Switch to full style
Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
Post a reply

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 12:02

So there is no module 25... That would explain a lot :/

Also wtf no module 32?

Here is what I get when I dump mod 25:
Code:
VSC menu
q) Quit
p) Previous menu
h) Toggle script help
1) WD dump mod 42 (older Caviar drives)
2) WD royl (Marvel) dump mod 02
3) WD royl (Marvel) dump mod 32
4) WD royl (Marvel) patch mod 02 (slow fix)
5) WD royl (Marvel) patch mod 32 (slow fix)
6) WD royl (Marvel) dump all modules
7) WD royl (Marvel) dump selected module
Enter your choice:
> 7
7
Enter module number in decimal (0x for hex):
> 25
25
Model: WDC WD10JMVW-11AJGS0
Serial: WD-WX31A93T3159
Command failed!
sense_key=0x5 asc=0x21 ascq=0x4
error=0x4 count=0x46 lba=0x37 device=0xa0 status=0x51 altstatus=0x0
command_status= 0x0
data_transferred= 0x200
Attachments
vwang modules.zip
(851.77 KiB) Downloaded 759 times

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 13:05

From my understanding it looks like the JM538S can be brute forced. Is this still possible if mod 25 is missing?

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 16:02

JGAN wrote:From my understanding it looks like the JM538S can be brute forced. Is this still possible if mod 25 is missing?

Yes.

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 20:31

JGAN wrote:So there is no module 25... That would explain a lot :/

Also wtf no module 32?

Here is what I get when I dump mod 25:
Code:
VSC menu
q) Quit
p) Previous menu
h) Toggle script help
1) WD dump mod 42 (older Caviar drives)
2) WD royl (Marvel) dump mod 02
3) WD royl (Marvel) dump mod 32
4) WD royl (Marvel) patch mod 02 (slow fix)
5) WD royl (Marvel) patch mod 32 (slow fix)
6) WD royl (Marvel) dump all modules
7) WD royl (Marvel) dump selected module
Enter your choice:
> 7
7
Enter module number in decimal (0x for hex):
> 25
25
Model: WDC WD10JMVW-11AJGS0
Serial: WD-WX31A93T3159
Command failed!
sense_key=0x5 asc=0x21 ascq=0x4
error=0x4 count=0x46 lba=0x37 device=0xa0 status=0x51 altstatus=0x0
command_status= 0x0
data_transferred= 0x200

FYI when dumping a module by number it is usually implied that the module is given in hex, so to dump mod 25 would be 0x25, 32 would be 0x32. But your output from the dump all has very few modules, there should be many more. After all you said you applied the slow fix to both modules 02 and 32, so 32 must exist... :?

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 20:50

The manual said I could give it in decimal, but I will try hex just to make sure. Not sure why there is no mod 32 when dumping all modules either, but I can dump 32 by selecting it manually. Very strange.

Anyways Roberto, attached is sector 0 & 1 dumped using dmde.
Attachments
vwang sectors.zip
(549 Bytes) Downloaded 645 times

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 21:03

JGAN wrote:The manual said I could give it in decimal, but I will try hex just to make sure. Not sure why there is no mod 32 when dumping all modules either, but I can dump 32 by selecting it manually. Very strange.

Yes, you can give it in decimal, and to give it in hex requires preceding with 0x. But when speaking of module numbers it is implied they are in hex, so to dump actual mod 32 would be 0x32. Giving 32 decimal is modiule 0x20. As for not dumping all modules, I think the script will exit if it encounters an error, and modules are not in order so it could have exited before dumping all.

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 21:07

That was my guess too. Before I look into making one, is there a HDDsupertool script to dump modules and just skip errors?

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 21:22

JGAN wrote:That was my guess too. Before I look into making one, is there a HDDsupertool script to dump modules and just skip errors?

No, but should not be too hard to modify original to keep going. It parses mod 01 and attempts to read the modules in the order they are in there. But I always try to include error checking in the scripts so if something fails it could stop, to prevent someone from having faulty data. Might be able to just comment out a few lines to let it keep going...

