Dual boot Ubuntu & Windows

We needed a dual boot Ubuntu and Windows 7 setup today, which had a few stumbling blocks.

Problem 1. – GPT Partition

Installed Windows 7 on half a 500GB drive and left 250GB free for Ubuntu. When booting to install Linux, it didn’t see Windows 7 due to the GPT partition that Windows 7 uses by default.

Solution 1.

Used Gparted from the Linux live cd to format the drive with an MBR partition layout. (Note:- This destroyed the original Windows installation.) Then installed Windows back to the drive. This time, Ubuntu saw Windows 7 during installation and was happy to install alongside it.

Problem 2. – Default Windows Dual Boot

Although the machine was now happily dual booting, it would default to Ubuntu, regardless of which changes i made to the grub config. Startup manager would make changes to grub, but it would still default to Ubuntu.

Solution 2.

Nariub on the Ubuntu forums suggested changing the os-prober number, so it loads that first. This puts Windows at the top, making it the default. Perfect for what we needed.

The command for this, which worked for us on Ubuntu 11.10 & Windows 7:

mv /etc/grub.d/30_os-prober /etc/grub.d/09_os-prober
update-grub

So now we have the machine booting as we want, with each operating system happily taking up half of the 500GB drive.

Stop Password Expiration In Windows 7

My brother has just brought me his laptop to look at after forgetting the login password. It was frequently asking him to change the password, and one day he changed it and then forgot it. I found a simple command to stop the password from expiring:

First run Cmd (Command Line) as Administrator (click Start -> and type cmd. Right click on Cmd and choose “Run As Administrator”). If you followed correctly this should give you a black command line window with white text.

Then type:

net accounts /maxpwage:unlimited

And press return or enter.

It should congratulate you, or say successful (can’t remember the exact wording).

The password should then last forever, or until it is changed manually.

Note: It is good practice to change passwords regularly, however outside of corporate IT land can be a huge hassle. Just ask my brother :-)  

Seagate Head Crash

This Seagate ST31000333AS 1TB drive suffered a head crash resulting in severe media damage. The contamination caused by the damage can be seen on the disc surface as well as the internal filter. The filter is usually white but is now silver metallic in colour as a result of the contamination. The customer did not have any indication that this was going to happen.

Seagate Head Crash ST31000333AS

Seagate Head Crash ST31000333AS

 

Seagate Head Crash ST31000333AS

Seagate ST31000333AS Filter

Mac Data Migration

If we recover a good amount of your data, then the easiest way to get your Mac running again is using the Migration Assistant – a standard Apple utility included with all modern versions of Mac OS X.

The process for restoration varies a little bit depending upon how your Mac is currently set up.

Best Case Scenario:

If you have a new hard drive with a fresh system installed, and have not yet clicked through the Setup Assistant screens follow this guide. >>>

2nd Best Case Scenario:

If you have a new hard drive and have set it up with a username you will need to follow this slightly more complicated guide. >>>

Mac migration to a previously setup system

Migration Assistant

Migration Assistant

So you have a Mac which boots up to a desktop as normal, but without your recovered data. This is not quite ideal, and gives us a few things to sort out before the migration.

Arrange.

You will first have to backup any newly created data. If something goes wrong with migration then you don’t want to lose your new data. If this new system has been created with the same username as the old one, you will not be able to import the old user without renaming which is not advised. After you have backed up your files, you could open “System Preferences / Users & Groups,” (“Accounts” in pre Lion systems) and rename the current user to something else. This will allow you to transfer your original user account and Applications into the correct locations on the new system. If your system is set to automatically login to a user account (ie. doesn’t require a password when you boot) then you will need to turn off “Automatic Login” setting under Users & Groups to allow you to access the old user account.

Fingers crossed you should be ready to migrate.

Connect.

Connect the new hard drive to your Mac. If it’s a desktop 3.5” drive then plug in the power adapter and switch it on. If you are restoring to a laptop then it would be a good idea to have the AC adapter plugged in, as this can take a while.

Migrate.

