All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 40 posts ]  Go to page Previous  1, 2
Author Message
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 5th, 2014, 13:15 
Offline

Joined: December 5th, 2011, 5:38
Posts: 1562
Location: Italy
Does your mod 38 contain a key or it's all zero?
If is all zero, and also mod 25 has only zero, then i think your drive hasn't any encryption.

alimeci wrote:
now what do i do by madule 38?

well i don't know...
maybe someone more expert then me can tell you, but if you want that someone helps you then you have to upload firmware resources of your drive.

_________________
My firmware database:
https://mega.nz/folder/O01DkBRI#MxP2J6ZNqXDcrX40I8MoQQ


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 5th, 2014, 13:53 
Offline

Joined: September 15th, 2011, 9:56
Posts: 42
Location: company sepid
how upload frimware?


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 5th, 2014, 16:43 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 14945
Location: Australia
alimeci wrote:
how upload frimware?

"Attach a picture or file"

"Upload attachment"

"If you wish to attach one or more files enter the details below."

"Choose"

"Add the file"

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 6th, 2014, 6:10 
Offline

Joined: September 15th, 2011, 9:56
Posts: 42
Location: company sepid
hi
this is frimware


Attachments:
Modules.zip [12.84 MiB]
Downloaded 371 times
Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 6th, 2014, 6:36 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 14945
Location: Australia
MOD 38 has your key sector.

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0001E200  57 4D 59 53 F4 5A 01 F8 00 00 00 00 02 00 00 00  WMYSôZ.ø........
0001E210  65 BC 04 3C 5C 76 2C 8A D3 A0 7E EF 63 B8 46 82  e¼.<\v,ŠÓ ~ïc¸F‚
0001E220  01 C7 D1 05 43 D0 45 67 D8 16 4C BD C2 1B 9D F7  .ÇÑ.CÐEgØ.L½Â..÷
0001E230  F9 8B E0 C1 41 E2 23 EE 15 88 B9 B5 72 B1 03 20  ù‹àÁAâ#î.ˆ¹µr±.
0001E240  F3 65 EB 88 91 70 F9 E7 09 9A EE CB 58 05 AD 97  óe눑pùç.šîËX.­—
0001E250  E3 6E B3 6D 5F 78 C9 CD FE CB 85 C0 43 50 06 8D  ãn³m_xÉÍþË…ÀCP..
0001E260  0F B6 50 6E 1A 36 30 8C 8E 25 9B FA 32 26 6B 6A  .¶Pn.60ŒŽ%›ú2&kj
0001E270  04 02 72 61 C0 A9 F3 65 A1 B4 B5 55 0C D4 E7 C7  ..raÀ©óe¡´µU.ÔçÇ
0001E280  F1 52 3B F2 46 B3 E8 69 00 00 00 00 00 00 00 00  ñR;òF³èi........
0001E290  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
........
0001E3C0  00 60 37 3A 00 00 00 00 00 02 00 00 00 00 00 00  .`7:............
........
0001E3F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 6th, 2014, 6:59 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 14945
Location: Australia
The capacity of your drive (WD5000BMVW-11AMCS0, 500GB My Passport Essential) is 0x3A386030 LBAs (max LBA = 0x3A38602F).

Offset 0x1E3C0 in MOD 38 appears to be related to the drive's capacity in some way (0x3A376000). Perhaps this is the size of the visible user area, and/or the location of the SmartWare VCD. That's where I would start looking for the key sector.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 6th, 2014, 11:03 
Offline

Joined: September 15th, 2011, 9:56
Posts: 42
Location: company sepid
hi
i am very sorry
but i not know what do i do !!!!! :?:


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 6th, 2014, 11:52 
Offline

Joined: July 7th, 2010, 4:45
Posts: 926
Location: UK
fzabkar wrote:
The capacity of your drive (WD5000BMVW-11AMCS0, 500GB My Passport Essential) is 0x3A386030 LBAs (max LBA = 0x3A38602F).

