Battle Cards

For a limited time only we have produced collectible battle cards, complete with hard drive portraits and battle stats. There are 10 to collect. Some are based on common hard drives, but others are a bit more obscure.

Classic Hard Drive Battle Cards
Classic Hard Drive Battle Cards

We’ve also got plans for a few new ranges, so get these new cards while you can. These cards are not for sale so contact us if you want some.

Death Star Battle Card
Death Star Battle Card
Classic Hard Drive Battle Card
Classic Hard Drive Battle Card

iOS vs Android Secure Erasure

I’ve previously written about the difficulties recovering data from modern iOS devices. This new post by Avast(!?) shows it from another angle.  What happens when you sell an old device?

TL;DR

Because iOS uses hardware encryption on the main storage, recovery is almost impossible without the passcode. In contrast, Android phones (usually, by default) don’t encrypt the main storage. Also they allow external SD cards which may not be encrypted either. This means if an iPhone and an Android phone are sold or lost without being carefully erased, the iPhone will not easily give up the data but an android phone will. It also means if you forget your iPhone passcode you are unlikely to ever get the data back.

 

How To Ruin Your Chances Of Data Recovery

No Chance Data Recovery

Maybe the title is a bit harsh, but in the past week I have seen an unusually high number of hard drives ruined by avoidable problems. There is nothing more frustrating than knowing the data would have been recoverable if  the hard drive hadn’t been tampered with first.

Manufacturing

Hard drives are manufactured in a controlled environment. Staff wearing white overalls,  gloves, and masks, control machines which are carefully organised to prevent contamination getting inside the hard drive.

Clean Room

To prevent contamination when repairing the inside of a hard drive, it is necessary to use a cleanroom. This is a specially designed system that filters the air and keeps airborne particles to a minimum. A cleanroom is the only safe way to open a hard drive. We have one of these, which allows us to carry out the most intricate repairs without any risk of particle damage.

Damage

Before opening a hard drive for internal rework, it is crucial to confirm that there is an internal mechanical problem in the first place. For instance, our data recovery process has numerous tests we can carry out before we confirm that the problem is under the hood. Only then will we open the top cover and check for damage inside. Unlike CDs or DVDs, the internal disks of a hard drive are not designed to come into contact with normal air. Even a fingerprint could mean the difference between a successful or unsuccessful recovery. If you slip with a screwdriver then forget it.

The numbers

On a percentage basis of all the failed drives we receive (hundreds per year), we only need to go to the cleanroom with around 10%. There are likely to be far less intrusive ways into the data without ever taking off the top cover.

Even if…

I’ve lost count of the number of times I’ve been told, “It’s an internal fault. The heads are clicking.” Although some drives will click as a symptom of failed heads, there are so many other reasons to cause a drive to click that it is not a reliable way to diagnose problems.

Reasons a hard drive will click

  • Electronic fault
  • Firmware fault
  • Bad sectors
  •  Weak (but not completely failed) heads
  • Problems reading partition info

All of the problems above can be overcome without ever unscrewing the top cover. In fact, removing the top cover will only introduce more doubt to the diagnosis. If the top cover is removed outside of a cleanroom, then not only do the above problems need to be solved, but also new problems of contamination and possibly damage by tools.

(Don’t) Get the discs out

Another common wrong diagnosis is to take the disc pack from one drive and place it into a donor drive. Although this is a correct course of action for some drives, there are some serious implications. First, when the disc pack is built it is clamped together onto the spindle motor. This alignment is so crucial that if you remove one disc at a time, you will never be able to regain this alignment. This was true 20 years ago when the magnetic data was nowhere near as densely packed. Rotate the discs a fraction of a millimetre and you can wave goodbye to all the files.

It is also the case that most of the hard drive firmware is now stored on the discs, so moving them to a new donor will not help if the fault is firmware based.

