Notifications
Clear all

Locked HDD

12 Posts
8 Users
0 Reactions
1,437 Views
mrpumba
(@mrpumba)
Estimable Member
Joined: 15 years ago
Posts: 116
Topic starter  

I recently was given a notbook to examine (Toshiba NB255) and when I tried to image the HD, I could not due to the system bios password was active. I reset the computer and cleared out the bios password but was quickly met with the HDD/SDD being locked.
I do have access to the system bios (Phoenix) and can access the security tab. I see two passwords one for the bios and the other for the HDD. When I enter the pw from the security tab, I am prompted it is a wrong pw.
Has anyone had this problem and is there a way to bypass this and get to the files? I believe the OS is windows, most likely xp. Is is possible to view the files using Ubuntu? Or does anyone know how to reset or pass the HDD password.


   
Quote
(@josefk)
New Member
Joined: 16 years ago
Posts: 3
 

Have you tried imaging the disk independant of the notebook?


   
ReplyQuote
(@thepm)
Reputable Member
Joined: 17 years ago
Posts: 254
 

You will have to use an ATA utility such as PC-3000 to remove the ATA password.


   
ReplyQuote
mrpumba
(@mrpumba)
Estimable Member
Joined: 15 years ago
Posts: 116
Topic starter  

Josefk, Yes I tried that but the computer with Tableau and our Dossier system cannot detect the drive due to the password.

Hitman - I'm not familiar with PC3000 but will look into it.


   
ReplyQuote
(@angrybadger)
Estimable Member
Joined: 18 years ago
Posts: 164
 

Josefk, Yes I tried that but the computer with Tableau and our Dossier system cannot detect the drive due to the password.

Hitman - I'm not familiar with PC3000 but will look into it.

Stop what you're doing.

Find someone who has a PC3K and knows how it works. They may be able to help.

Any more fiddling could most likely end up with the hard disk being wiped.


   
ReplyQuote
mrpumba
(@mrpumba)
Estimable Member
Joined: 15 years ago
Posts: 116
Topic starter  

hmorgan, noted but how could the system be wiped, using writeblocker devices?


   
ReplyQuote
(@sweet306)
New Member
Joined: 17 years ago
Posts: 1
 

You can try to use PC3000 or SHINOBI to unlock the password.


   
ReplyQuote
(@mansiu)
Trusted Member
Joined: 16 years ago
Posts: 83
 

hmorgan, noted but how could the system be wiped, using writeblocker devices?

becoz toshiba has introduced a new harddrive which can self-destruct in few seconds

http//gizmodo.com/5609068/this-hard-drive-will-self+destruct-in-five-seconds


   
ReplyQuote
(@Anonymous 6593)
Guest
Joined: 17 years ago
Posts: 1158
 

hmorgan, noted but how could the system be wiped, using writeblocker devices?

Because the order to wipe would not be issued from the computer, but would be a consequence of too many failed login attempts, and initiated by the drive itelf. No ordinary write blocker can stop that.

However, as you have not said what exact hard drive you are dealing with, it's a worst case scenario. Locate and examine the manual to the hard drive in question – that will tell you what you are facing. If it's a bulk-encrypting hard drive, you need to be careful.


   
ReplyQuote
mrpumba
(@mrpumba)
Estimable Member
Joined: 15 years ago
Posts: 116
Topic starter  

Athaulin, noted as well and it was a toshiba hd.


   
ReplyQuote
Page 1 / 2
Share: