Hello everyone,
I have a job here I am struggling with and my lead engineer is at a loss as well. This drive came from a WD MyBook enclosure which has hardware encryption. I scanned the drive and got most of the data (hit a lot of bad sectors in the middle). The PC3K detected the encryption used and looks like it did its job, however, when viewed in a hex editor there is still a repeating pattern on the drive. I cannot see data or locate a file system. Out of the 5.9 billion sectors about 700k were unable to be read.

The customer says they had used WD software and provided the password password, but that seems to not work either. I tried almost every configuration in UFS explorer but to no avail. Is it possible there is still encryption on a software level and can maybe be decrypted using something like UFS Explorer? If so, does anyone know what kind of encryption the WD software would have used? Or is it that this is just irrecoverable?

Thanks in advance,
Omega

_________________
Remember, take your time. Be persistent. If you have doubts stop. Check, then proceed again.

Check sector size in DE - likely it is a 4096 config. Then search for volume.

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts

WD encryption is in almost no case unrecoverable.

I finally am able to see data. I had to use the USB adapter from the customer's external drive (WD My Book) in order to do so. There must be some other part to the encryption since the PC3K could not decrypt it. Currently saving the data off. Either way, thanks for your input guys.

_________________
Remember, take your time. Be persistent. If you have doubts stop. Check, then proceed again.

good
so it was actually 4K config, can you please confirm it ?

_________________
Data Recovery Pakistan

seems you tried to access some sectors in DE before applying the Decry. method within DE, thats why did not work.

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein

Use reallymine...It helped me sort a Jmicrons case.
Took 24Hrs on a AMD64 ubuntu setup....Did a good job....use icepacks to keep the temperatures low.

rgds
--

_________________
THERE IS ALWAYS HOPE TILL YOU LOSE IT.

@Mind - It was 4K if I recall correctly.
@Einstein - I created a map of the legend and re-ran the decryption on them there the execute task in the PC3K. No go. I also did a scan on the drive without decryption and still no go. So, in the end I used the USB. Worked fine. :/ Going to look more into this case and give any details that I find.

_________________
Remember, take your time. Be persistent. If you have doubts stop. Check, then proceed again.