Hi

WD 3.5" WD20EACS-11BHUB0 2TB Hard disk inside a WD external casing.

I managed to clone the hard disk.

But now when I try to scan I get the following errors for all sectors

Read disk WDMy Book 11301016 at position 46849536 failed after 1 attempts. The media is write protected (19)
Read disk WDMy Book 11301016 at position 46856704 failed after 1 attempts. The media is write protected (19)

The user did not set any password for the hard disk.

Are you scanning using the USB bridge, or using the drive alone directly connected via SATA?

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners

1. How did you clone the hard drive?
2. What model is the destination drive?
3. If you are using the USB bridge, are you sure it is functioning?

_________________
Luke
Recovery Force Data Recovery

_________________
A backup a day keeps DR away.

I am using USB bridge.

When I scan directly using SATA, I see the following in R-studio after the r-studio scan complete

1. How did you clone the hard drive?
++ I used MRT Pro (http://en.mrtlab.com/)

2. What model is the destination drive?
++ Toshiba 4TB MD04ACA400

3. If you are using the USB bridge, are you sure it is functioning?
++ I am not sure whether USB bridge is still good or not

Is this hard disk hardware encrypted using USB bridge?

Do we need a working USB bridge to recover the data ? or can we recover the data directly from SATA connection?

Use MRT Pro to change the LBA of the destination drive to match the LBA of the original drive (as shown when the drive is directly connected, not as it shows through the USB bridge).

There's an encryption key sector near the end of the drive, but if the LBA is different the bridge won't look in the right place and it will show as "Write Protected" because it can't decrypt the data.

And yes, you need to use the bridge to decrypt in most cases. Though occasionally we do find some that aren't encrypted.

Hope this helps.

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company

Thank you, I will try and update you

OP could have removed the drive from the case without mentioning it.



You must use HPA to cut down destination size to match the source.
Also, we've seen trouble with destination drives when they're not WD. If you can source a 2TB WD that would be better.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners