Results 1 to 11 of 11

Thread: Recover data from suspect drive.

  1. #1
    Chaos Monkey Apex's Avatar
    Join Date
    Jul 2003
    Location
    Huddersfield
    Posts
    4,706
    Thanks
    1,139
    Thanked
    284 times in 203 posts
    • Apex's system
      • Motherboard:
      • Asus Z87M-PLUS
      • CPU:
      • Intel i5-4670K
      • Memory:
      • 32 GiB
      • Storage:
      • 20 TiB
      • Graphics card(s):
      • PowerColor Radeon RX 6700 Fighter 10GB OC
      • PSU:
      • 750
      • Case:
      • Core View 21
      • Operating System:
      • Windows 10 pro
      • Monitor(s):
      • Dell S2721DGFA
      • Internet:
      • 200Mb nTL Cable

    Recover data from suspect drive.

    Hoping some one can point me in the right direction because i am currently at a loss on how to proceed.

    Need recomendations on software that will attempt to recover data from a suspected bad drive.

    Now a few things:

    The drive is seen in the bios

    The drive is seen in Windows

    The partitions are seen in Windows and the size is reported

    I can manually copy some files from it to another drive but others just bomb out with I/O errors or hang the process.

    I have the disk connected via a usb3 bridge chip which might not be helping in matters but its all i had to hand.

    I am guessing that with the current suspect hdd that using a windows based recovery program isn't the best way to proceed so was wondering what other options i have [ unless you know of a Windows based program that can deal with the I/O errors ect that this drive is throwing up ]

    Thanks

    Drew

  2. #2
    Treasure Hunter extraordinaire herulach's Avatar
    Join Date
    Apr 2005
    Location
    Bolton
    Posts
    5,618
    Thanks
    18
    Thanked
    172 times in 159 posts
    • herulach's system
      • Motherboard:
      • MSI Z97 MPower
      • CPU:
      • i7 4790K
      • Memory:
      • 8GB Vengeance LP
      • Storage:
      • 1TB WD Blue + 250GB 840 EVo
      • Graphics card(s):
      • 2* Palit GTX 970 Jetstream
      • PSU:
      • EVGA Supernova G2 850W
      • Case:
      • CM HAF Stacker 935, 2*360 Rad WC Loop w/EK blocks.
      • Operating System:
      • Windows 8.1
      • Monitor(s):
      • Crossover 290HD & LG L1980Q
      • Internet:
      • 120mb Virgin Media

    Re: Recover data from suspect drive.

    firstly, stop faffing with it, you're potentially introducing additional errors. I've had success with USB sticks in similar condition using a standard linux distro together with dd then trying to recover data from that image. There are more advanced tools, but I was fortunate enough to get everything I wanted with dd, mount and then copy (and a long rant at the wife about keeping 6 years of work on a memory stick with no backup even though she only has to copy it to her laptop to have 3 redundant copies).

  3. Received thanks from:

    Apex (17-06-2014)

  4. #3
    The late but legendary peterb - Onward and Upward peterb's Avatar
    Join Date
    Aug 2005
    Location
    Looking down & checking on swearing
    Posts
    19,378
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts

    Re: Recover data from suspect drive.

    Quote Originally Posted by herulach View Post
    firstly, stop faffing with it, you're potentially introducing additional errors. I've had success with USB sticks in similar condition using a standard linux distro together with dd then trying to recover data from that image. There are more advanced tools, but I was fortunate enough to get everything I wanted with dd, mount and then copy (and a long rant at the wife about keeping 6 years of work on a memory stick with no backup even though she only has to copy it to her laptop to have 3 redundant copies).
    Absolutely. But install the drive properly (ie native SATA) and then clone the disk (dd on a linux distro works well, or you can use dcfldd (you will need to install it) which is an improved version of dd.

    Once the disk is cloned (assuming it isn't too badly damaged) you can recover files from the image.

    There are a number of reasons why you might be having problems though - it could be physical damage to the dik (which will prevent cloning) or 'just' corruption of the Master File Table. NTFS is reasonably robust though.

    If the MFT is corrupt, you may need some recovery tools - I have used tools from www.runtime.org with some success.

    It is a tedious and painstaking job though.
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  5. Received thanks from:

    Apex (17-06-2014)

  6. #4
    Chaos Monkey Apex's Avatar
    Join Date
    Jul 2003
    Location
    Huddersfield
    Posts
    4,706
    Thanks
    1,139
    Thanked
    284 times in 203 posts
    • Apex's system
      • Motherboard:
      • Asus Z87M-PLUS
      • CPU:
      • Intel i5-4670K
      • Memory:
      • 32 GiB
      • Storage:
      • 20 TiB
      • Graphics card(s):
      • PowerColor Radeon RX 6700 Fighter 10GB OC
      • PSU:
      • 750
      • Case:
      • Core View 21
      • Operating System:
      • Windows 10 pro
      • Monitor(s):
      • Dell S2721DGFA
      • Internet:
      • 200Mb nTL Cable

    Re: Recover data from suspect drive.

