File encrypted! How can I open it!! HELP!!

Search This thread

ym_1080

New member
Oct 25, 2021
3
1
New version of WonderShare Zip Password Tester
Download: https://yadi.sk/d/KLBMhwOL-or45g

Just extract the zip somewhere and put the (if file name is different, rename it) to the same folder and run the bat. Or just drag-and-drop the bak file over the bat to run. Now it tests four basenames automatically.

View attachment 5145765
thanks bro! it works! i renamed as "Samsung SM-G350E_20191001_103009.bak" and i tried to extract by 7zip with favourite password "MobileTrans1125" and it works very well. Thank you!
 

CXZa

Senior Member
Apr 9, 2013
844
300
cxzstuff.blogspot.com
Y
thanks bro! it works! i renamed as "Samsung SM-G350E_20191001_103009.bak" and i tried to extract by 7zip with favourite password "MobileTrans1125" and it works very well. Thank you!
You were lucky... 👍 Akira wasn't that much, but the last versions did the trick for him too...

Noticed that @jwoegerbauer now has a new name... "Deleted member 1890170". (y):ROFLMAO:
Xmas came early this year...
 
  • Angry
Reactions: blackhawk

monsizr

Member
May 2, 2013
9
1
You have to find your own keys. Just use this one.

Wondershare.bak-cracker (using-bkcrack)
Download: https://disk.yandex.com/d/okTTLrxIQf3iRw

Usage: Just drag-and-drop the Wondershare .bak file over the bat and wait for XX minutes max...

---
edit: Wondershare.bak-cracker's bkcrack updated to version 1.1.0. (was using 1.0.1).

Download just the bkcrack-1.1.0 win32:
Thank you very much. You're an Angel.
 
  • Like
Reactions: a_ejazz

maheshomf

New member
Mar 23, 2022
1
1
Awesome thread!! Thank you guys, You guys had the talent to even outbeat the software developers of wondershare. I had initially raised a ticket with wondershare team to process by .bak file, but they failed and informed that the file is corrupt, however, i was able to open and saw that the files were encrypted!!


the program really worked, I was able to get the password thru the .bat file and then found the password to be Dr.Fone3360 .I was using dr fone wondershare v9. I will share the steps below for recovery of corrupt .bak files:

1. Use the password cracker tool updated from the thread and find the password. In my case it took approx 20 mins.
1648046941770.jpeg


2. Open wondershare backup and connect your phone
3. Create a dummy backup file by clicking on backup and just select contacts/simple stuff
4. Rename the extension of dummy backup file(.bak) newly created to .zip
5. Open winrar or any utility to open the dummy .zip file.
6. Extract contents from recovered/corrupt .bak file(open using winrar and extract to a new folder)
7.Paste the contents of the recovered(corrupt bak file/folder) to the dummy .zip file(open in winrar and drag/paste the data)
8. Thats it, now just open wondershare, use the default path or select the .bak file, it should be able to restore(In my case, the crack was not working, i paid for the backup version of dr fone and restored!!!!)

(Just remember, do not rename the file name, it should be same as the dummy backup file)

Love the thread!!! thank you guys!!!
 
  • Like
Reactions: CXZa

AkiraPerera04

Senior Member
Apr 15, 2018
186
7
@CXZa Hi, hopefully ur still around after all this time lol.

I'm still kind of confused, however I can't even research the topic since it's quite specific. Judging by the contents of the backup, it seems that it contains my sd card files/pictures and none of the internal storage files/pictures?

I can't quite understand the file types/extensions, but is there a part of the backup that could have the internal storage contents preserved? I recall taking around 2000-4000 pictures all of which should've been in the backup?

Since these pictures/videos were taken on the S4, they would be small in size (storage wise), so maybe they've been compressed somewhere in the backup?

Initially the culprit was the .list files but I can't figure out what they are. Are they capable of holding jpegs/mp4s/etc?

Hopefully you see this, I'll be answering super quick and will instantly trial and error the suggestions given since I've been delaying this for no reason. Hopefully we can brainstorm it and finish this haha!!

Thanks.
 

CXZa

Senior Member
Apr 9, 2013
844
300
cxzstuff.blogspot.com
@CXZa Just a bump incase u missed it.

