I need to access data from Raw hard disk
January 26th, 2020
Testdrive
icare data recovery
stellar pheonix
& now am trying easeus , please guys i need help with this , i bough my passport 1tb wd & i want to recover data on it I also read that this is due to corruption of file system & there’s some softwares which can rebuild or rewrite this filesystem & then get hdd to work What do experts here say ?! Thank you very much guys for your time !
get “Hard Disk Senti” and check the drive’s health 1st
then try a partition mgr (easeus may tell you) to see if it ID’s the partition type
or try Acronis or Paragon (edited)
is the drive encrypted ?
no its not encrypted , i’m no on easeus data recovery wizard professional & running intelligent searching it failed to identify file system type its shown like this H: (UNKNOWN) capacity 931.51 GB information WDC WD10EARS-00MVWB0 ATA BUS
get “Hard Disk Senti” and check the drive’s health
to be sure you are working with a good drive
also try Acronis or Paragon partition mgr’s and see what they say
all partition mgr’s are no created equal
you can also try WD’s diagnostic utility
http://support.wdc.com/product/download.asp?lang=en
well I installed Hard disk senti the drives health & tempretaure are excellent with green check mark health is 98 % and temp is 40 % it says only
The drive found 1 bad sectors during its self test.
There are 1 weak sectors found on the disk surface. They may be remapped any time in the later use of the disk.
At this point, warranty replacement of the disk is not yet possible, only if the health drops further.
It is recommended to examine the log of the disk regularly. All new problems found will be logged there.
No actions needed.
install the aplication called get data back and from there restore the data
health is 98 %
1 weak sectors found on the disk surface
if this is at the start of the disk, they may be causing all or part of the problem
inside arack
you mean an enclosure ? a portable drive ?
try WD’s diagnostic utility and see what that says
or try Acronis or Paragon partition mgr’s and see what they say
all partition mgr’s are no created equal
do you know what the disk was formatted in (MBR or GUID (GPT))
what OS are you trying to read the disk with ?
Hiren’s BooCD has recovery & partition apps on the disk
get Hiren’s and boot from it to bypass windows and see if the disk can be ID’ed or read that way
I have 1 TB green caviar WD it was inside arack its my book essential
Without getting the original enclosure fixed, Or shelling out $1400 for professional data recovery, You can probably
forget about it! I’ve had a my book essential myself a while back (2TB version) and I wanted to make it an internal at some point, When I did that, The data became completely inaccessible (It was all good tho as it was used strictly for backup) anyways, Out of curiosity, I attempted to use a few data recovery apps, But none of em managed to find the data, Then I digged deeper and inspected it with a hex editor, Which made me realize the data was appearing as random junk (Or in other words, Encrypted) So I inspected the USB bridge of the original enclosure (I checked every chip with a magnifier, Even googled some of em) and at the end, I discovered that the USB bridge had a hardware encryption chip (Which automatically encrypts/decrypts the data, Without any user interaction!) odds are that it’s the same in your case (Given the series) but you could look into if in doubt.
To sum it up, If this is indeed the issue, Then as I said before, You really don’t have many options^
Better keep backup next time – Don’t underestimate it!
Without getting the original enclosure fixed, Or shelling out $1400 for professional data recovery, You can probably forget about it!
but i havent encrypted anything + i dont have the enclosure now , is there’s any way i can get the data of my harddrive since i think that the problem has something to do with power problem & therefore lead to the raw thing so , do I have anychances !! ?
you mean an enclosure
yes its my book essential but the enclosure rack had an increased voltage so the HDD wont power so I got it out of the rack & powered it on using sata cable like default harddrive & it powered on & was recongnized by windows 7 but in the raw state , whenever I try to access it it says format thing , & i didnt of course do you know what the disk was formatted in (MBR or GUID (GPT)) what OS are you trying to read the disk with ?
I think its MBR & am trying to read it with windows 7 , I tried ubuntu 10 but it didnt work , I read about linux live cd thing that it helps to fix it but I havent yet , I have hirens boot cd 15.0 but I need instructions working with it , cause i’m afraid i might do anything wrong with it
WD's diagnostic utility
can u give me link to this utility since i cant find it , i have wd smart ware only installed
here is some info from paragons partition mgr Local Disk (H
Local Disk (H
Volume letter:
(H
Type:
Primary
File system:
Not formatted
Partition ID:
0x07 NTFS
Volume Size:
931.5 GB
Partition size:
931.5 GB
Activity:
No
Hidden state:
No
can u give me link to this utility since i cant find it
start here
http://support.wdc.com/product/download.asp?lang=en
i dont have the enclosure now
try emailing WDC
had an increased voltage
if it fried the enclosure it may have also fried the drive PCB
but i havent encrypted anything
Whether you’ve manually encrypted your data or not is completely irrelevant!