Advice

If you are even considering a destructive course of action, at least get some professional advice first. You don’t need to follow the advice, but at least it gives somebody (maybe me) the option to give a warning. You don’t want to find out later that the data would have been simple to recover, if only…

European Data Recovery Partner

Just recently I was able to meet up with one of our European business partners in Holland.  The company is based in Amsterdam nd offers a national data recovery service.  Although a young company, they already have a strong market presence and are growing all the time.  Their English is excellent which is more than I can say for my Dutch.  It is always good to put a personal face behind the telephone conversations.

Data Recovery Partner
Data Recovery Partner

Spilt Coffee Liquid Damaged Laptop Hard Drive

Spilt Coffee Liquid Damaged Laptop Hard Drive

Once again we had an enquiry from a customer who was at her wits end and wanted a second opinion. She had spilt coffee on her laptop that had all her family photographs. She had taken it to PC World where she had originally bought it. They advised her to use their internal recovery process, and sent it off for analysis. She was eventually told that there was no chance of recovering her data from the liquid damaged hard drive. But fortunately for her, against the advice she received, she decided to search online for another data recovery company. This is where we came in. Although the hard drive was covered in sticky coffee and damaged by the liquid, we were able to overcome the problem and recover all of the data for the customer. Once again another happy customer as a result of a second opinion. This is becoming a habit.

2TB Western Digital 2nd Opinion

Hard Drive Data Recovery

Case Study

Drive: WD20EARS-00MVWB0
Problem: Clicking. Previously diagnosed by a third party as unrecoverable due to media damage.

We are always keen to test our services against our competitors, just to make sure we’re still up there with the best of them. When we heard from one of our service partners (ABC Rawpaw) that one of the top ranking data recovery companies on Google had given up on a customer’s drive, we were curious to take a look. It’s also worth mentioning that the client had paid £234 to the other company, despite them recovering no data.

Third party report

We received a copy of the original diagnosis report with the hard drive. The report mentioned incorrect head alignment and also damage to the head assembly preventing the drive from functioning correctly. It also stated that they had subsequently replaced the old heads with new ones but due to suspected disc damage, recovery was unsuccessful. A plausible enough report, but was it accurate?

Booking in

The drive was booked into our process. We noted that the warranty seals had been removed and the top cover showed signs of being previously opened. Whenever we receive a drive in this state, we always want to make sure the drive has been rebuilt correctly. We need to do this in our cleanroom to prevent any contamination getting in from the air. Our office is clean, but it’s no place to open a hard drive.

Findings

The inside of the drive was examined in our cleanroom and found to be spotlessly clean. There were no signs of disc damage or particles, but we did notice that the screws were not factory-tight, suggesting previous work had taken place. Happy that there was nothing untoward inside the disk, it was rebuilt for further diagnosis. The drive was powered on and initially failed to reach a ready state. This is common for Western Digital drives as they often have firmware corruption. We used our proprietary firmware tools (and John’s keen knowledge) to repair some of the firmware area of the drive which then allowed the drive to reach a ready state and allow access by our imaging tools.

Imaging

We did find that one of the heads was not performing within spec, but we were able to work around this, again using specialist tools. After imaging the majority of the drive we replaced the heads to allow better access to the missing areas. This helped improve the amount of successfully recovered data.

Result

We ended up with over 800GB of data recovered from the drive in good condition, even though one of the biggest companies (according to Google) was unable to get anything! This is not the first time we’ve recovered data where others have failed, but we always wonder how many people give up on ever seeing their data again, even though it may be recoverable with the right knowledge.

In the end we had an extremely happy customer (and service partner), and were able to test ourselves against one of the biggest data recovery firms in the UK. A great result for us that shows the importance of getting a second opinion.

Why Choose Dataquest

Safe Data Recovery

When your hard drive has failed, where do you turn for help? In many cases the supplier or manufacturer of your computer or hard drive are not the best place to deal with your data loss. Also your warranty only covers the hardware and not your lost files.

So why choose us at Dataquest ?

