Help! All data in mybook live gone and owner password unknown

Yes that looks good. Maybe a slower transfer rate than connecting directly to a Sata port in a desktop but would still do the trick. Just make sure the power supply is there to spin the drive :+1:

You mention using DMDE. Reading their website, it seems the free version will allow you to recover files (4000 at a time?) or is there a paid version required to do that?

My Logilink has more or less the same specs, but I was not succesfull in making a connection to my Windows 10 PC over the USB port

Hello all,

I am wondering if someone can link me to the lawyer/lawsuit about this?

Also, in doing my data recovery I noticed that I have a log of it being accessed as far back as 2016, am I correct in assuming this means that the drive, even with remote access disabled, was accessible as far back as 3 years prior to the security disclosure?

The WD response is horrible. The fact that they are offering a short window, and a ■■■■■■ discount is total ■■■■■■■■.

There was PII, such as tax info on my drives, there was family photos, etc. Also, I have 30 days to take them up on this ■■■■■■■■ 40% offer since I’ve now submitted a case telling them to shove the discount up their ass and I want someone with a brain to contact me.

[Thu Mar 03 08:34:49 2016] [error] [client 201.173.190.141] File does not exist: /var/www/setup.cgi
[Thu Mar 03 08:34:49 2016] [error] [client 201.173.190.141] File does not exist: /var/www/Admin/webapp/errordocs
[Thu Mar 03 09:10:31 2016] [error] [client 169.229.3.91] Invalid method in request \xf9K\x880\x86F\x8e\xa4\x02\x16M\xa6\x06\xb4w\xcf\xb9*\xfa\x87Sv\xd8\xe9\xec\xdcN\xa0T\x9c\x12;\x97\x10a\xf2e]\x81D2\xae\xce\xc9\xba\x89yw\xb8\xfdo\x0c
[Thu Mar 03 10:32:25 2016] [error] [client 180.97.106.37] File does not exist: /var/www/Admin/webapp/errordocs
[Thu Mar 03 11:32:04 2016] [error] [client 180.97.106.37] File does not exist: /var/www/robots.txt
[Thu Mar 03 11:32:04 2016] [error] [client 180.97.106.37] File does not exist: /var/www/Admin/webapp/errordocs

And here is a lot of connects in a short time:

[Fri Mar 04 18:28:16 2016] [error] [client 185.103.252.12] File does not exist: /var/www/CFIDE
[Fri Mar 04 18:28:16 2016] [error] [client 185.103.252.12] File does not exist: /var/www/Admin/webapp/errordocs
[Fri Mar 04 18:35:22 2016] [notice] Graceful restart requested, doing restart
[Fri Mar 04 18:35:22 2016] [notice] Digest: generating secret for digest authentication ...
[Fri Mar 04 18:35:22 2016] [notice] Digest: done
[Fri Mar 04 18:35:23 2016] [warn] RSA server certificate wildcard CommonName (CN) `*.device480431.wd2go.com' does NOT match server name!?
[Fri Mar 04 18:35:23 2016] [notice] Apache/2.2.9 (Debian) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8zf configured -- resuming normal operations
[Fri Mar 04 18:35:55 2016] [error] [client 220.178.252.141] File does not exist: /var/www/manager
[Fri Mar 04 18:35:55 2016] [error] [client 220.178.252.141] File does not exist: /var/www/Admin/webapp/errordocs
[Fri Mar 04 18:40:00 2016] [error] [client 220.178.252.141] File does not exist: /var/www/manager
[Fri Mar 04 18:40:00 2016] [error] [client 220.178.252.141] File does not exist: /var/www/Admin/webapp/errordocs
[Fri Mar 04 18:46:59 2016] [error] [client 220.178.252.141] File does not exist: /var/www/manager
[Fri Mar 04 18:46:59 2016] [error] [client 220.178.252.141] File does not exist: /var/www/Admin/webapp/errordocs
[Fri Mar 04 18:54:29 2016] [error] [client 222.186.21.179] File does not exist: /var/www/manager
[Fri Mar 04 18:54:29 2016] [error] [client 222.186.21.179] File does not exist: /var/www/Admin/webapp/errordocs
[Fri Mar 04 18:56:40 2016] [error] [client 220.178.252.141] File does not exist: /var/www/manager
[Fri Mar 04 18:56:40 2016] [error] [client 220.178.252.141] File does not exist: /var/www/Admin/webapp/errordocs
[Fri Mar 04 18:59:12 2016] [notice] Graceful restart requested, doing restart
[Fri Mar 04 18:59:12 2016] [notice] Digest: generating secret for digest authentication ...
[Fri Mar 04 18:59:12 2016] [notice] Digest: done
[Fri Mar 04 18:59:13 2016] [warn] RSA server certificate wildcard CommonName (CN) `*.device480431.wd2go.com' does NOT match server name!?
[Fri Mar 04 18:59:13 2016] [notice] Apache/2.2.9 (Debian) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8zf configured -- resuming normal operations
[Fri Mar 04 19:24:50 2016] [notice] Graceful restart requested, doing restart
[Fri Mar 04 19:24:50 2016] [notice] Digest: generating secret for digest authentication ...
[Fri Mar 04 19:24:50 2016] [notice] Digest: done
[Fri Mar 04 19:24:51 2016] [warn] RSA server certificate wildcard CommonName (CN) `*.device480431.wd2go.com' does NOT match server name!?
[Fri Mar 04 19:24:51 2016] [notice] Apache/2.2.9 (Debian) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8zf configured -- resuming normal operations
[Fri Mar 04 19:39:27 2016] [error] [client 178.255.87.242] File does not exist: /var/www/robots.txt
[Fri Mar 04 19:39:27 2016] [error] [client 178.255.87.242] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:53:31 2016] [notice] Graceful restart requested, doing restart
[Sat Mar 05 13:53:31 2016] [notice] Digest: generating secret for digest authentication ...
[Sat Mar 05 13:53:31 2016] [notice] Digest: done
[Sat Mar 05 13:53:33 2016] [warn] RSA server certificate wildcard CommonName (CN) `*.device480431.wd2go.com' does NOT match server name!?
[Sat Mar 05 13:53:33 2016] [notice] Apache/2.2.9 (Debian) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8zf configured -- resuming normal operations
[Sat Mar 05 13:57:42 2016] [error] [client 181.177.20.14] File does not exist: /var/www/muieblackcat
[Sat Mar 05 13:57:42 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:42 2016] [error] [client 181.177.20.14] File does not exist: /var/www/phpMyAdmin
[Sat Mar 05 13:57:42 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:43 2016] [error] [client 181.177.20.14] File does not exist: /var/www/phpmyadmin
[Sat Mar 05 13:57:43 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:44 2016] [error] [client 181.177.20.14] File does not exist: /var/www/pma
[Sat Mar 05 13:57:44 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:44 2016] [error] [client 181.177.20.14] File does not exist: /var/www/myadmin
[Sat Mar 05 13:57:44 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:45 2016] [error] [client 181.177.20.14] File does not exist: /var/www/MyAdmin
[Sat Mar 05 13:57:45 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:51 2016] [error] [client 181.177.20.14] File does not exist: /var/www/muieblackcat
[Sat Mar 05 13:57:51 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:52 2016] [error] [client 181.177.20.14] File does not exist: /var/www/phpMyAdmin
[Sat Mar 05 13:57:52 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:53 2016] [error] [client 181.177.20.14] File does not exist: /var/www/phpmyadmin
[Sat Mar 05 13:57:53 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:53 2016] [error] [client 181.177.20.14] File does not exist: /var/www/pma
[Sat Mar 05 13:57:53 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:54 2016] [error] [client 181.177.20.14] File does not exist: /var/www/myadmin
[Sat Mar 05 13:57:54 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs
[Sat Mar 05 13:57:54 2016] [error] [client 181.177.20.14] File does not exist: /var/www/MyAdmin
[Sat Mar 05 13:57:54 2016] [error] [client 181.177.20.14] File does not exist: /var/www/Admin/webapp/errordocs

Notice that after each attempt to access the files the next line (only included that each time for that last group) is stating that a “Graceful restart requested, doing restart”…not sure what that is about. Or, maybe it is at login it does that? Not 100% sure as I’m still digging.

Hi @RToniolo

I hope you can recover your data. I luckily didn’t have my data affected. Now I isolated it on the network, with the router firewall blocking the My Book Live ip, which only accesses the internal network.

I also entered the offer and I have to ship My Book Live within 30 days. Support sent me an email explaining how to proceed. I will have to pay the costs to ship My Book Live to them in São Paulo. After receiving them they will send me the ridiculous 40% discount.

I asked who would be selling the new My Cloud here in Brazil. But they didn’t tell me. I called Pauta and Mazer, but these distributors did not know about the “trade in offer”.

Before sending my My Book Live to them, I need to know the prices ​​they will be selling, as I believe that the “Trade In offer” will not be advantageous. I think I will use a NAS from another manufacturer.

Hugs

3 Likes

Hi Mike,

You can recover 4K files in any view. The SW categorizes by file type. So for instance if you are viewing *.doc you can recover up to 4K of that type.
The SW does not keep track of which files you have recovered. You have to count down 4K to get to the next 4K.

Thank you, Jeff

Thanks for the reply. Is that 4k max then need to pay, or just 4k at a time? For example if I took 4k .jpg files from the list, am I then done for .jpg files, or can I just choose the next 4k and give them a go?

Appreciate the help!

Most software I’ve ran into with a limit like that is 4K files period in 1 go. Try to recover 4K, run again for 4K, run again for 4K. Not 100% sure with this particular one but I suspect it is probably the same.

1 Like

And you have to pay to ship your defective unit in … ridiculous !!

1 Like

You can recover 4K as many times as you like. The trouble is how do you know where you left off? it is very tedious.
You can recover 4K of each type (separate view) which is convenient.

Here is a dumb question… I’m not sure where the hack or whatever it’s called resides. But if I yank the disk out of the “my book”, put it in a external sata dock, and format it… I’m assuming that disc is now safe for use. Especially just accessing it via the dock.

Never mind… just went ahead and hooked it up and removed the 4 volumes and reformatted it… so now should be perfectly fine.

Hi pwpfc3, I not 100% sure without looking at all of it but I would say that the graceful restart request is for Apache as opposed to the whole NAS.

That request with the long line of random stuff could possibly be an attempt at a buffer overflow

1 Like

Here’s one that I’m aware of…

Western Digital My Book Live Wiped Data Lawsuit | Lose your WD data? (classlawgroup.com)

3 Likes

The drive is not recognizable by WIndows 10. My recovery software (EASEUS Data Recovery Wizard) does recognize the drive and scan for recoverable files. The right recovery software will see the drive and let you work on it. I used the USB-to-SATA with no issues. Recovery software is the key. Several are mentioned in this discussion.

I was lucky and my Wd Live Duo didn’t hacked. I checked the trade-in offer and the EX2 ULTRA 8T cost 270e plus the shipping cost meaning arround 300e. A new QNAP ts-230 with 2 seagate ironwolf 4T cost without the vat 320e (I will not pay the vat due to corporate invoice). WD never again!

3 Likes

Thanks @rshare ! But, if you connect the drive via SATA to USB, does Explorer in Windows 10 provide you with the drive and an associated drive letter?

Seems they Geo-Block queries from anyone outside the USA

@dswv42 ,I understand that, the contents and partitions of the Ext4 formatted drives might be completely unknown to Windows, but any USB connection with a mass storage device attached to it (un unformatted USB drive eg) will be associated with an entry in Explorer in Windows 10. Any recovery software would need some “proof” on the OS layer, that anything is attached to the USB port. I am not “seeing” the drive on the OS layer, hence R-Studio and EASUS also do not “see” the drive attached to the laptop’s USB port, hence they can not do their supposed job.

Has anyone actually managed to sort out getting the data recovery service? I’ve asked several times on my own support ticket and haven’t had a reply… :face_with_symbols_over_mouth::face_with_symbols_over_mouth:

1 Like