Go Back   Hardware Canucks > PC BUILDERS & TWEAKERS CORNER > Troubleshooting

    
Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old November 30, 2008, 12:08 PM
Top Prospect
 
Join Date: Nov 2008
Location: Toronto
Posts: 109
Default Data Recovery

I was hoping to find an article on data recovery in "Guides & How-to" Section.
I couldn't fine one. I no almost nothing of data recovery.
I'm trying to learn this skill.
Can you help?
Reply With Quote
  #2 (permalink)  
Old November 30, 2008, 04:52 PM
Chilly's Avatar
Hall Of Fame
F@H
 
Join Date: Sep 2007
Location: Ontario
Posts: 2,593
Default

GetDataBack - Data Recovery Software

If the drive is still detected by the motherboard its fairly simple. Use a program like the above to scan the drive, then recover what files are needed. If the drive is okay but theres PCB damage(PCB lit on fire, seems to be the most common reason for PCB damage), its still possible to fix.

You would need to find an EXACT revision drive, thats the hard part, can't be simply the same drive, it has to be the same revision (ver. 1.02G for example). Once you source one(I usually end up buying used on forums, very useful) you swap the PCB's and boot into windows and do same as above.

DO NOT FORMAT/PARTITION or TOUCH, MODIFY, ETC the drive in anyway once you receive it/before starting work on it.

If requested I'll try and whip up a how to guide for both, I'd need to source a PCB damaged HD, but that shouldn't be too hard.
Reply With Quote
  #3 (permalink)  
Old November 30, 2008, 05:18 PM
Hall Of Fame
F@H
 
Join Date: Jan 2008
Location: AB
Posts: 1,212
Default

Data recovery varies hugely depending on how the data was lost. If you want to recover files from a botched operating system, the procedure is relitively easy, however if you've formated the drive or are trying to recover deleted files its somewhat harder. Then there are files that misteriously disappear, and finally data that is on a damaged hard disk.

Formated and deleted files typically require specialized software and are only really viable if you immediatly stop any writes on the hard drive, as after a file is deleted there is a chance of another file being writen overtop it. after that, its impossible to get the data back. Trying to get files back in this state is very unreliable and normally take a huge amount of time. Success is very dependant on the time between the loss and recovery, the software the users skill and the time the user is willing to put into recovering the files. Sometimes recovering deleted files works like a charm, most other times... not so good.

Botched operating system file recovery is reletivly easy as the file system is still intact and there is little danger of loosing the data inadvertantly. you could think of this problem as having your data in a storage room, but the door is busted an you cant get in... the data is there, and safe, but you have to find another way in. There are many different ways to get this data, my favourite is a "live" operating system, what this is, is an operating system for example, Linux, which does NOT need to be installed, and is run exclusivly from your dvd rom. this is safest because there is no actual writing to disk, thus, no possible data loss.

Another way, if your not so knowlagable with the live operating systems, and dont care to learn, is to remove the hard drive from the computer, and install it as a secondary drive on another computer. the drive will show up as a storage drive, and since the file system is intact, getting the data is as simple as drag/drop to the other hard drive, or burn to dvd... this is assuming the data is NOT in a protected folder. if it is... well try an fix the other operating system.

data that misteriously dissapears... this is very very rare, but sometimes occures. Most often, if you think the data dissapeared, its not gone, but moved. Do a thorough search of your pc and storage drives. If it still doesnt show up, find a program called "spacemonger" This utility is not ment for data recovery, but to give you a "visual" portrait of the contents of your hard drive (very handy for finding out where all your hard drive space went when you run out) It also is the only piece of software that i've found that will also find lost directories; since the hard drive is visual, you just click on the lost files, copy paste them to a correct directory and delete the lost one. (what i mean by lost is that it no longer shows up in windows.)

Physically damaged hard drives are often impossible for the average dude to recover files from. Experts can get the files, so long as the actual platters the data is on is not damaged. If the drive is corrupt, there are verious utilites that can scan the disk and mark off bad sectors, do little things that may get the drive to work long enough to remove the data, but again, it really depends on the state of the drive.

I commend you on your desire to learn, data recovery is very very rewarding when your good at it. Its ALWAYS a challange. However... if your still a total newb, dont try and recover "very important" data yourself, the chances of you botching the recovery are very high. Untill youve got some experience recovering data, leave the important stuff to the professionals. I dont mean you shouldnt learn, but learn on stuff that doesnt matter if you get it or not. Or of course you cant afford the professionals, so the data is lost weather you try or not.

