Unrecognized Data Storage Device - Recovery

[therealcrazy8]

I have a data recovery service I am going to do for someone who has a 1TB WD "data storage device" (no further details on the "storage device") that is no longer being recognized by Windows. Im guessing that this is probably just an external HD. I currently already have R-Studio for doing data recovery and I have just started testing out some other programs that come highly recommended for data recovery, before I get the drive in my hands, which could be about 3-4 days from today.

What I am wondering, what do you typically do with a drive that is not being detected in windows. Worst case scenario, what if it's not even detected in Computer Management? Are there still apps that can get to the drive to recover data from the drive?

Thanks for the help.

 

[Larry Sabo]

Not that I'm aware of. My advice would be to refer such cases to a data recover specialist who has the tools and experience required to deal with such drives. It could be a firmware, media, R/W head or PCB issue, or combinations of these.

 

[MichaelBits]

If you have a Flavor of Linux installed somewhere, it may read it when windows won't. Linux is more forgiving on reading HDD's.

Just remember powering up a damaged drive can just cause more damage.

 

[therealcrazy8]

If you have a Flavor of Linux installed somewhere, it may read it when windows won't. Linux is more forgiving on reading HDD's.

Just remember powering up a damaged drive can just cause more damage.

Well it's not mechanically damaged, as far as I know right now. However, if it were, then I would definitely send it over to Gillware. If it's not mechanically damaged, it should still be safe to do recovery, am I wrong? Eventually, I think Im going to invest in a device to incorporate write protection for when doing these types of things. Assuming that I do a bit of it.

 

[AndyM]

I would check to make sure that the "data storage device" can be detected and read on your tech PC. If it is, then the next step I would personally follow, is to clean up devices manager. Far too often I've had people complain that something doesn't work, when all Windows needs is for the devices to be cleaned up.

https://technet.microsoft.com/en-us/library/ff184583.aspx

Andy

 

[lcoughey]

Well it's not mechanically damaged, as far as I know right now. However, if it were, then I would definitely send it over to Gillware. If it's not mechanically damaged, it should still be safe to do recovery, am I wrong? Eventually, I think Im going to invest in a device to incorporate write protection for when doing these types of things. Assuming that I do a bit of it.

It is probably a cross between firmware, bad sectors and encryption.

Why would you "try" things first and then refer to a lab? If the data is worth paying the huge prices that Gillware charges, are you willing to accept that anything you do might be the reason for it not being recoverable by the pro or being more expensive? I frequently get drives from new resellers who "tried" their free or super cheap data recovery programs first and turn $350 projects into a $700+parts projects.

 

[Markverhyden]

If this is something that has critical data with major value send it out. If it's a fishing expedition that's a different deal. Many of the WD drives, the portable ones specifically, have the USB2SATA built in to the PCB. So it may be the end of the road if that PCB is toast.

The desktop models have detachable bases which let you hook up directly to SATA but I seem to remember that there was something going on with how WD writes the data. Possibly encryption or their own proprietary container system

 

[therealcrazy8]

It is probably a cross between firmware, bad sectors and encryption.

Why would you "try" things first and then refer to a lab? If the data is worth paying the huge prices that Gillware charges, are you willing to accept that anything you do might be the reason for it not being recoverable by the pro or being more expensive? I frequently get drives from new resellers who "tried" their free or super cheap data recovery programs first and turn $350 projects into a $700+parts projects.

Well I don't know all of Gillware's rates. The last time i called them just recently, the job was estimated to be about $800 for a thumb drive, but only because they would have to do a "chip off" remove the actual memory off the PCB, and the wright code to communicate with that chip, all before even attempting to remove the data. Of course as much as the user needed that data, it wasn't worth $800.

With that said, if anyone has any recommendations on another, more affordable, third party, I'd definitely be interested. If this issue were a business client and had valuable data, I would definitely have a 3rd party do it, but for someone looking to just get their pictures, music, and who knows what else that most residential users have on their computer, is not worth the time and money that would go into that if it were done by a 3rd party.

There are countless techs on the forums and in the field who do data recovery and with that comes experience, knowledge, along with good judgement being a good prerequisite. None of that is obtained by handing off all data recovery jobs to 3rd parties that will take up more time and money that most clients, especially residential, are not willing to pay. I have years of IT experience and 2 degrees under my belt. I enjoy learning very much and have no problems learning new skills, especially if it's something I would like to do more of.

 

[therealcrazy8]

If this is something that has critical data with major value send it out. If it's a fishing expedition that's a different deal. Many of the WD drives, the portable ones specifically, have the USB2SATA built in to the PCB. So it may be the end of the road if that PCB is toast.

The desktop models have detachable bases which let you hook up directly to SATA but I seem to remember that there was something going on with how WD writes the data. Possibly encryption or their own proprietary container system

What's the best method to test if a PCB is bad?

 

[fencepost]

I think I'd be a fan of the "reseller" method, but really at this point you really haven't provided us with any information on the drive - not even whether it can be connected via SATA.

I will say however that if the only things you're using or ready to use involve Windows then the "reseller" method is even better. AFAIK Windows likes to be able to write to drives unless they're explicitly connected in such a way as to be read-only devices (via hardware of some sort). Windows may even take the connecting of a questionable drive as an invitation to investigate it, see if it can see what's wrong, and offer to fix it for you. All of these can involve some risk to the drive.