Go to “Applications / Utilities” and launch “Migration Assistant”. Choose “From another Mac, PC, Time Machine Backup or other disk.” Then choose the second option; “From Time Machine Backup or other disk.” You should see the orange icon for the external drive, labelled with your job number. Click on it and then click continue.

Select.

You can choose to migrate everything, or be a bit selective. You cannot choose individual files to migrate, only whole user accounts, Applications, Settings, and other files. Make your choice and click next.

Wait.

The migration itself can take a while depending how much data you have. Once complete you can boot into the Mac and it will feel very familiar. As if nothing ever failed. If you backed up any files from the new system then now would be a good time to load them back on.

Migration Assistant generally does a good job of transferring your data and software. If any software installs files into the Mac system in unusual locations it may need to be reinstalled, but most Applications like Microsoft Office and Adobe Photoshop will be transferred correctly.

Mac migration to a freshly installed system

So you have a Mac with a fresh system but no data. This is ideal, as we can migrate the recovered data onto the Mac with a minimum of fuss. This will transfer your whole user account and most Applications into the correct locations on the new system. When you reboot, the Mac will be back how you left it when the hard drive failed. Perfecto!

Connect.

Connect the new hard drive to your Mac. If it’s a desktop 3.5” drive then plug in the power adapter and switch it on. The Mac should be off at this point. If you are restoring to a laptop then it would be a good idea to have the AC adapter plugged in, as this can take a while.

Power.

Power on the Mac, and wait for it to load the setup assistant. You will be asked a few questions so answer as necessary.

Migrate.

Choose “Migrate from another disk or Time Machine backup,” and then click next. You should see the orange icon for the external drive, labelled with your job number. Click on it and then click continue.

Select.

You can choose to migrate everything, or be a bit selective. You cannot choose individual files to migrate, only whole user accounts, Applications, Settings, and other files. Make your choice and click next.

Wait.

The migration itself can take a while depending how much data you have. Once complete you can boot into the Mac and it will feel very familiar. As if nothing ever failed.

Setup Assistant generally does a good job of transferring your data and software. If any software installs files into the Mac system in unusual locations it may need to be reinstalled, but most Applications like Microsoft Office and Adobe Photoshop will be transferred correctly.

 

Dealing With RAW Data

Raw Data Recovery 1

Some Raw Word documents

What is RAW data?

Raw data is what we get when we recover files without their folder and file names. Instead of a My Documents folder, with photos and documents arranged into separate folders, what we get is a folder named JPEG for example, with thousands of consecutively numbered jpg files. The same with office documents, you would get a folder with thousands of doc, xls, docx or xlsx files.

These raw files will be fully usable and contain all the same info that they did originally. You will still be able to open them, edit them and save them, they are just unnamed.

Why is this data in RAW format?

When we recover data, we always prefer to get it back in the original structured form. When data has been deleted from a Mac, or when a hard drive has been reformatted and then partially overwritten, it can be impossible to rebuild all of the data in structured form, as the structure has been overwritten or damaged. This is when we opt for RAW files.

With a RAW recovery, what we are basically doing is searching the whole hard drive for files in known formats. This means we usually get a lot of office documents, jpg images, photoshop psd files and some others. If we need to find an unusual file type then we need a few sample files to be able to generate the correct scan info. RAW recovery is not always possible for every type of file. An example is Apple Garageband project files, which are actually just folders with the name .band on the end. On the mac, these folders are treated as packages, with folders and files inside that you don’t usually see,  (If you right click one and choose ‘Show Package Contents’ you will see what I mean,)  but for the purposes of RAW recovery we cannot get back those files. (We would however get back the RAW AIFF files and recordings from within the projects. It’s not ideal but may be better than nothing.)

What to do with the RAW files

If there is only a small number of files, then you can manually open them all up, see what’s inside and then rename them to something useful. Luckily, for certain file types, there are other ways to make sense of them. It’s called meta data, meta tags or EXIF data.

This meta information is stored inside the files, so even if the file and folder names are lost, we still have the tags.

A brilliant piece of software called Amok EXIF sorter will plough through thousands of jpg files, read their date tags and then place them in dated folders. It can also do other fancy things with tags, but default setting will create a decent structure.

