Wd usb3 recovery!!

[michael chiklis]

Does your mod 38 contain a key or it's all zero?
If is all zero, and also mod 25 has only zero, then i think your drive hasn't any encryption.

now what do i do by madule 38?

well i don't know...
maybe someone more expert then me can tell you, but if you want that someone helps you then you have to upload firmware resources of your drive.

[alimeci]

how upload frimware?

[fzabkar]

how upload frimware?

"Attach a picture or file"

"Upload attachment"

"If you wish to attach one or more files enter the details below."

"Choose"

"Add the file"

[alimeci]

hi
this is frimware

Attachments

Modules.zip

(12.84 MiB) Downloaded 727 times

[fzabkar]

MOD 38 has your key sector.

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0001E200  57 4D 59 53 F4 5A 01 F8 00 00 00 00 02 00 00 00  WMYSôZ.ø........
0001E210  65 BC 04 3C 5C 76 2C 8A D3 A0 7E EF 63 B8 46 82  e¼.<\v,ŠÓ ~ïc¸F‚
0001E220  01 C7 D1 05 43 D0 45 67 D8 16 4C BD C2 1B 9D F7  .ÇÑ.CÐEgØ.L½Â..÷
0001E230  F9 8B E0 C1 41 E2 23 EE 15 88 B9 B5 72 B1 03 20  ù‹àÁAâ#î.ˆ¹µr±.
0001E240  F3 65 EB 88 91 70 F9 E7 09 9A EE CB 58 05 AD 97  óe눑pùç.šîËX.­—
0001E250  E3 6E B3 6D 5F 78 C9 CD FE CB 85 C0 43 50 06 8D  ãn³m_xÉÍþË…ÀCP..
0001E260  0F B6 50 6E 1A 36 30 8C 8E 25 9B FA 32 26 6B 6A  .¶Pn.60ŒŽ%›ú2&kj
0001E270  04 02 72 61 C0 A9 F3 65 A1 B4 B5 55 0C D4 E7 C7  ..raÀ©óe¡´µU.ÔçÇ
0001E280  F1 52 3B F2 46 B3 E8 69 00 00 00 00 00 00 00 00  ñR;òF³èi........
0001E290  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
........
0001E3C0  00 60 37 3A 00 00 00 00 00 02 00 00 00 00 00 00  .`7:............
........
0001E3F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

[fzabkar]

The capacity of your drive (WD5000BMVW-11AMCS0, 500GB My Passport Essential) is 0x3A386030 LBAs (max LBA = 0x3A38602F).

Offset 0x1E3C0 in MOD 38 appears to be related to the drive's capacity in some way (0x3A376000). Perhaps this is the size of the visible user area, and/or the location of the SmartWare VCD. That's where I would start looking for the key sector.

[alimeci]

hi
i am very sorry
but i not know what do i do !!!!!

[loki]

The capacity of your drive (WD5000BMVW-11AMCS0, 500GB My Passport Essential) is 0x3A386030 LBAs (max LBA = 0x3A38602F).

Offset 0x1E3C0 in MOD 38 appears to be related to the drive's capacity in some way (0x3A376000). Perhaps this is the size of the visible user area, and/or the location of the SmartWare VCD. That's where I would start looking for the key sector.

0x3A376000 is the start of the VCD
0x3A386030 is the end of the VCD
Sector the key is stored on should be 0x3A385020

I know that on MyBook Essentials when a user changes their SmartWare Password is does not update the SA Mod but it does on My Passport Essentials


Loki

[alimeci]

this h.d.d no password
i doine clone onto h.d.d 3.5
now no data recovery

[loki]

this h.d.d no password
i doine clone onto h.d.d 3.5
now no data recovery

As your drive is a My Passport Essential & as you have said previously "bridge chip=Symwave" their is encryption being used.
In your Mod38 you uploaded their is the encryption key at offset 00123392 / 0001E200 depending on your view setting in winhex.

Mod38 is not just zeros as you previously posted.

Even if the smartware password has not been set there is still a encryption/decryption key created & used.


Loki

[fzabkar]

I know that on MyBook Essentials when a user changes their SmartWare Password is does not update the SA Mod but it does on My Passport Essentials

If that is the case, then wouldn't restoring the key sector from the SA defeat the password?

In fact my experience is the opposite. An Oracle forum member changed the SmartWare password in a 3TB My Book Essentials and observed an identical change to both the key sector and SA MOD 25. Perhaps earlier firmware versions were less secure?

[loki]

I know that on MyBook Essentials when a user changes their SmartWare Password is does not update the SA Mod but it does on My Passport Essentials

If that is the case, then wouldn't restoring the key sector from the SA defeat the password?quote]

Yes it would - my tests were done on each 1Tb & 2Tb drives.