With over 15 years of experience we are very familiar with all types of hard drive failures. Unlike many other companies our costs are fixed and based on how quick you wish to have your recovered data returned. Like many other companies we offer a free diagnosis, but unlike many others this does not determine eventual recovery cost but decides wether the hard drives problem is mechanical or not. We use the latest hardware and techniques to produce the best results possible.

On a more personal note customer service is a large part of what we do and understanding customer needs is paramount. We will in many cases go beyond what other companies would deem cost effective when recovering lost data. We use all our acquired knowledge to exhaust all possibilities.

We are also partnered with many IT support companies around the UK, to enable us to connect with customers who would other wise have not known of our services.

PGP Whole Disk Encryption

What is Hard Drive Encrytion

PGP WDE is an encryption tool that uses a boot loader installed on an internal hard drive. This utility launches before Windows and prompts the user to input their password. Without the password you cannot gain access to the data.

This utility is widely used by IBM personnel and is now part of IBM’s  process that has to be adhered to by end users. Prior to this utility IBM hard drives were restricted access by a low level ATA hard drive password setup  by the internal IBM IT department.  As computer systems advanced and maybe as a result of a reduced IBM IT department,  IBM adopted the user friendly PGP encryption process.

We regulary receive these hard drives from IBM, and we find that the major problem is related to the PGP boot sequence. PGP does not like a hard drive that is suffering from bad sectors, especially within the partition table. It results in the user being unable to load their access code on startup, or in some cases the code is accepted but does not boot correctly due to bad sectors further along.

We have a lot of experience recovering data from PGP whole disk encrypted hard drives and as a result our data recovery process has a very high success rate.

Apple Mail Blank Screen on Rebuild in Mavericks

Portsmouth & Southsea Mac Support

I had an issue in searching for content within Apple Mail. Every time I tried to search for any particular phrase the Mail application crashed and closed instantly. So I decided to Rebuild the Mailboxes. Before doing this I checked that my latest Time Machine backup had carried out successfully. (It had.)

Once confirmed I clicked Rebuild from the Mailbox drop down menu. Instantly all the mail disappeared and I was left wondering whether it was doing anything. I was patient and waited to see what would happen and sure enough after a couple of minutes all my mail re-appeared intact.

What worried me was that there was no indication that the rebuild was being done. No progress bar or spinning wheel, just an empty window. If I had been impatient I could easily have force quit the rebuild process thinking the application had crashed. That would have resulted in an Apple Mail restore to be sure.

On the Apple Website details are very basic. So, be patient, go for a walk and then come back and see if the rebuild worked.

 

Mavericks (10.9) Western Digital Data Loss (UPDATED)

Portsmouth & Southsea Mac Support

We’ve been hearing reports of data loss with certain external hard drives after an upgrade to the latest Mac operating system Mavericks. The blame seems to fall to the disk management software that Western Digital bundle with their external hard drives. In response WD has removed WD Drive Manager, WD Raid Manager, and WD SmartWare from their website until they figure out the problem.

We have already had first-hand data recovery enquiries for such disks, so it remains to be seen if these issues can be resolved, or if the data is permanently damaged. One notable case involved a 6TB RAID with two 3TB drives in a mirrored array. After the update to Mavericks, the volume appeared as an empty 3TB drive.

It’s worth noting that even if you use a Western Digital RAID drive set as a mirror, this problem can still cause data loss. Both disks in the mirror are susceptible to the same problem. Remember that RAIDs need to be backed up even more than single disks!

More info and links at MacRumours

Update – 8-11-2013

We’ve now completed the recovery process for one of these hard drives. It appears that the drive we received had been formatted to an empty MyBook volume. The way the Mac filesystem stores data means although most of the files can be recovered, it is not possible to restore the original file and folder structure. This causes issues for files like InDesign which link to external files by name when you add graphics to the document.

We’ve not yet seen enough of these disks to know if this is a common outcome for all affected disks.