For music, iTunes or any other music manager will usually rename the files in the library based on the artist and album tags. In iTunes, just make sure it is set to: ‘Keep iTunes media folder organised.’

Document files such as doc, docx, xls and xlsx also have some useful tags that we can use to make sense of the masses of numbered files.

Raw Data Recovery

Raw File Tags

In Windows, set the View to ‘Details’ and you should see a series of headings such as Name, Date Modified, Type, and Size. Date modified will show the date that the files were recovered so is useless for this task, however if you right click on this heading you will see other available columns, with ticks beside a few of them. The ‘More…‘ option at the bottom contains loads of tags that we can use to sort the data.

Good headings for office documents are Author and Date last saved. You can experiment and see if any of the other tags are more useful to your specific data.

Good headings for jpg files are Date taken (Date picture taken) and Camera model. Again, there are others which may be useful.

Raw Data Recovery

Raw Files Showing Author Tag

LaCie 5Big RAID 6 Recovery

I will start by saying that we can, and have, recovered data from these drives. As with all RAID recovery we carry out, we never use the original controller or drives to access the data. We image the drives on an individual basis and then work on these drives to rebuild the RAID using a form of RAID emulation. The most time consuming part of this type of recovery s determining the proprietary RAID settings that the manufacturer has used.

Due to the complex nature of these NAS devices, we always recommend they are backed up to another form of media. Although recovery is possible, it can be expensive and relatively time consuming. Also if the unit is powered on and rebuilds are attempted then the recovery can be made more complicated or even impossible.

A Little Background

The LaCie 5Big NAS device contains five hard drives and allows for a number of different configurations. One of these configurations is RAID 6, which works in much the same way as RAID 5, but with an additional parity stripe. This additional parity stripe uses an algorithm which requires a relatively high processing overhead, so RAID 6 has rarely been seen in consumer level devices. The low cost of processing means that RAID 6 is now a viable option for embedded NAS devices such as the LaCie 5Big.

The advantage of RAID 6 over RAID 5 is that with 5 disks it can theoretically cope with two disk failures. This gets round an increasingly common problem with large capacity RAID 5 arrays where if a second disk fails whilst rebuilding a failed disk, there should be enough parity information to continue the rebuild successfully.

If you have a failed or broken LaCie 5Big then use the contact details on the right to contact us. Alternatively you can leave a comment here and we will get back to you.

Seagate Barracuda 7200 Data Recovery

Seagate Barracuda 7200 Data Recovery

Seagate Barracuda 7200 Data Recovery

Seagate Barracuda drives are often thought of as premium quality hard drives, which is largely true. The build quality of these drives is solid and they feel heavy and look good when compared to some other drives. They are however still susceptible to the same failures and problems which affect other hard drives.

Firmware Faults

A common problem with Seagate Barracuda drives is firmware corruption (sometimes known as SA Corruption). This is something which can be fixed without taking the drive apart, however sometimes the extent of the corruption can prevent it from being repaired at all. The usual faults are corrupt log files which prevent the drive from performing it’s usual startup routine. Once corrected, the drive can usually be accessed for long enough to extract the required data using a controlled imaging process. Sometimes further repair is required in order to continue extracting data. Corrupt firmware can be an indication that there is an underlying problem with the drive. For example, if the drive is writing hundreds of bad sectors into the S.M.A.R.T log, it is likely that there is a problem with either the heads or the disk media which is causing the errors. Although the S.M.A.R.T counters can be reset to zero, they will quickly fill up again. The best option in this case is to recover your data and scrap the old drive.

Hardware Faults

Seagate drives have been used in G4 and G5 Macs and various other types of PC, such as Packard Bell and Compaq machines. We now also see Seagate Barracuda drives which have been used in external USB / Firewire enclosures. This opens up a new problem which these drives were not originally built to withstand. ie. Shock. External drives can be shocked, either by being knocked over or dropped. If the drive is reading or writing at this time it could cause a head crash, as it would with most other brands of drive (although modern 2.5″ laptop drives have protection for this type of shock).  If the drive was not in use at the time of impact, the motor can still become seized and fail to spin up again. The motor spindle is attached to the hard disk casting, so the best way to gain access to these types of drives is by transplanting the disk pack into a known good casting (with a good motor).

Seagate Barracuda drives are also prone to electronic damage caused by faulty power supplies or having the power connector incorrectly inserted. It is often necessary to repair the damaged PCB, as it contains unique information which would not be present on a donor part.

We have had a lot of success recovering data from these hard disks and (as long as they haven’t been dropped or knocked) we can usually recover then externally without moving into a cleanroom.

To make an enquiry for data recovery from Seagate Barracuda drives, click on the contact us link in the sidebar on the right.

LaCie Big Disk Recovery


LaCie Big Disk

LaCie Big Disk

Over the years we have seen stacks of LaCie Big Disks (and quite a few LaCie Bigger Disks too). With their designer looks and an abundance of different interfaces, it is no surprise that they are so popular. There is however one main reason that people send us their drives, and that is because they are not working.

Size Matters

Those of you familiar with hard drives will be aware that these LaCie drives are substantially larger in physical size and storage capacity when compared to a standalone hard disk drive. The reason being is that the LaCie Big Disk contains two hard disks (and the LaCie Bigger Disk contains four hard drives). Of course when you attach the drive to your computer you only see one volume. This is due to a RAID controller inside the LaCie drive which allows for multiple disks to appear as one large, usable disk. The main advantage to this setup is that read and write speeds can be very fast, as the reads and writes are spread over multiple disks. Another bonus is that the capacity of the volume is as large as the two drives. So two 500GB drives will give you a 1TB volume. There is however a massive downside to all of this clever RAID business which boils down to some simple mathematics.

Failures

The larger the number of hard disk drives used in this particular striped (RAID 0) setup, the more chance that one of them will fail, therefore a higher chance that you will lose all of the data stored on these drives. The way a RAID 0 stripe works is to distribute the data across the disks at block level. The amount of blocks used for each stripe is determined by the RAID controller and varies between different manufacturers. What this means, from a data recovery point of view is that in order to extract data from a LaCie Big Disk, you need to figure out the block size, and read the data from both drives in sequence, in order to extract usable data. This sounds a lot more complicated than it actually is and is often explained with the analogy of a filing cabinet.

Imagine the LaCie Big Disk is a filing cabinet. The cabinet has two drawers (disks) with an index in the first drawer. Now imagine that when you save a file into the cabinet, all of the odd numbered pages are put into the first drawer, and all of the even numbered pages are put into the second drawer. Once saved, the files location is stored in the index. In order to read back the saved file, it must first be collected from the relevant drawers, one page from each drawer at a time, and arranged into the correct order.

This is all great until a problem occurs. What happens when one of the drawers becomes damaged and can no longer be opened. Sure you can access all of the pages in the other drawer but having every other page is not much use to anybody! So until you can access both drawers, the documents are worthless.

Special Hard Drives?

The hard drives in a LaCie Big Disk are much the same as any other hard drive on the market. This means they are just as likely to have the same failures as a standalone drive. They suffer from electronic problems on the PCB, firmware corruption and also internal component failure and head crashes. These are problems which need to be overcome before any attempt at a recovery is even possible.

Aside from the usual hard drive problems, we have also seen other problems such as failed power supplies or damaged circuit boards within the LaCie Big Disk, which prevent access to the stored data.

This is why we have spent a lot of time researching the process of recovering data from RAID systems such as the LaCie Big Disk. We follow the same precautions with RAID as we do with single volume drives.

  • We make binary images of all of the individual hard drives on a read-only basis to protect against drive failure.
  • We don’t use the original hardware to read the RAID data, as this may be part of the problem.
  • We never write the recovered data back to the LaCie Big Disk, as this would prevent any further recovery process if it was required.

As with all data recovery, the most important thing to remember is that any attempts to access the data without following strict precautions could result in the data being either lost forever, or extremely expensive to get back.

The best advice is to keep these drives backed up as regularly as possible to avoid future headaches.