There are many different techniques to data recovery because of the many different ways to loose it. Are there any perticular situations you want to learn about the most?
__________________

vista 64 on these rigs
Q9450 @ 3.5Ghz | E8400 @ 4.2Ghz
8gb Muskin Redline. | 2gb Kingston Hyperx
________________________________|_________________ ______________
EVGA 780i FTW ----\--||___||--/---- EVGA 780i SLI
Antec TP Quatro 1000W \ :==^==: / Antec TP Quatro 850W.
Nvidia 9800 GX2 X 2 SLI \|--o--|/ Nvidia 8800 GTS X 2 SLI
1X 500GB Western Digital. \_____/ 3X 150GB WD RAPTOR RAID-0

Last edited by tzetsin; November 30, 2008 at 05:52 PM.
Reply With Quote
  #4 (permalink)  
Old November 30, 2008, 05:34 PM
Chilly's Avatar
Hall Of Fame
F@H
 
Join Date: Sep 2007
Location: Ontario
Posts: 2,593
Default

Quote:
Originally Posted by tzetsin View Post
Lots of text
WOW, wall of text much? It was barely readable at 2560x1600, I can only imagine how hard it would be to read on a more normal screen. That said, lots of good information in that post(yes I read it all it was just barely readable at my resolution), just needs to be fixed to be readable. I've been doing data recovery a couple years, I started learning/doing it by accident actually. I can recover almost anything as long as the physical drive isn't damaged or the file's been overwritten.

With the proper tools, as long as the info hasn't been overwritten it can be brought back regardless of the damage to the filesystem.
Reply With Quote
  #5 (permalink)  
Old November 30, 2008, 05:55 PM
Hall Of Fame
F@H
 
Join Date: Jan 2008
Location: AB
Posts: 1,212
Default

Quote:
Originally Posted by Chilly View Post
WOW, wall of text much? It was barely readable at 2560x1600, I can only imagine how hard it would be to read on a more normal screen. That said, lots of good information in that post(yes I read it all it was just barely readable at my resolution), just needs to be fixed to be readable. I've been doing data recovery a couple years, I started learning/doing it by accident actually. I can recover almost anything as long as the physical drive isn't damaged or the file's been overwritten.

With the proper tools, as long as the info hasn't been overwritten it can be brought back regardless of the damage to the filesystem.
lol wuddaya want me to do? make pictures?

Download Opera web browser, its got an easy zoom feature that helps when you cant read stuff. My res is 3840 x 1024 an i can read it just fine.
__________________

vista 64 on these rigs
Q9450 @ 3.5Ghz | E8400 @ 4.2Ghz
8gb Muskin Redline. | 2gb Kingston Hyperx
________________________________|_________________ ______________
EVGA 780i FTW ----\--||___||--/---- EVGA 780i SLI
Antec TP Quatro 1000W \ :==^==: / Antec TP Quatro 850W.
Nvidia 9800 GX2 X 2 SLI \|--o--|/ Nvidia 8800 GTS X 2 SLI
1X 500GB Western Digital. \_____/ 3X 150GB WD RAPTOR RAID-0
Reply With Quote
  #6 (permalink)  
Old November 30, 2008, 07:44 PM
Chilly's Avatar
Hall Of Fame
F@H
 
Join Date: Sep 2007
Location: Ontario
Posts: 2,593
Default

Quote:
Originally Posted by tzetsin View Post
lol wuddaya want me to do? make pictures?

Download Opera web browser, its got an easy zoom feature that helps when you cant read stuff. My res is 3840 x 1024 an i can read it just fine.
I see you fixed it . I didn't mean the text was too small , rather that it was an unbroken wall of text which is barely readable, because, it was unbroken. My point was even with the browser taking up my whole screen there was barely enough line breaks to make it readable, that I can only image how bad the wall of text would be on smaller resolutions.

That being said, you fixed it, its much more readable now .
Reply With Quote
  #7 (permalink)  
Old December 1, 2008, 08:58 AM
Top Prospect
 
Join Date: May 2007
Location: Alliston, ON
Posts: 75
Default

I just recently had an issue with a second hard drive that had data on it I needed. It had not been formated but improper partitions were forced on it, not allowing me to access the files.

I used Data Doctor NTFS to recover all the files. It's a decent program and the cost was just slightly higher then one hour of labour to have the local shop do it for me. There is a free demo which will get you as far as to see the files but you have to purchase it to actuall save them. The program is fairly basic and lacking in the user friendly category - everything is in picture format so figuring out whats what is annoying.
__________________
DFI LanParty Dark X38 | Q6600 @3.0 | Mushkin 2x2gb| 6950 2GB | Audigy 2
Reply With Quote
  #8 (permalink)  
Old December 1, 2008, 03:34 PM
Hall Of Fame
 
Join Date: Jul 2008
Location: Canada
Posts: 1,221

My System Specs

Default

I can vouch for GetDataBack - it recovered with 100% success 2 of my 60 GB HDD that had their partitions wiped - Easy to use and fast and WORTH the money spent ! Whatever you do, don't use SPINRITE ! stay far away from it - Always use software that will recover your data to a different drive and NOT attempt to recover on the same drive (a big no-no) and maybe Mr. Gibson should have thought about that.

2 programs I recommend and have used myself both after testing many:

* GetDataBack
* ByteBack
Reply With Quote
  #9 (permalink)  
Old December 1, 2008, 05:19 PM
NyteOwl's Avatar
Allstar
 
Join Date: Aug 2008
Location: Nova Scotia
Posts: 905
Default

I've noticed sometiems the forum seems to lose line/paragraph breaks. You also need to be careful in doing recovery that simply accessing the drive doesn't overwrite something. Specialized software and hardware are available for this type of data recovery, and are widely used in digital forensics.
__________________
Obsolescence is just a lack of imagination.
Reply With Quote
Reply


Thread Tools
Display Modes