As an update, I contacted wondershare and I might buy their product, ahhhhh.
Cannot be sure about your list files but mine were just listing the files. Then again when testing Wondershare's products I used a tablet that was practically empty. Just some photos really.,,
Check the file sizes, if there is some having size like several MB then there might be some "extra" data inserted into it.
 

AkiraPerera04

Senior Member
Apr 15, 2018
186
7
Cannot be sure about your list files but mine were just listing the files. Then again when testing Wondershare's products I used a tablet that was practically empty. Just some photos really.,,
Check the file sizes, if there is some having size like several MB then there might be some "extra" data inserted into it.
Okay I see, I'll take a look.

Also, I emailed wondershare about their software being unable to open my .bak and they asked if I could send the same 1.4gb .bak to them so they can attempt to open it. Should I trust them? Quite an unusual request.

Thanks.
 

CXZa

Senior Member
Apr 9, 2013
844
300
cxzstuff.blogspot.com
Okay I see, I'll take a look.

Also, I emailed wondershare about their software being unable to open my .bak and they asked if I could send the same 1.4gb .bak to them so they can attempt to open it. Should I trust them? Quite an unusual request.

Thanks.
I remember that you had difficulties giving us even some bytes of it, thus making things harder than necessary... lol.

But anyways, if it doesn't contain anything that secret, why not?
Not unusual really. The only way they can try to see what is in it...
(after which they can recommed you a program to buy..)
 
Last edited:

AkiraPerera04

Senior Member
Apr 15, 2018
186
7
I remember that you had difficulties giving us even some bytes of it, thus making things harder than necessary... lol.

But anyways, if it doesn't contain anything that secret, why not?
Not unusual really. The only way they can try to see what is in it...
(after which they can recommed you a program to buy..)
Yeah haha, I was pretty nervous since I was using the family's pc which was full on storage space. Didn't have another copy but I was eager to see what's in their. That's why I was reluctant to clown around with this .bak. I also didn't know what was on there, those bytes could've ended my whole life (lol, there was just dragon ball z pictures, bodybuilding pages and stuff from my school days haha).

So is that normal procedure for a software company like this? I've just heard that wondershare is a load of crap mainly since they lock your restore behind a paywall. I think 5/6 years ago that fact was more hidden lol. Other than that, are they known to scam/do malicious things?

Also, how is it that when I tried to use their wondershare products. Not a single one detected it or could open it?

I don't even know how to send a 1.4gb .bak file over email.

Thanks.
 

AkiraPerera04

Senior Member
Apr 15, 2018
186
7
Good points... And because of this, they probably get many requests like yours..
Means more "happy" customers... whose pics on the office's wall are just extra...
I somehow managed to forget with whom we are dealing with..
Yeah, I'll let you know what happens. However, another issue.

I am trying to restore an app backup which was backed up using adb. I am now trying to test it in the secure folder. (In case I restore the internal storage and it fails/overwrites incorrectly for whatever reason)

So, as a test, I copied my game called cookie clicker which I know the backup/restore works fine for the usual internal storage. So it copied the app to the secure folder without the data, fine because that's the secure folders function (to duplicate an app minus the data). So now I tried to uninstall or restore the same app using adb commads from my pc. To uninstall I used this code.

./adb shell pm uninstall -k --user 150 it.junglestudios.cookieclickers

I got the error saying this.

1670423591070.png



Any ideas? I don't know what to do because now I can't properly test my backup/restore.

Thanks.
 

AkiraPerera04

Senior Member
Apr 15, 2018
186
7
Sorry, no idea about secure folders, etc.. Not so long ago I found out that adb backup doesn't work on my phone (anymore?? - might have worked before).
That's pretty secure, right? ;)


IDK, but I have used user 0 somewhere before ...

Hmmm okay I see. Why doesn't it work? Are you using platform tools?

Yeah haha. I don't actually need to use the secure folder. I just wanted to test my backup. The issue is that I can't restore it without overwriting the original (so the only working copy would be gone if i decided to restore onto the internal). That's why I thought I could bypass this by restoring to the secure folder, but it doesn't work.

Any ideas on how I can test a backup/restore of a single app? I did think to rename the package/modify the apk, but that doesn't seem to work on these newer androids. I think it changed when they changed how we can view our files since the one ui 3 update.

The apps that use a parallel space don't seem to work since I can't restore apps to it.