Offset 0x1E3C0 in MOD 38 appears to be related to the drive's capacity in some way (0x3A376000). Perhaps this is the size of the visible user area, and/or the location of the SmartWare VCD. That's where I would start looking for the key sector.



0x3A376000 is the start of the VCD
0x3A386030 is the end of the VCD
Sector the key is stored on should be 0x3A385020

I know that on MyBook Essentials when a user changes their SmartWare Password is does not update the SA Mod but it does on My Passport Essentials


Loki


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 6th, 2014, 12:38 
Offline

Joined: September 15th, 2011, 9:56
Posts: 42
Location: company sepid
this h.d.d no password
i doine clone onto h.d.d 3.5
now no data recovery


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 6th, 2014, 13:13 
Offline

Joined: July 7th, 2010, 4:45
Posts: 926
Location: UK
alimeci wrote:
this h.d.d no password
i doine clone onto h.d.d 3.5
now no data recovery


As your drive is a My Passport Essential & as you have said previously "bridge chip=Symwave" their is encryption being used.
In your Mod38 you uploaded their is the encryption key at offset 00123392 / 0001E200 depending on your view setting in winhex.

Mod38 is not just zeros as you previously posted.

Even if the smartware password has not been set there is still a encryption/decryption key created & used.


Loki


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 6th, 2014, 15:32 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 14945
Location: Australia
loki wrote:
I know that on MyBook Essentials when a user changes their SmartWare Password is does not update the SA Mod but it does on My Passport Essentials

If that is the case, then wouldn't restoring the key sector from the SA defeat the password?

In fact my experience is the opposite. An Oracle forum member changed the SmartWare password in a 3TB My Book Essentials and observed an identical change to both the key sector and SA MOD 25. Perhaps earlier firmware versions were less secure?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 6th, 2014, 16:18 
Offline

Joined: July 7th, 2010, 4:45
Posts: 926
Location: UK
fzabkar wrote:
loki wrote:
I know that on MyBook Essentials when a user changes their SmartWare Password is does not update the SA Mod but it does on My Passport Essentials

If that is the case, then wouldn't restoring the key sector from the SA defeat the password?quote]


Yes it would - my tests were done on each 1Tb & 2Tb drives.




fzabkar wrote:
In fact my experience is the opposite. An Oracle forum member changed the SmartWare password in a 3TB My Book Essentials and observed an identical change to both the key sector and SA MOD 25. Perhaps earlier firmware versions were less secure?


I have not tested the latest drives but that would make it like the My Passports were & would be more secure
Key use to start with WDv1 but on this OP Mod38 it's WMYSôZ


Loki


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 6th, 2014, 16:55 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 14945
Location: Australia
Here is the thread I was referring to:

http://malthus.zapto.org/viewtopic.php? ... 4462#p4460

The OP and I explored the possibility of defeating the SmartWare password by restoring the key from MOD 25. After examining before-and-after dumps of the VCD area, we found that two sectors were changed after setting the password. MOD 25 had also changed to match the new key sector. The drive was a WD30EZRX-00DC0B0 with a manufacture date of 11-10-2012. The drive in this thread has a manufacture date of 06-06-2011. IIUC, you appear to be saying that at least some earlier SmartWare versions were insecure in this regard.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 8th, 2014, 1:45 
Offline

Joined: September 15th, 2011, 9:56
Posts: 42
Location: company sepid
hi
now what do i do ?


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 8th, 2014, 12:06 
Offline

Joined: September 15th, 2011, 9:56
Posts: 42
Location: company sepid
hi
what is it VCD ?


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 8th, 2014, 12:30 
Offline

Joined: July 7th, 2010, 4:45
Posts: 926
Location: UK
alimeci wrote:
hi
what is it VCD ?


Virtual CD drive

Loki


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 8th, 2014, 12:43 
Offline

Joined: July 7th, 2010, 4:45
Posts: 926
Location: UK
alimeci wrote:
hi
what is it VCD ?



