MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 10 posts ] 
Author Message
 Post subject: WD5000BMVW USB disk
PostPosted: September 3rd, 2014, 10:21 
Offline

Joined: March 21st, 2013, 7:41
Posts: 3
Location: Potugal
Hello,

I have a WD disk with USB interface with broken heads (WD5000BMVW-11AMCS2). When I was looking for a donor, the information of the donor includes the micro jogs. I do not have a way to read the microjogs on my broken disk.

Does someone can explain how this microjogs parameters works?

I always have problems changing and getting compatible heads for WD drives.

Thanks & Regards


Top
 Profile  
 
 Post subject: Re: WD5000BMVW USB disk
PostPosted: September 3rd, 2014, 12:42 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
Here is a good explanation of microjogs:
http://malthus.zapto.org/viewtopic.php?f=3&t=24#p1721

See also http://www.deepspar.com/blog/Donor-Drive.html

Quote:
... taking Western Digital drives as an example, several vendor-specific parameters located in the ROM and RAM of the drive help in finding a donor with better compatibility:

    Head map
    Microjog adaptives
    Drive information table
    Firmware release

Unfortunately, none of these parameters are located on a drive’s label. However, you can retrieve them using some data recovery tools.


An HDD Oracle forum member has written a tool to extract important donor matching data from MOD 47.

See http://malthus.zapto.org/viewtopic.php?f=59&t=1009

MOD 0A and MOD 0D contain "DCM", head map and firmware version information, including head and media type.

If you could upload your drive's ROM, then we could extract the relevant data.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: WD5000BMVW USB disk
PostPosted: September 4th, 2014, 4:28 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3547
Location: Greece
This website is blocked by most antiviruses because it contains dangerous content.

Quote:
ESET SMART SECURITY
Access denied
Access to the web page was blocked.
http://malthus.zapto.org/viewtopic.php?f=59&t=1009

The web page is on the list of websites with potentially dangerous content.


_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: WD5000BMVW USB disk
PostPosted: September 4th, 2014, 4:45 
Offline
User avatar

Joined: August 13th, 2008, 13:10
Posts: 811
Location: World
do not worry the webpage is safe.

try to desctivate temporally NOD32 and then you will can access.


Top
 Profile  
 
 Post subject: Re: WD5000BMVW USB disk
PostPosted: September 4th, 2014, 5:26 
Offline

Joined: August 3rd, 2012, 7:47
Posts: 396
Location: slovenija
probably only nod(not on duty) block this site :)


Top
 Profile  
 
 Post subject: Re: WD5000BMVW USB disk
PostPosted: September 4th, 2014, 6:26 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
http://google.com/safebrowsing/diagnost ... ddguru.com

Quote:
Safe Browsing
Diagnostic page for hddguru.com

What is the current listing status for hddguru.com?

This site is not currently listed as suspicious.

What happened when Google visited this site?
Of the 456 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-09-03, and the last time suspicious content was found on this site was on 2014-09-03.

Malicious software includes 38 trojan(s), 11 virus.

This site was hosted on 2 network(s) including AS36351 (SOFTLAYER), AS3800 (IONITY).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, hddguru.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

Yes, this site has hosted malicious software over the past 90 days. It infected 0 domain(s), including .

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: WD5000BMVW USB disk
PostPosted: September 4th, 2014, 7:23 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3903
Location: Adelaide, Australia
a lot of tools created for drive level and system level modification show as viruses.. Many homebrew people use packers and exe protectors to protect their work, but not always commercial ones. They can be the same as what is used to pack malware.

You should scan any file you download, "trusted" site or not. as well as have browsing protection for drive by downloads as a matter of course.


Top
 Profile  
 
 Post subject: Re: WD5000BMVW USB disk
PostPosted: September 4th, 2014, 9:04 
Offline

Joined: December 8th, 2010, 11:37
Posts: 738
Location: Ottawa, Canada
Thanks, fzabkar for that link. Never heard of it before; it should come in very handy.