Yeah, user 0 is the normal user directory where user 150 is the secure folder. (I think)

Thanks.
 

AkiraPerera04

Senior Member
Apr 15, 2018
186
7
Sorry, no idea about secure folders, etc.. Not so long ago I found out that adb backup doesn't work on my phone (anymore?? - might have worked before).
That's pretty secure, right? ;)


IDK, but I have used user 0 somewhere before ...

Hi, having yet another issue, hopefully you can help haha!

Here's the thing,

So this picture is of the app backups, they were restored from a shadow copy as per the title. But when I went to restore the apps, I entered the correct encrypted password using adb and it didn't restore? I think it's corrupted.

I entered ./adb restore app.backup

Any ideas on what I can do? Has the encrypted password changed or is the whole file corrupted?

Also, So, as to explain how this even happened, maybe you can spot an obvious error (I really hope so). Basically, I went to backup another app but I let the file name save be the same, meaning that it had overwritten the main backup containing app + data. As soon as I noticed, the main backup went from 658mb to 0 and that was it. I couldn't see any previous versions, so I went to the shadow copy's and found another one which is the one that doesn't work.

Thanks.
 

AkiraPerera04

Senior Member
Apr 15, 2018
186
7
@CXZa Another thing to add. Is there a way to unpack the backup file and perhaps fix it like how a chkdsk would? I have read that there is a tar file in there. I'm not too sure but the backup I want to restore (app.backup(Pictured above)) still have over 640mb preserved so the maybe the file build is a mess or something?

Any ideas?

Thanks.
 

StrangerMachine

New member
Jan 23, 2023
3
0
This is my first time on the forum, i am not sure if its the right place for a question. So apologies in advance. I backed up my Device using Wondershares Dr. Fone totally unaware of the fact that I need to pay for the restore feature. Is there a backup file stored somewhere on my PC? which I can then manually extract? I tried to look for it in the Documents >Wondershare >dr.fone >Backup. Backup shows on the wondershare app though. Thanks in advance.
 

StrangerMachine

New member
Jan 23, 2023
3
0
The path sounds right to me... Only MobileTrans worked for me. Dr.Fone made that path but it maybe crashed, anyways didn't do a backup - and I think MobileGo did the same. But the paths are still there in the virtual machine used.
Thanks, what do you suggest I do?
There is no file in the directory, did you imply that MobileTrans will reveal the said file? Sorry let me k ow if I got it correct.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    New version of WonderShare Zip Password Tester
    Download: https://yadi.sk/d/KLBMhwOL-or45g

    Just extract the zip somewhere and put the Samsung SM-G350E_20191001_103009.bak (if file name is different, rename it) to the same folder and run the bat. Or just drag-and-drop the bak file over the bat to run. Now it tests four basenames automatically.

    WonderShare-Zip-Password-Tester_[cxz].jpg
    1

    Alright, so I tried that exact file you linked. I dragged my bak file over the bat file and let it run. It didn't work!!

    Any ideas? Sees uncrackable at the moment lol! So annoying!

    Thanks.
    1
    D
    Deleted member 1890170
    Me again:

    As you were already told the password is stored in AES 256 encrypted manner within the archive - keywords: Archive Decrpytion Header, Archive Extra Data Record.

    AFAIK there is no publicly-known way to extract - will say: decipher - the AES key with non-trivial probability, given any number of plaintext-ciphertext pairs, in a practical amount of time using a practical amount of computing resources.

    My advice: Stop wasting your time with this, or take the password-protected archive to NSA in order to decipher it - may be they have the appropriate tools and computer resources. :)
    1
    I think what jwoegerbauer is saying is you might need a supercomputer to crack it.

    Ah, either that or I'll just leave my pc on for a few weeks lol!
    1
    New version of WonderShare Zip Password Tester
    Download: https://yadi.sk/d/KLBMhwOL-or45g

    Updated. Now you can use spaces in passwords. Also added new default Dr.Fone password to the basenames.txt. Got it from the memory using Cheat Engine...

    What @AkiraPerera04 could do is get a Mac, virtual or real one and install every damn Wondershare software into it. And then grab those passwords from the memory. Cheat Engine is available for Mac too. Use program id (in installer filename or Info.plist / InfoPlist.strings ) as a search string. Try also UTF-16 strings.

    VirtualBox_IE11 - Win7_22_01_2021_20_58_08.png