Connecting to a Linux box (from which you'll run ddrescue to image the drive into an image file that you can examine with R-Studio) avoids letting Windows poke its grubby fingers in.

 

[Larry Sabo]

if anyone has any recommendations on another, more affordable, third party, I'd definitely be interested.

@lcoughey's (RecoveryForce's )rates are pretty tough to beat, in the US or Canada.

for someone looking to just get their pictures, music, and who knows what else that most residential users have on their computer, is not worth the time and money that would go into that if it were done by a 3rd party.

Is that your judgement or the customer's? Have you asked the customer whether you should get a quote or have a DR specialist assess the case? Most DR firms offer free assessment.

I enjoy learning very much and have no problems learning new skills, especially if it's something I would like to do more of.

That's great! Just don't do it at your customers' risk and expense; learn using your own drives.

 

[fencepost]

3rd parties that will take up more time and money that most clients, especially residential, are not willing to pay.

Yeah, from what you've described so far I'd expect that even the cost of recovery by @lcoughey would be less than you'd charge her for a few hours of puttering around with it, and have a much higher chance of recovery - and if recovery isn't possible, he'll tell you that as well and the only cost will be shipping it there (and back if desired) and a bit of your time in packing it appropriately.

 

[NviGate Systems]

Whenever the data is important (business data or invaluable personal data considered worthy of recovery) is involved, I always recommend sending to a lab, for the simple reason they are far more qualified to triage the patient than I am.

We have a partner who uses RapidSpar (sp?) and even though they have a good rescue rate, I still would not recommend sending arrive with as an example, lawyers data first to them then to a lab, by which time the drive is gibblets and bits.

I can only recommend, what my colleagues do is up to them. I no longer try and be a hero. It just pisses off the client.

 

[therealcrazy8]

Is that your judgement or the customer's? Have you asked the customer whether you should get a quote or have a DR specialist assess the case? Most DR firms offer free assessment.

I haven't done anything yet as I, as stated above, don't have the drive in my possession. As of right now, it's only an assumption, not sure I understand how it would be the customers. Based on the computers I have worked on over the years. Only one (my dad's) has ever had data on it that would be just as critical and held at such value that would be equal to a big business. But he started an ran 3 businesses and had "work" on all of his computers. Most people, again based on my personal experience, want things like family photos, homework papers, music, movies, etc. So my assumptions based on experience is quite valid. Of course like a good tech I would be asking him questions and seeing what path he'd like to go down and what kind of data he's wanting recovered.

That's great! Just don't do it at your customers' risk and expense; learn using your own drives.

I would never do that! Not if I plan to run a reputable business, which is my goal. One thing I am not, is an idiot. I have 2 2TB WD drives and 2 1TB WD drives (1 of which I think has a slight mechanical issue. So I have been using one of the other 2TB drives to test the other software with.

 

[NviGate Systems]

I believe that every customer deserves the right to choose the level of care for a failed storage device. I never assume. Instead I ask questions and inform them of the risks, just like a traditional doctor would.

If you compare data recovery to medical surgery you will find many common denominators. The consultation with the patient, the explanation of the risks of each procedure, what happens if the worse should happen.

Data is probably the one thing that can take an otherwise friendly and understanding client and turn them into your worst nightmare. I've seen it before firsthand in retail years ago.

Don't be giving people favours or generalizations, straight up give them facts. If you don't have facts or have never dealt with an issue, send them directly to a lab unless they are willing to sign a waiver, just like you do before having surgery.

Let my experience be your guide.

 

[lcoughey]

@NviGate Systems That is a great way to put it.

@Larry Sabo and @fencepost thanks for the kind words

@therealcrazy8 R-studio is a good recovery program, but it should never be run against an original drive of unknown condition. Your first step should be to try and clone it...there are a few guides to using ddrescue in the resources section.

I think there is a lot of overgenralizations between Computer techs and clean room data recovery labs. Not all techs are dumb enough to open a drive and leave fingerprints and dust on the platters, as well as completely mess up the heads, making a simple recovery potentially unrecoverable, as i just received from a client who has the budget and was not informed of any choices (got one like this yesterday). And not all labs are out to charge as much as they can and refuse to communicate and advise technicians. If we take the time to communicate with our clients and each other, we can work together to give the end users the best possible service at the best possible price.

 

[labtech]

What's the best method to test if a PCB is bad?

It is a tricky question to answer. A drive's PCB is very much like a motherboard. Many components with different functions. Sometimes, a PCB may have failed electronics, but also failed/corrupt code.

In most cases, if the drive does not spin (and this in itself is tricky to determine in many cases, especially with newer technologies such as hybrid drives), then likely is a "PCB" related problem.

 

[fencepost]

Data is probably the one thing that can take an otherwise friendly and understanding client and turn them into your worst nightmare.

I'd add to that "Problems with VoIP phone systems you installed." People are much more forgiving of "Our computers are down" than they are of "Our phones are down."

 

[labtech]

Right, for us specializing in data recovery, doing it for many years, having the know-how, the proper equipment and compatible parts, sure, it is takes very little time.

I was speaking from the perspective of someone without those resources above. For them, it will be tricky, especially when often there are exceptions to the "common rules."

 

[Diggs]

Well I don't know all of Gillware's rates.

FYI - I just had a customer that had 1TB recovered for $1,000 by Gillware. (Spindle motor had failed.)