In fact my experience is the opposite. An Oracle forum member changed the SmartWare password in a 3TB My Book Essentials and observed an identical change to both the key sector and SA MOD 25. Perhaps earlier firmware versions were less secure?

I have not tested the latest drives but that would make it like the My Passports were & would be more secure
Key use to start with WDv1 but on this OP Mod38 it's WMYSôZ


Loki

[fzabkar]

Here is the thread I was referring to:

http://malthus.zapto.org/viewtopic.php? ... 4462#p4460

The OP and I explored the possibility of defeating the SmartWare password by restoring the key from MOD 25. After examining before-and-after dumps of the VCD area, we found that two sectors were changed after setting the password. MOD 25 had also changed to match the new key sector. The drive was a WD30EZRX-00DC0B0 with a manufacture date of 11-10-2012. The drive in this thread has a manufacture date of 06-06-2011. IIUC, you appear to be saying that at least some earlier SmartWare versions were insecure in this regard.

[alimeci]

hi
now what do i do ?

[alimeci]

hi
what is it VCD ?

[loki]

hi
what is it VCD ?

Virtual CD drive

Loki

[loki]

hi
what is it VCD ?

You need to see if that the key what was found in mod38 matches whats on the correct sector on hdd.

Loki

[alimeci]

hi
how write to sector 976770435 madule 38 ?
tnx

[alimeci]

You need to see if that the key what was found in mod38 matches whats on the correct sector on hdd.

i see was key.and me find key
how key write to sectors ?

[yudi]

friend,
i have problem decrypt wd 1tb, usb3.
I was convert to sata, and sucsesfull clon to another good hdd.
usualy for Rom size 256 kb, i was sucsecful decrypted used mybook adapter. but for the rom 512, I don't know method to show data.
maybe u can explain how methods to recovery . Please PM, i will pay for the spesifik informations.

JM chip=Symwave
Model : WDC WD10TMVW-11ZSM1
Serial : WD-WXL1E9002717
Firmware : 01.0101
Capacity: 931,51 GB (1 953 525 168)

Techno mode key
Techno mode key......................... : Ok

RAM:
HDD Info reading........................ : Ok
Heads number............................ : 6
Cyl Count............................... : 256

Zone allocation table................... : Ok
SA SPT.................................. : 1364

ROM:
ROM reading............................. : Ok
ROM Data size........................... : 512 Kb
ROM version............................. : 03.8CB
ROM generation.......................... : 03.8CB
Link table version...................... : 02.83.
Consolidated ROM version................ : 0003008C

ROM Modules:
Flash ROM dir reading................... : Ok
Modules directory address............... : FIXED
SA regions address...................... : by default

SA Translator loading................... : Ok

Heads configuration..................... : by map
Heads number............................ : 6
Heads number in use..................... : 6
Switched off heads...................... : No
Heads map............................... : 0,1,2,3,4,5
ROM Firmware version.................... : 0003008C

Service area:
SA dir reading (ID)..................... : Ok
SA Access............................... : Copy 0,Copy 1

Configuration reading................... : Ok
Master Password......................... : has not been set
User Password........................... : has not been set


modul 38
0x1E200 57 4D 59 53 62 E3 01 F8 00 00 00 00 02 00 00 00 WMYSbã.ø........
0x1E210 2A 08 82 35 17 76 0C 33 B9 6D 45 53 85 C1 8D EB *.‚5.v.3¹mES…Áë
0x1E220 61 78 83 F1 A4 66 A4 08 EF 8A 2C 13 AC 68 CF 87 axƒñ¤f¤.ïŠ,.¬hχ
0x1E230 96 04 A2 FA 33 38 07 C5 15 88 B9 B5 72 B1 03 20 –.¢ú38.Å.ˆ¹µr±.
0x1E240 F3 65 EB 88 91 70 F9 E7 09 9A EE CB 58 05 AD 97 óe눑pùç.šîËX.­—
0x1E250 E3 6E B3 6D 5F 78 C9 CD FE CB 85 C0 43 50 06 8D ãn³m_xÉÍþË…ÀCP.
0x1E260 0F B6 50 6E 1A 36 30 8C 8E 25 9B FA 32 26 6B 6A .¶Pn.60ŒŽ%›ú2&kj
0x1E270 04 02 72 61 C0 A9 F3 65 A1 B4 B5 55 0C D4 E7 C7 ..raÀ©óe¡´µU.ÔçÇ
0x1E280 F1 52 3B F2 46 B3 E8 69 ñR;òF³èi


0x1E3C0 00 68 6F 74 00 00 00 00 00 02 00 00 00 00 00 00 .hot............