    Think its more a case of bad sectors causing it to have a hissy fit.

  7. #5
    psi
    psi is offline
    Registered+
    Join Date
    Mar 2014
    Posts
    21
    Thanks
    0
    Thanked
    1 time in 1 post

    Re: Recover data from suspect drive.

    Spinrite by GRC is good for recovering damaged sectors

  8. Received thanks from:

    Apex (19-06-2014)

  9. #6
    Chaos Monkey Apex's Avatar
    Join Date
    Jul 2003
    Location
    Huddersfield
    Posts
    4,706
    Thanks
    1,139
    Thanked
    284 times in 203 posts
    • Apex's system
      • Motherboard:
      • Asus Z87M-PLUS
      • CPU:
      • Intel i5-4670K
      • Memory:
      • 32 GiB
      • Storage:
      • 20 TiB
      • Graphics card(s):
      • PowerColor Radeon RX 6700 Fighter 10GB OC
      • PSU:
      • 750
      • Case:
      • Core View 21
      • Operating System:
      • Windows 10 pro
      • Monitor(s):
      • Dell S2721DGFA
      • Internet:
      • 200Mb nTL Cable

    Re: Recover data from suspect drive.

    15hrs later i have a img file via the runtime livevd. No idea what files are corrupt but i guess thats a start

  10. #7
    Chaos Monkey Apex's Avatar
    Join Date
    Jul 2003
    Location
    Huddersfield
    Posts
    4,706
    Thanks
    1,139
    Thanked
    284 times in 203 posts
    • Apex's system
      • Motherboard:
      • Asus Z87M-PLUS
      • CPU:
      • Intel i5-4670K
      • Memory:
      • 32 GiB
      • Storage:
      • 20 TiB
      • Graphics card(s):
      • PowerColor Radeon RX 6700 Fighter 10GB OC
      • PSU:
      • 750
      • Case:
      • Core View 21
      • Operating System:
      • Windows 10 pro
      • Monitor(s):
      • Dell S2721DGFA
      • Internet:
      • 200Mb nTL Cable

    Re: Recover data from suspect drive.

    Quote Originally Posted by psi View Post
    Spinrite by GRC is good for recovering damaged sectors
    I may give that a try or i might just send it to get replaced due to it been still under waranty.

  11. #8
    The late but legendary peterb - Onward and Upward peterb's Avatar
    Join Date
    Aug 2005
    Location
    Looking down & checking on swearing
    Posts
    19,378
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts

    Re: Recover data from suspect drive.

    Now you have the image, you can start recovering files. Not worth faffimg with the old one if it is under warranty.

    However... file recovery can be tricky, and you can accidentally make things worse, so ideally you need to clone the image and work on that. Then, if you do make a mistake, you can re-clone from the original and start again.

    Otherwise count the image as a read only virtual drive and see what you can see. You might be lucky and find an intact file system and just copy the files off it.
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  12. Received thanks from:

    Apex (19-06-2014)

  13. #9
    Chaos Monkey Apex's Avatar
    Join Date
    Jul 2003
    Location
    Huddersfield
    Posts
    4,706
    Thanks
    1,139
    Thanked
    284 times in 203 posts
    • Apex's system
      • Motherboard:
      • Asus Z87M-PLUS
      • CPU:
      • Intel i5-4670K
      • Memory:
      • 32 GiB
      • Storage:
      • 20 TiB
      • Graphics card(s):
      • PowerColor Radeon RX 6700 Fighter 10GB OC
      • PSU:
      • 750
      • Case:
      • Core View 21
      • Operating System:
      • Windows 10 pro
      • Monitor(s):
      • Dell S2721DGFA
      • Internet:
      • 200Mb nTL Cable

    Re: Recover data from suspect drive.

    For some reason the software split it into 650mb chunks but either way i would say that i am 99% happy with the files recovered.

    I have no idea which if any of the files are corrupt, guess i'll find out when they shout at me.....this might teach them to backup to the NAS unit like i have been saying for the last 6 months....

    I've rebuilt their laptop with a SSD this time and droped the files onto it will see how things go from there.

    Now i must go away and image my OS drive....might as well practice what i preach....

  14. #10
    The late but legendary peterb - Onward and Upward peterb's Avatar
    Join Date
    Aug 2005
    Location
    Looking down & checking on swearing
    Posts
    19,378
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts

    Re: Recover data from suspect drive.

    Good news then! Glad it seems to be OK
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  15. Received thanks from:

    Apex (19-06-2014)

  16. #11
    Registered User
    Join Date
    Oct 2013
    Posts
    5
    Thanks
    0
    Thanked
    0 times in 0 posts

    Re: Recover data from suspect drive.

    When it's about recovery from bad or infected drive, I believe on Recuva.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •