MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 29 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: Recover From My Book Duo
PostPosted: September 22nd, 2016, 12:51 
Offline

Joined: September 23rd, 2015, 9:25
Posts: 47
Location: Italy
I have a WD My Book Duo WDBLWE0080JCH with 2 x 4TB Red Drive. It's original configured in RAID1 but for a mistake i force reconfigure it (again to RAID1) from WD Utility. After 20 second configuration complete but data partition is empty. Ok, i try with R-studio like other disk after formatting but absolute nothing is found. Check with hex editor seem that is all garbage on it except first some and end sector, take apart disk garbage is identical on both disk. Is encrypted but with different key? I try to put 2 new blank disk inside MyBook and load some sample data, every time i reconfigure raid and write sample data again is written different, is possible that encryption key change every time ? there is no unique key stored in firmware ? there is any chance to recover original data or is all lost?
Thanks


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 22nd, 2016, 14:17 
Offline
User avatar

Joined: April 3rd, 2011, 0:19
Posts: 2003
Location: Providence, RI
I'm pretty sure R-Studio will be able to handle this case, but you can't have it still connected in a RAID 1 throught the unit when you recover it. You'll need to individually connect the drives to the computer so R-Studio can access each drive independantly, then you'll need to determine the correct RAID parameters manually to recover the data.

For a pro, this usually will take about 10-20 minutes. Doing it the first time, may take a few hours to figure it out.

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 22nd, 2016, 16:19 
Offline

Joined: September 23rd, 2015, 9:25
Posts: 47
Location: Italy
I try with rstudio but if data is encoded before write to disk is already possibile? With disk direct to data port with rstudio hex seems all random data...


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 22nd, 2016, 17:38 
Offline

Joined: March 30th, 2016, 12:29
Posts: 127
Location: Germany
Can you please show us sector 0 and sector 1?


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 23rd, 2016, 3:03 
Offline

Joined: September 23rd, 2015, 9:25
Posts: 47
Location: Italy
sure, this is sector 0 and sector 1 plus sector 20480 the first seem contains data


Attachments:
File comment: Hdd 1 Sector 20480
hdd1s20480.png
hdd1s20480.png [ 145.9 KiB | Viewed 17447 times ]
File comment: Hdd 1 Sector 1
hdd1s1.png
hdd1s1.png [ 153.35 KiB | Viewed 17447 times ]
File comment: Hdd 1 Sector 0
hdd1s0.png
hdd1s0.png [ 154.81 KiB | Viewed 17447 times ]
File comment: Hdd 0 Sector 20480
hdd0s20480.png
hdd0s20480.png [ 163.11 KiB | Viewed 17447 times ]
File comment: Hdd 0 Sector 1
hdd0s1.png
hdd0s1.png [ 153.71 KiB | Viewed 17447 times ]
File comment: Hdd 0 Sector 0
hdd0s0.png
hdd0s0.png [ 151.85 KiB | Viewed 17447 times ]
Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 23rd, 2016, 3:15 
Offline

Joined: March 7th, 2009, 12:43
Posts: 1091
Location: Angel Data Recovery
Once you reconfigured hash changed , and it is now encrypted different way. There is a chance if you saved SA from one of two drives before doing reconfiguration. Did you?

_________________
Angel Data Recovery


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 23rd, 2016, 3:24 
Offline

Joined: September 23rd, 2015, 9:25
Posts: 47
Location: Italy
no, not save. from actual data on disk there is no way right, maybe also to prefessional service ?


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 23rd, 2016, 5:25 
Offline

Joined: March 30th, 2016, 12:29
Posts: 127
Location: Germany
maxisvk wrote:
no, not save. from actual data on disk there is no way right, maybe also to prefessional service ?

If you're lucky there could be a way from actual data only.

Can you please search for the following signatures (in Hex Format) at the end of the drives:
First: 57 44 76 31
Second: 53 59 4D 57
3rd: 53 49 6E 45
4th: 57 44 01 14


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 26th, 2016, 3:32 
Offline

Joined: September 23rd, 2015, 9:25
Posts: 47
Location: Italy
not found this string, at end of disk i found wd unlock partition


Attachments:
wdunlocker.png
wdunlocker.png [ 105.35 KiB | Viewed 17339 times ]
Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 26th, 2016, 13:59 
Offline

Joined: March 30th, 2016, 12:29
Posts: 127
Location: Germany
maxisvk wrote:
not found this string, at end of disk i found wd unlock partition

The HEX-String must be there somewhere (in my opinion) but maybe I'm wrong.
I see that 4 TB are a large space for searching... but the signatures should be there.
Did you search them as a hex values?