For Northwind's and the OP's benefit, here are the results for the link you gave re. microjogs: http://google.com/safebrowsing/diagnost ... =59&t=1009

Quote:
Safe Browsing
Diagnostic page for malthus.zapto.org

What is the current listing status for malthus.zapto.org?
This site is not currently listed as suspicious.

What happened when Google visited this site?
Google has not visited this site within the past 90 days.

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, malthus.zapto.org did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

_________________
Sabo Computer Repairs & Data Recovery


Top
 Profile  
 
 Post subject: Re: WD5000BMVW USB disk
PostPosted: September 4th, 2014, 9:50 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3547
Location: Greece
fzabkar wrote:
http://google.com/safebrowsing/diagnostic?site=hddguru.com

Quote:
Safe Browsing
Diagnostic page for hddguru.com

What is the current listing status for hddguru.com?

This site is not currently listed as suspicious.

What happened when Google visited this site?
Of the 456 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-09-03, and the last time suspicious content was found on this site was on 2014-09-03.

Malicious software includes 38 trojan(s), 11 virus.

This site was hosted on 2 network(s) including AS36351 (SOFTLAYER), AS3800 (IONITY).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, hddguru.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

Yes, this site has hosted malicious software over the past 90 days. It infected 0 domain(s), including .


So?

Quote:
Safe Browsing
Diagnostic page for google.com

What is the current listing status for google.com?
This site is not currently listed as suspicious.

Part of this site was listed for suspicious activity 19 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 5143305 pages we tested on the site over the past 90 days, 718 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2014-09-03, and the last time suspicious content was found on this site was on 2014-09-03.
Malicious software includes 301 trojan(s), 262 scripting exploit(s), 194 exploit(s). Successful infection resulted in an average of 2 new process(es) on the target machine.

Malicious software is hosted on 152 domain(s), including abu-farhan.com/, websitecom.us/, batangyagit.com/.

181 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including trackcash.org/, javaistlus.com/, tracksite.us/.

This site was hosted on 3 network(s) including AS36040 (YOUTUBE), AS16509 (AMAZON-02), AS15169 (GOOGLE).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, google.com appeared to function as an intermediary for the infection of 98 site(s) including lesblogsimmobiliers.com/, hathmaluwa.org/, dinhcaoauto.info/.

Has this site hosted malware?
Yes, this site has hosted malicious software over the past 90 days. It infected 28 domain(s), including joomfa.org/, burguscircus.free.fr/, beljews.info/.

Next steps:
Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: WD5000BMVW USB disk
PostPosted: September 4th, 2014, 17:31 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
HaQue wrote:
a lot of tools created for drive level and system level modification show as viruses.. Many homebrew people use packers and exe protectors to protect their work, but not always commercial ones. They can be the same as what is used to pack malware.

Even legitimate commercial packers can fall foul of certain AV products.

For example, SeDiv will trigger false positives in several AV products.

viewtopic.php?t=11980&start=

The reason is that it has been packed with ORiEN.

Here is the virustotal report:
https://www.virustotal.com/en/file/77c4 ... 260805983/

Code:
AVG    Win32/PolyCrypt
Authentium    W32/Heuristic-210!Eldorado
Comodo    UnclassifiedMalware
F-Prot    W32/Heuristic-210!Eldorado
Fortinet    PossibleThreat
Jiangmin    Trojan/PSW.LdPinch.edn
McAfee+Artemis    Artemis!692F7832581F
Norman    W32/Packed_Orien.A
Prevx    Medium Risk Malware
Sophos    Mal/Packer
Sunbelt    Backdoor.Win32.Hupigon.mrv
eSafe    Suspicious File


Nowadays SeDiv is delivered as a password protected RAR, most likely to circumvent misdetection by AV products.

http://sediv2008.narod.ru/Easy3.9Passwo ... 567890.rar

I have been told by Spildit that he runs his software downloads inside a sandbox. If the software is malicious, then its damage will hopefully be contained by the sandbox.

http://www.sandboxie.com

_________________
A backup a day keeps DR away.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 10 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 204 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group