As I was saying before, It’s quite possible that the original enclosure had an automated hardware encryption/decryption chip as there was in my own mybook essential. If data recovery apps can’t find
your data at all, Then it’s probably is the case. There’s another way to get this checked too, You could
use a hex editor to view the HDD’s sectors, If you can spot some ordinary text in there, Then it’s all good, But if it all appears as random data (With no ordinary text whatsoever) then it’s encrypted.
if it fried the enclosure it may have also fried the drive PCB
I disagree, Fact is the HDD is working & recognized.
If the PCB was fried, It wouldn’t be recognized at all!
PCB was fried, It wouldn't be recognized at all!
sorry guys for this stupid question but what is the PCB & is it something in the HDD board , I know about regular harddisks that have ( media , board )
PCB was fried, It wouldn't be recognized at all!
sorry guys for this stupid question but what is the PCB & is it something in the HDD board , I know about regular harddisks that have ( media , board )
PCB is the board itself (printed circuit board)
There can also be a separate PCB in hard drive enclosures to handle power/data distribution via the USB.
PCB = Printed circuit board.
There is one on the HDD itself of course and it’s suggested that there may be some encryption hardware on the PCB that was in the enclosure.
Diskgetor is a recovery app that might be worthy a try..
http://www.google.com?t=14820058&highlight=
hex editor to view the HDD's sectors,
I used hex edior that what appeared http://s154.photobucket.com/user/specter_esawy/media/Untitled-1.png.html
Thank you guys for discussing th PCB , so what I realise now is the the one at the enclosure is gone while the main PCB is operating ! Diskgetor is a recovery app that might be worthy a try..
I will give it atry
hex editor to view the HDD's sectors,
I used hex edior that what appeared
The pic is way too small for me to make anything out of it!
But to be honest, A screenshot is not really useful here.
You should go thru it all (Not every byte, But scroll down and look for clear, visible text)
Or you could run a search if you know what to look for (Like a specific singer/song title if you had MP3s on it, Or a word you’ve used on a text document that was on it etc.)
search if you know what to look for
ok so I should be doing search on aspecific file , I have a question since i don know what this program is used for , it has so much aligned numbers that stands in columns & rows , does this represent data , & tells wether its encrypted or not ?
65 68 61 62 af e0 cb da 14 90 f8 14 54 12 be bf
0b c9 94 e3 93 0d 60 a8 12 d8 29 67 cd ce 16 0e
98 59 3b 31 71 21 da 4f 83 cd e2 0d e3 39 9b 1e
2e c8 27 6a fe 84 c7 b3 08 13 ca 56 f7 a0 30 31
8f 5f 54 40 4e 13 f2 df 67 2d 4e 5b c1 99 60 20
c6 a0 71 47 b5 b2 8f 7a 5a d6 2c 99 48 e3 85 05
8a ce 50 33 a6 4c 5b 72 eb 74 8d a8 db ea 42 30
15 b7 71 5c 12 40 83 c0 da e6 47 ba 88 bf 14 c0
fc f2 4f a4 b4 55 cb
Thats wat I have on hex program
does this represent data , & tells wether its encrypted or not ?
Yes & No (It doesn’t say anything about whether the data is encrypted or not!)
Those numbers/letters do represent the data, But not in a readable fashion!
They represent it in hex form (Each number/letter has it’s equivalent to it, I.E 41 for a and for 42 for b)
So on the left it displays the hex-data, While on the right it’s the text-data (Which is what you should be looking at!) ok so I should be doing search on aspecific file
That would work too (You can also use folder names or file extensions)
Just make sure you search for em correctly (If your hex editor has an option to “match case” or “case sensitive” on the search dialog, Make sure it’s unchecked, Because if you misspell the casing, It won’t find it!)
Edit: And just to be clear, If I’m right about this (And I probably am) then you are pretty much screwed (Unless you’ve kept the original enclosure, Which doesn’t seem to be the case here!)
Others have tried and failed:
http://forum.hddguru.com/viewtopic.php?f=1&t=17398
I doubt a data recovery company would be able to recover it either (They’d probably need the original enclosure PCB for the decryption key or to do a chip swap with another one) but you got nothing to lose by trying I guess (They’re not gonna charge you unless they are able to do it! – But just remember that it’s gonna cost you around $1400!)