How do I recover data from a crashed hard drive?
Crashed hard drives ARE RECOVERABLE!
Some people may think that it is almost impossible to repair a crashed hard drive – but this is NOT true! You can often recover data from a crashed drive, and we will give you an example of a do-it-yourself-at-home solution below. Do keep in mind this will only work on mildly damaged drives, and that it is possible to take a bad situation and make it worse without proper knowledge/tools. That being said, if you want to learn more, continue below.
Let’s go over recovering a dying drive – at home!
A crashed hard drive can be the results of broken heads, or just bad firmware. In those cases, you will likely need a professional. However, for cases where there is minor damage or just bad sectors, it may be recoverable on your own. With a tool like DDRescue, it is possible to recover and clone parts of your data.
In order to try and carry out a data recovery yourself, you will need systemrescuecd, a bootable Linux livecd/liveUSB that includes the tool ddrescue, a USB drive to install it to, and another hard drive connected via USB so that you can clone the faulty drive to it.
Booting into systemrescuecd:
Once you’ve created a systemrescuecd live USB, you will have to reboot your computer into the operating system. Most machines allow you to choose what drive you boot up into using F12 or F11 – on Macs, holding down the option key is how this would be done. Choose the systemrescuecd liveusb you made. Many systems may also show you the actual brand/model of the USB drive, rather than the name of the operating system at this point.
Finding your source drive:
Linux names drives in this fashion: /dev/sda, /dev/sdb, /dev/sdc, etc. We need to figure out which drive is the source and which drive is the target – there is no undo here, so proceed with caution!
First, we type this command
# fdisk -l | grep dev WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion. Disk /dev/sda: 500.1 GB, 500107862016 bytes, 976773168 sectors
fdisk -l will show us a list of all drives. You should see one for the drive in your system – here, ours is a 500 GB drive, and then another for systemrescuecd. You can differentiate the systemrescuecd drive as it will be much smaller, the size of your USB drive that you used for systemrescuecd. If you have a machine with one internal drive, and that is the drive you are looking to recover, the drive you see here will be our source.
If you have the bad drive in your machine that you would like to recover, you now know it is /dev/sda. Now, we move onto plugging in our blank external. Do note all data on the external will be written over, so ANY DATA on the external MUST be backed up or it will be GONE!
# fdisk -l | grep dev WARNING: fdisk GPT support is currently new, and therefore in an experimental phase. Use at your own discretion. Disk /dev/sda: 500.1 GB, 500107862016 bytes, 976773168 sectors Disk /dev/sdc: 500.1 GB, 500107862016 bytes, 976773168 sectors
/dev/sdc just showed up, so we know that is our target.
Using ddrescue to make a block-for-block copy of the bad source drive.
Now, we type the following command:
ddrescue -f -n -a 5120000 /dev/sda /dev/sdc logfile.log
This command copies over everything from /dev/sda(our source drive) to /dev/sdc(our target drive). -n keeps ddrescue from performing the “scraping phase” whereby it puts a heavy load on the drive trying to rescue the most difficult parts, and -a 5120000 means it will skip any area that cannot be copied at a speed of at lest 5 megabytes per second. logfile.log is the logfile name – if the machine dies, or a drive is accidentally unplugged, you can start over from where you left off rather than starting from scratch. Dying drives are temperamental. The idea here, is to grab as much data as we can before it requires a professional. While the drive is dying, we don’t want to drive it into the ground to grab one 200 kilobyte image on a damaged area if that same amount of effort can recover 400 gigabytes of data. In this first stage, anything not easy to copy is skipped. Then, once this is done, we move onto the next stage.
ddrescue -f -d -r 3 /dev/sda /dev/sdc logfile.log
This command copies everything over from /dev/sda(our source drive) to /dev/sdc(our target drive). –d is for direct disc access. -r 3 menas it will go over unrecoverable sectors 3 times before giving up. The lack of -n and -a takes off the kid gloves and forces the drive to go over even difficult areas. If we are going to ask the drive to perform heavy duty work that may result in it dying, we want to do this only once we are out of the woods and have recovered all of the low hanging fruit – which the first pass has successfully done.
Didn’t work? We can help.
In the event that no data can be recovered using ddrescue, this may mean that one or more heads on your hard drive has failed and is no longer working correctly. But don’t worry, here at Rossmann Repair Group we have a team dedicated to data recovery who have been recovering precious data for years. Our expert technicians are able to perform head swaps inside of a clean-room on your hard drive which will make your precious data accessible so that we can recover it for you.
Check out a real data recovery below!
If you’re feeling curious, watch our process.
Our highly trained technicians have worked on some of the most complex cases with great success. If your hard drive or SDcard is no longer responsive, we’ll get your information back!
Call or Visit Us
Monday-Friday – 12 PM to 8 PM
Saturday-Sunday 12 PM to 4 PM
186 1st Avenue
New York, NY 10009
Have a failed external USB drive? We can by-pass the USB on your drive and go straight for your data!
We can do clean room data recovery on premises when necessary.
Stuck heads? No problem! We have the tools and the clean room to un-stick your heads.
Inspecting a 6 head stack from a donor drive before it goes into a recovery drive.