site was hosted on 2 network(s) including AS36351 (SOFTLAYER), AS3800 (IONITY).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, hddguru.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

Yes, this site has hosted malicious software over the past 90 days. It infected 0 domain(s), including .

So?

Safe Browsing
Diagnostic page for google.com

What is the current listing status for google.com?
This site is not currently listed as suspicious.

Part of this site was listed for suspicious activity 19 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 5143305 pages we tested on the site over the past 90 days, 718 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-09-03, and the last time suspicious content was found on this site was on 2014-09-03.
Malicious software includes 301 trojan(s), 262 scripting exploit(s), 194 exploit(s). Successful infection resulted in an average of 2 new process(es) on the target machine.

Malicious software is hosted on 152 domain(s), including abu-farhan.com/, websitecom.us/, batangyagit.com/.

181 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including trackcash.org/, javaistlus.com/, tracksite.us/.

This site was hosted on 3 network(s) including AS36040 (YOUTUBE), AS16509 (AMAZON-02), AS15169 (GOOGLE).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, google.com appeared to function as an intermediary for the infection of 98 site(s) including lesblogsimmobiliers.com/, hathmaluwa.org/, dinhcaoauto.info/.

Has this site hosted malware?
Yes, this site has hosted malicious software over the past 90 days. It infected 28 domain(s), including joomfa.org/, burguscircus.free.fr/, beljews.info/.

Next steps:
Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

[fzabkar]

a lot of tools created for drive level and system level modification show as viruses.. Many homebrew people use packers and exe protectors to protect their work, but not always commercial ones. They can be the same as what is used to pack malware.

Even legitimate commercial packers can fall foul of certain AV products.

For example, SeDiv will trigger false positives in several AV products.

viewtopic.php?t=11980&start=

The reason is that it has been packed with ORiEN.

Here is the virustotal report:
https://www.virustotal.com/en/file/77c4 ... 260805983/

Code:

AVG    Win32/PolyCrypt
Authentium    W32/Heuristic-210!Eldorado
Comodo    UnclassifiedMalware
F-Prot    W32/Heuristic-210!Eldorado
Fortinet    PossibleThreat
Jiangmin    Trojan/PSW.LdPinch.edn
McAfee+Artemis    Artemis!692F7832581F
Norman    W32/Packed_Orien.A
Prevx    Medium Risk Malware
Sophos    Mal/Packer
Sunbelt    Backdoor.Win32.Hupigon.mrv
eSafe    Suspicious File

Nowadays SeDiv is delivered as a password protected RAR, most likely to circumvent misdetection by AV products.

http://sediv2008.narod.ru/Easy3.9Passwo ... 567890.rar

I have been told by Spildit that he runs his software downloads inside a sandbox. If the software is malicious, then its damage will hopefully be contained by the sandbox.

http://www.sandboxie.com