Edit: I am implying that you could modify it, as I do not have the time to play with that right now. I have other priorities :)

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 21:31

Already done. Commented out line 248 in wd_royl_dump_mod_all. Not pretty, but works. Dumping all modules currently and attached the script for future reference.
Attachments
wd_royl_dump_mod_all_continue_on_error.txt
(7.22 KiB) Downloaded 702 times

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 21:52

Attached are all the modules I could dump.
Attachments
vwang modules_complete.zip
(13.49 MiB) Downloaded 664 times

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 21:58

maximus wrote:
JGAN wrote:The manual said I could give it in decimal, but I will try hex just to make sure. Not sure why there is no mod 32 when dumping all modules either, but I can dump 32 by selecting it manually. Very strange.

Yes, you can give it in decimal, and to give it in hex requires preceding with 0x. But when speaking of module numbers it is implied they are in hex, so to dump actual mod 32 would be 0x32. Giving 32 decimal is modiule 0x20. As for not dumping all modules, I think the script will exit if it encounters an error, and modules are not in order so it could have exited before dumping all.


Just re-read this. Does that mean that the key is stored in module 0x25 (decimal 37)? If so, then that module exists!

Re: WD My Passport Ultra, no partition map and slow reads

October 3rd, 2016, 23:00

Module 0x25 does indeed contain a key. Perhaps Roberto's software can now decrypt your data. Otherwise the author of reallymine may be able to help you.

Re: WD My Passport Ultra, no partition map and slow reads

October 4th, 2016, 1:16

fzabkar wrote:Module 0x25 does indeed contain a key. Perhaps Roberto's software can now decrypt your data.

Yes it can... have tested it on the uploaded sectors 0 and 1 and it works.
Encryption key is fine.

Result is attached
Attachments
decrypted.zip
(254 Bytes) Downloaded 693 times

Re: WD My Passport Ultra, no partition map and slow reads

October 4th, 2016, 1:43

That's interesting, I see it now -- the "WDv1" and key afterwards in module 25.

Where do you suggest I go from here to decrypt the data? It doesn't look like reallymine supports giving it a key manually.

Thanks again for everyone's assistance! Couldn't have made it this far without all of you :D

Re: WD My Passport Ultra, no partition map and slow reads

October 4th, 2016, 1:51

JGAN wrote:Where do you suggest I go from here to decrypt the data? It doesn't look like reallymine supports giving it a key manually.

I can send you my decryption tool which can decrypt encrypted and uncompressed images.

You can take an image of your drive with dmde for example.
After that you need another location with enough free space for the decrypted image.
The decrypted image can than be copied back with dmde to a drive you want or mounted with other tools.

If you want to use my tool... let me know when you have finished taking the encrypted image.
I'll then send you my tool.

Re: WD My Passport Ultra, no partition map and slow reads

October 4th, 2016, 3:30

Thanks,
Quick (generic) question: When doing things like dumping modules or creating sector by sector images of drives, can I use the drive I ddrescued to? Or are the SA different?

Re: WD My Passport Ultra, no partition map and slow reads

October 6th, 2016, 14:22

@JGAN

I need your email for sending the decryption tool.
I think it's not possible to send binary files over private messages... or did I miss something?

Re: WD My Passport Ultra, no partition map and slow reads

October 6th, 2016, 14:27

Depending on your windows version you might need .dot Net Framework from Microsoft to be able to run the application.

You can get it from the microsoft homepage:
https://www.microsoft.com/de-de/downloa ... x?id=30653

There is also an offline installer:
https://www.microsoft.com/de-de/downloa ... x?id=42642

I would take the offline installer.
With .dot Net Framework (you need min v4 or higher) installed there should be no problems in running the application.
If any problems occur, please let me know.

Update:
Decrypting Tool is now attached.
See Password in private message.
Attachments
ImageDecrypter.rar
(58.32 KiB) Downloaded 854 times

Re: WD My Passport Ultra, no partition map and slow reads

October 7th, 2016, 12:39

Attachments:
ImageDecrypter.rar [58.32 KiB]
Downloaded 5 times

Someone in need of the password? :)
Send me private message... then I'll send you the password.

Re: WD My Passport Ultra, no partition map and slow reads

November 22nd, 2016, 1:15

Roberto,
I just joined and can't PM you. Can you PM me the password please?
Much appreciated and thank you!
Post a reply