Help! All data in mybook live gone and owner password unknown

:grinning_face_with_smiling_eyes::grinning_face_with_smiling_eyes:

1 Like

If I’m not unrealistic, then who will take on that burden?

1 Like

Yes that was my point exactly.

1 Like

Sorry for being late to this unfortunate party, but found yesterday that my MBLD drive has been wiped.
I will be removing the drives and testing a number of free recovery software’s and will post if any are successful.
I would like to think that WD would issue free software and a new firmware so that we are not left with paper weights.

1 Like

I think at best WD will do an emergency firmware and close the hole.
But we will restore the data ourselves.
I did it, see above.

1 Like

Hi Churkin
What was your method of connecting drive to pc?

I decompiled the nttpd binary to C. I’m sure it’s missing functions, but it’s the best result I’ve got yet.
Take a look:
https://bitbucket.org/aniolpages/workspace/snippets/axARjn/nttpd
If you are used to programm in that language, comment here if you find it’s behaviour.

1 Like

Thank you Churkin.
I will try R-Studio first it was one of the softwares that I had downloaded ready to try.
I have 2 separate powered SATA to USB adapters - will this be OK or do I need a dual dock?

in a stationary PC, both disks were connected to free SATA.

I think two adapters will work.

After reading into it I think this will be the route to try for me. Mines been running since Saturday evening on Diskinternals partition recovery. I think by later today it would have completed. Ill see what results come back but if I’m not happy then I will give R Studio a try after reading in there site.

A thanks to Churkin for mentioning it. I don’t mind paying about 50 if it gets a lot of my family’s data back

I wouldn’t know unless I send it off for assessment which would cost me £150 to find out.

That was last updated 4 days ago. You’ve got no updates for 4 days on this?

I received a quote from a data recovery firm USD 200 to recover my data. Any questions I should ask? I remember the last time my WD Passport failed I had the data recovered but there was some corruption. Any tips on what I should be asking the vendor?

my HD was restarting/rebooting randomly at night before this. What triggered my suspicions was that the ip address for the device kept changing. I should have just shutdown the device there and then and migrated everything across I assumed the reboot was some system generated task rather than an outside party triggering a restart

why would I want to re-use the HDD if there is this vulnerability? Or do you means just as an HDD without the NAS?

yeah the recovery wizard is enough - but it’s paid commercial software

Looking at the apache logs, the last IP address to attempt to access my drive on a day that I was not using it was 94.102.49.104. The access occurred 15 seconds before factoryRestore.sh; at which time Apache received SIGTERM and shutdown. It’s worth pointing out that this drive has been a target for some time as there are many access attempts from IP’s all over the world. However, the one above is the last one.

[Wed Jun 23 16:18:11 2021] [error] [client 94.102.49.104] client denied by server configuration: /var/www/UI
[Wed Jun 23 16:18:11 2021] [error] [client 94.102.49.104] File does not exist: /var/www/Admin/webapp/errordocs
[Wed Jun 23 16:18:12 2021] [error] [client 94.102.49.104] script ‘/var/www/Admin/webapp/index.php’ not found or unable to stat
[Wed Jun 23 16:18:12 2021] [error] [client 94.102.49.104] File does not exist: /var/www/Admin/webapp/errordocs
[Wed Jun 23 16:18:13 2021] [error] [client 94.102.49.104] script ‘/var/www/Admin/webapp/index.php’ not found or unable to stat
[Wed Jun 23 16:18:13 2021] [error] [client 94.102.49.104] File does not exist: /var/www/Admin/webapp/errordocs
factoryRestore.sh: begin script:
[Wed Jun 23 16:18:28 2021] [notice] caught SIGTERM, shutting down

1 Like

Hey folks, not sure if anyone has seen the latest article from Ars Technica, but it seems worse than we first thought:

4 Likes

Just buy one of these, open your MBL take out the drive and put it in. Call it done.