If you cannot find them... you could try to save all modules with hddsupertool.


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 26th, 2016, 14:02 
Offline

Joined: March 30th, 2016, 12:29
Posts: 127
Location: Germany
Can you please show us the label of the HDDs?


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 26th, 2016, 14:24 
Offline
User avatar

Joined: April 3rd, 2011, 0:19
Posts: 2003
Location: Providence, RI
Wow, most the duo models I've seen didn't actually have the encryption enabled. I guess the newer ones are actually using it.

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 26th, 2016, 15:51 
Offline

Joined: March 30th, 2016, 12:29
Posts: 127
Location: Germany
maxisvk wrote:
not found this string, at end of disk i found wd unlock partition

You need a HEX-Editor... the sector view should look similar to the pictures of sector 0 and 1 you have uploaded.
Not like the picture of R-Studio you have shown.
Then you have to go nearly to the end of the drive (>90%) and search for the mentioned hex values.

Maybe someone here knows the exact locations of the key sector on a 4 TB model.
So you would not have to search for the signatures, you could jump to the correct sector straight forward.

You only need to show the correct sector, like you showed sector 0 and sector 1.
But this time the sector number is much higher than 0 or 1, it should be 7730941132 or higher.

I hope I have explained it simple and understandable :)


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 26th, 2016, 16:13 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16955
Location: Australia
Why not begin at sector 7813974016 and save all the sectors from this point until the end of the drive? Then upload the BIN file as a ZIP. Hopefully the BIN will contain the key sector, if it exists.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 27th, 2016, 7:24 
Offline

Joined: September 23rd, 2015, 9:25
Posts: 47
Location: Italy
fzabkar wrote:
Why not begin at sector 7813974016 and save all the sectors from this point until the end of the drive? Then upload the BIN file as a ZIP. Hopefully the BIN will contain the key sector, if it exists.

attached, also i search again HEX string from 90%, before i try only on last 1%


Attachments:
Region 0 on WDC WD40EFRX-68WT0N0 82.7z [2.47 MiB]
Downloaded 516 times
Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 27th, 2016, 9:32 
Offline
User avatar

Joined: April 3rd, 2011, 0:19
Posts: 2003
Location: Providence, RI
That looks to me like it's just the SmartWare partition. Is the drive direct SATA connected?

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 27th, 2016, 10:34 
Offline

Joined: September 23rd, 2015, 9:25
Posts: 47
Location: Italy
data-medics wrote:
Is the drive direct SATA connected?

Yes


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 27th, 2016, 16:40 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16955
Location: Australia
If you clone the first 10GB, say, of your patient drives to your new drives, and then install the new drives in your Duo, do you see the same data patterns via USB? If so, then this would suggest that the Duo may not be looking for a key sector on your drive(s), and that this key may be stored elsewhere.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 28th, 2016, 11:54 
Offline

Joined: September 23rd, 2015, 9:25
Posts: 47
Location: Italy
fzabkar wrote:
If you clone the first 10GB, say, of your patient drives to your new drives, and then install the new drives in your Duo, do you see the same data patterns via USB? If so, then this would suggest that the Duo may not be looking for a key sector on your drive(s), and that this key may be stored elsewhere.


ok,
1) take disk out from mybook duo
2) clone first 10gb of disk1 to a new one
3) put disk1 on mybook duo and check data pattern (hex with rstudio) on random sector about at 1gb, 2gb, 3gb from start
4) put new cloned disk on mybook duo and check data pattern (hex with rstudio) on random sector about at 1gb, 2gb, 3gb from start
-> data pattern is completly different


Top
 Profile  
 
 Post subject: Re: Recover From My Book Duo
PostPosted: September 28th, 2016, 12:31 
Offline

Joined: March 30th, 2016, 12:29
Posts: 127
Location: Germany
Can you please show us the label of the HDDs from my book duo?


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 29 posts ]  Go to page 1, 2  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 33 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group