If I’m not unrealistic, then who will take on that burden?
Yes that was my point exactly.
Sorry for being late to this unfortunate party, but found yesterday that my MBLD drive has been wiped.
I will be removing the drives and testing a number of free recovery software’s and will post if any are successful.
I would like to think that WD would issue free software and a new firmware so that we are not left with paper weights.
I think at best WD will do an emergency firmware and close the hole.
But we will restore the data ourselves.
I did it, see above.
What was your method of connecting drive to pc?
I decompiled the nttpd binary to C. I’m sure it’s missing functions, but it’s the best result I’ve got yet.
Take a look:
If you are used to programm in that language, comment here if you find it’s behaviour.
Thank you Churkin.
I will try R-Studio first it was one of the softwares that I had downloaded ready to try.
I have 2 separate powered SATA to USB adapters - will this be OK or do I need a dual dock?
in a stationary PC, both disks were connected to free SATA.
I think two adapters will work.
After reading into it I think this will be the route to try for me. Mines been running since Saturday evening on Diskinternals partition recovery. I think by later today it would have completed. Ill see what results come back but if I’m not happy then I will give R Studio a try after reading in there site.
A thanks to Churkin for mentioning it. I don’t mind paying about 50 if it gets a lot of my family’s data back
I wouldn’t know unless I send it off for assessment which would cost me £150 to find out.
That was last updated 4 days ago. You’ve got no updates for 4 days on this?
I received a quote from a data recovery firm USD 200 to recover my data. Any questions I should ask? I remember the last time my WD Passport failed I had the data recovered but there was some corruption. Any tips on what I should be asking the vendor?
my HD was restarting/rebooting randomly at night before this. What triggered my suspicions was that the ip address for the device kept changing. I should have just shutdown the device there and then and migrated everything across I assumed the reboot was some system generated task rather than an outside party triggering a restart
why would I want to re-use the HDD if there is this vulnerability? Or do you means just as an HDD without the NAS?
yeah the recovery wizard is enough - but it’s paid commercial software
Looking at the apache logs, the last IP address to attempt to access my drive on a day that I was not using it was 220.127.116.11. The access occurred 15 seconds before factoryRestore.sh; at which time Apache received SIGTERM and shutdown. It’s worth pointing out that this drive has been a target for some time as there are many access attempts from IP’s all over the world. However, the one above is the last one.
[Wed Jun 23 16:18:11 2021] [error] [client 18.104.22.168] client denied by server configuration: /var/www/UI
[Wed Jun 23 16:18:11 2021] [error] [client 22.214.171.124] File does not exist: /var/www/Admin/webapp/errordocs
[Wed Jun 23 16:18:12 2021] [error] [client 126.96.36.199] script ‘/var/www/Admin/webapp/index.php’ not found or unable to stat
[Wed Jun 23 16:18:12 2021] [error] [client 188.8.131.52] File does not exist: /var/www/Admin/webapp/errordocs
[Wed Jun 23 16:18:13 2021] [error] [client 184.108.40.206] script ‘/var/www/Admin/webapp/index.php’ not found or unable to stat
[Wed Jun 23 16:18:13 2021] [error] [client 220.127.116.11] File does not exist: /var/www/Admin/webapp/errordocs
factoryRestore.sh: begin script:
[Wed Jun 23 16:18:28 2021] [notice] caught SIGTERM, shutting down
Hey folks, not sure if anyone has seen the latest article from Ars Technica, but it seems worse than we first thought:
Just buy one of these, open your MBL take out the drive and put it in. Call it done.