Recovery On A Dying Hdd

Discussion in 'Hardware' started by papadadfather, Sep 17, 2017.

  1. papadadfather

    papadadfather Private E-2

    I have had this 2TB internal Seagate HDD for ~5 years. It's for storage only, the OS is on another drive. Last night while qbittorent was writing something on it, the HDD started to make a repetitive, jarring sound. I was on my headphones so the sound could've been going on for a few minutes already.

    Soon after when trying to access files on the drive, programs started lagging unable to read it. Qbittorrent also gave an error message. Then W10 froze completely and I had to do a hard reset.

    Now after rebooting Windows' File Explorer can't see the drive. There's no letter assigned to it. Device Manager, Disk Management and Speccy see the hardware but the capacity is wrong. Speccy for example lists the size as 127GB (pic related).. this seems weird?

    There's some stuff on the HDD I'd love to recover so I unplugged and set it aside for now.

    What should be my next step?

    [​IMG]
     
  2. Digerati

    Digerati Major Geek Extraordinaire

    Was it divided into more than one partition? That might explain the 127GB if the partition tables are corrupt.

    You might try Recuva, from the same makers as Speccy and CCleaner.
     
  3. foogoo

    foogoo Major "foogoo" Geek

    try making an image with osf clone then you can mount that and try to recover data without causing more damage. If the drive is dying you don't want to keep trying stuff, get an image and work from there.

    Links embedded above.
     
    Imandy Mann likes this.
  4. papadadfather

    papadadfather Private E-2

    This is what I'm trying to do now. I booted into osfclone. It doesn't see the HDD itself but it can see the 1977MB partition.

    I have a 3TB external HDD for the image. Should I use dd, AFF or EWF for the imaging format? Anything else I should do or be aware of before I start?
     
  5. papadadfather

    papadadfather Private E-2

    I tried pulling an AFF image from the HDD. No weird noises or issues but the process was over in just ~10min and the end result was a 50MB joke image. I mounted it with OSFMount but there's nothing there.

    Maybe I messed up the recovery process or maybe the data is already gone. I don't want to damage the HDD any worse so I took it out for now while pondering my next move. I forgot to mention after the initial freeze Windows ran some HDD diagnostics stuff trying to repair it that went on for at least an hour. There were no weird loud noises during this either so I let it run. So the only time there were the weird sounds was the initial time. Now when you plug it in you just hear it spinning.

    Reading up and trying to decide what to do next. I'll probably end up trying Recuva or another program at some point.
     
  6. baklogic

    baklogic The Tinkerer

  7. foogoo

    foogoo Major "foogoo" Geek

    DD would be the best copy, sounds like the drive is to far gone. As for using a non-forensic drive copy, they don't copy "errors" and will possibly fail. At this level you want a bit by bit "raw" copy, no error correction. That will be done when you try to recover that data.
     
  8. Digerati

    Digerati Major Geek Extraordinaire

    That depends on the type of error. If the data in a storage location is corrupted, the corrupted data will be copied too.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds