search

themaddoctor / linux-mybook-tools

tools for opening some encrypted WD My Book drives in linux
GNU General Public License v3.0
181 stars 26 forks source link

Damaged MyBook 2TB #59

Open MLUhle opened 3 years ago

MLUhle commented 3 years ago

Hello, My drive, tipped to the side and became corrupted. I am able to download encrypted files to another drive, by using recovery software like EaseUS Data Recovery Wizard and photorec_win. Is your software able to decrypt individual files?

themaddoctor commented 3 years ago

I don't believe that you could copy encrypted files, since the filesystem is also encrypted.

MLUhle commented 3 years ago

Hi, thanks for repliyng.

First I tried cgsecurity.org ‘s testdisk but it would not find any partitions. Their other software Photorec found and I copied many files, some typical video files with sizes > 3GB but the suffix doesn’t match, because of the encryption right? Also the sizes don’t match my directory list I had done before the crash, maybe because of the anterior reason,

From this list I have, I see many videos that I already copied but, there are other things I would like to get back. Another software EaseUS finds many files but I would have to buy a license in order to recover past 2GB. I am willing to go this route if I can decrypt anything first.

Or should I just forget about it?

Thanks again

Mauro

From: themaddoctor [mailto:notifications@github.com] Sent: Saturday, November 21, 2020 8:06 AM To: themaddoctor/linux-mybook-tools linux-mybook-tools@noreply.github.com Cc: MLUhle m.uhle@comcast.net; Author author@noreply.github.com Subject: Re: [themaddoctor/linux-mybook-tools] Damaged MyBook 2TB (#59)

I don't believe that you could copy encrypted files, since the filesystem is also encrypted.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/themaddoctor/linux-mybook-tools/issues/59#issuecomment-731576873 , or unsubscribe https://github.com/notifications/unsubscribe-auth/AR2WWUJGX63YPLOBEE3EK33SQ63M7ANCNFSM4T5P5OYA .

themaddoctor commented 3 years ago

Sorry for my late reply, but I did not receive a notification that you had replied.

MyBooks that are encrypted use FULL-DISK encryption. This means that the file-system headers are also encrypted. Furthermore, file-recovery software looks for file headers, but since they are encrypted, the software is finding false positives.

If you want to recover your data, you have to decrypt the entire disk or set up a decryption filter on your operating system. This project is simply an instruction manual for setting up such a filter on a linux computer. For full-disk decryption, see the ReallyMine project at https://github.com/andlabs/reallymine That project can run on Mac and Windows as well.