Advanced Data Recovery Tutorial of Encrypted WD USB Drives

Advanced Data Recovery Tutorial of Encrypted WD USB Drives

Preparation work for using the function:

1. Since the first user sector of a normally-used drive has a specified character “55AA” in the end, so the program will consider that the right password has been guessed if this character appears in the first user sector of the encrypted HDD when decrypting. Therefore, there should be the option “Load HDD first sector” when using this function.

2. What’s more, when WD Security is trying to decrypt the data, “EDED” data must be obtained. Then a new KEY will be generated combined with EDEK data and user password and it will be used to decrypt the correct data out. Therefore, there should be the option “Load EDEK file” when using this function.

3. Both the first user sector and EDEK can be obtained from the drive, but the needed first user sector should be the decrypted original one. Only in this way, can we get the correct data of the specified character when decrypting. We can use the way of converting USB PCB board to SATA PCB board to get the data and then save as a file. Then when using this function, we can select load from file, but this way will be more complex.

Guessed scope settings:

1. Explanation of character location: for example, if the password is “abcdefg”, the address of Character “a” is 0, so the address of Character “d” is 3.

2. Setting rules of guessed scope: for example, if the password is “abcdefg”, and we can only remember the first three characters, so we can input “abc” in “Fill password background characters with (hex)” and input “3” in “Starting address of exhaustion character” and fill “4” in “Exhaustion character number”. If we forget “abc” but remember “defg”, then we need to leave the first three characters blank and input “defg” in “Fill password background characters with (hex)” and input “0” in “Starting address of exhaustion character” and fill “3” in “Exhaustion character number”.

3. What we have mentioned above is the starting address and length of the guessed password, and the filling requirements of the guessed character. Next we are going to set the characters that may appear in the guessed password. In the panel list, all the alphabets, numbers and specific characters are included and selected by default. If the guessed password only includes numbers or minuscules, then other characters can be cleared and we just need to select numbers or minuscules. If some specified characters are remembered, they can be filled in “specified character” and separated with coma, such as “1,2,a,b”; then click to select “specified character” to make these characters selected in the list.

Multi-machine and multi-task settings:

If only one machine is needed and no special requirements, we can directly use the default settings.

For the task amount of current machine, it is better to use the default number which is set according to the CPU core number. If the number is less than the default number, it will decrease the efficiency. And if the number is more than the default number, it will bring little benefits either. However, if we do not want this function to occupy so much CPU resources, we can decrease the number. If there is just one machine, then the number needs to be consistent with the actual number.
When we need to retrieve the password with more than one machine simultaneously, we can refer to the way below:

If we need eight tasks and two machines to work at the same time, the “Total task amount of machine” should be filled with “8” for both of the two machines. At this time, if both the two machines are assigned with four tasks, “Stating number of current machine task” should be filled with “0” for the first machine and “4” for the second machine.

If the “Total task amount of current machine” is “2” for the first machine, the “Stating number of current machine task” should be filled with “2” and the “Total task amount of current machine” for the second machine should be “6”.

Rules: when the task of more than one machine is being set, “Total task amount of machine” should be consistent for every machine. “Stating number of current machine task” of the machine behind is the sum of the total task amount of all the machines.

Viewing, saving and loading progress:

It may take a long time to do the task of guessing a password. Therefore, viewing progress can let us know the progress. Saving and loading progress can make it possible to stop the task and save the task progress when it is not convenient for us. And when we need to continue the task, we can load the progress aga

 
Domain name: www.mrtlab.com | | Telephone: +86-27-82621261 | Terms of use
MRT data recovery website,provides professional HDD firmware repair and data recovery technical resources!
Copyright 2003-2014 Powered By MrtLab