You need to see if that the key what was found in mod38 matches whats on the correct sector on hdd.

Loki


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 8th, 2014, 14:53 
Offline

Joined: September 15th, 2011, 9:56
Posts: 42
Location: company sepid
hi
how write to sector 976770435 madule 38 ?
tnx


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 9th, 2014, 2:02 
Offline

Joined: September 15th, 2011, 9:56
Posts: 42
Location: company sepid
You need to see if that the key what was found in mod38 matches whats on the correct sector on hdd.

i see was key.and me find key
how key write to sectors ?


Top
 Profile  
 
 Post subject: Re: Wd usb3 recovery!!
PostPosted: September 26th, 2014, 7:22 
Offline

Joined: July 29th, 2005, 3:29
Posts: 27
Location: Indonesia
friend,
i have problem decrypt wd 1tb, usb3.
I was convert to sata, and sucsesfull clon to another good hdd.
usualy for Rom size 256 kb, i was sucsecful decrypted used mybook adapter. but for the rom 512, I don't know method to show data.
maybe u can explain how methods to recovery . Please PM, i will pay for the spesifik informations.

JM chip=Symwave
Model : WDC WD10TMVW-11ZSM1
Serial : WD-WXL1E9002717
Firmware : 01.0101
Capacity: 931,51 GB (1 953 525 168)

Techno mode key
Techno mode key......................... : Ok

RAM:
HDD Info reading........................ : Ok
Heads number............................ : 6
Cyl Count............................... : 256

Zone allocation table................... : Ok
SA SPT.................................. : 1364

ROM:
ROM reading............................. : Ok
ROM Data size........................... : 512 Kb
ROM version............................. : 03.8CB
ROM generation.......................... : 03.8CB
Link table version...................... : 02.83.
Consolidated ROM version................ : 0003008C

ROM Modules:
Flash ROM dir reading................... : Ok
Modules directory address............... : FIXED
SA regions address...................... : by default

SA Translator loading................... : Ok

Heads configuration..................... : by map
Heads number............................ : 6
Heads number in use..................... : 6
Switched off heads...................... : No
Heads map............................... : 0,1,2,3,4,5
ROM Firmware version.................... : 0003008C

Service area:
SA dir reading (ID)..................... : Ok
SA Access............................... : Copy 0,Copy 1

Configuration reading................... : Ok
Master Password......................... : has not been set
User Password........................... : has not been set


modul 38
0x1E200 57 4D 59 53 62 E3 01 F8 00 00 00 00 02 00 00 00 WMYSbã.ø........
0x1E210 2A 08 82 35 17 76 0C 33 B9 6D 45 53 85 C1 8D EB *.‚5.v.3¹mES…Áë
0x1E220 61 78 83 F1 A4 66 A4 08 EF 8A 2C 13 AC 68 CF 87 axƒñ¤f¤.ïŠ,.¬hχ
0x1E230 96 04 A2 FA 33 38 07 C5 15 88 B9 B5 72 B1 03 20 –.¢ú38.Å.ˆ¹µr±.
0x1E240 F3 65 EB 88 91 70 F9 E7 09 9A EE CB 58 05 AD 97 óe눑pùç.šîËX.­—
0x1E250 E3 6E B3 6D 5F 78 C9 CD FE CB 85 C0 43 50 06 8D ãn³m_xÉÍþË…ÀCP.
0x1E260 0F B6 50 6E 1A 36 30 8C 8E 25 9B FA 32 26 6B 6A .¶Pn.60ŒŽ%›ú2&kj
0x1E270 04 02 72 61 C0 A9 F3 65 A1 B4 B5 55 0C D4 E7 C7 ..raÀ©óe¡´µU.ÔçÇ
0x1E280 F1 52 3B F2 46 B3 E8 69 ñR;òF³èi


0x1E3C0 00 68 6F 74 00 00 00 00 00 02 00 00 00 00 00 00 .hot............


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 40 posts ]  Go to page Previous  1, 2

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group