recover hard drive data Archives - Memofix's Data Recovery Blog

CryptoLocker holding your Data hostage?

April 25, 2026

If you haven’t heard of the CryptoLocker virus then you really should read on. This rather nasty virus is usually acquired by opening an email attachment which then embeds it’s secret code deep inside your computer. It then starts to silently encrypt ALL your data files including but not limitied to pictures, word documents, spreadsheets, pdf, emails etc. The virus encrypts your files using a virtually unbreakable RSA encryption algorithm and then demands a ransom of $100 to $500 USD in exchange for decrypting your files. Furthermore, if you don’t pay by a strict time limit, they permanently throw away the decryption key.

After the initial data encryption on your system hard drive, the virus searches out and encrypts data files on ANY online storage device, whether that is a powered on external hard drive, a USB stick, a NAS or network attached storage device, or heaven forbidden every shared folder on a network.

The first indication you are infected, is when you are greeted with a popup ransom note similar to the one displayed below. To do the most damage, the ransom note doesn’t appear until the encryption has completed, which can be anywhere from a few hours to a few days depending on how much data the virus has access to.

This particular virus has been around for a few years and appears to becoming even more rampant, to the point that copycat viruses are now popping up. We have received numerous enquiries for assistance in recovering the data, but I’m sorry to say we can’t help other than to offer advice.

The good news is that the virus can be kept at bay by any user who is very vigilant about not opening any email attachments unless they are known to be 100% safe and from a trusted source. The best advice we can give is to suggest everyone keep a backup of your data on an offline or powered off external hard drive. That way nothing can touch it.

The bad news is that once you are infected, there is NO way to decrypt the data without the decryption key. Even with present computing speeds, brute force methods would take over 1000 years to crack it.

Unfortunately, and against any moral compass, we would recommend that you pay the ransom and hope the kidnappers will be honorable enough to decrypt your data. We have heard and read stories on the web of people paying the ransom and getting their data decrypted successfully. But unfortunately, we have also heard stories of people paying the ransom and getting nothing.

If you have had any experience with this virus, please comment and share your knowledge with all our readers.

Hard Drive ECC Errors!

January 16, 2026

Recovering data, whether it’s important engineering data for a Hydro Electric company or the family pictures for a young family, is very rewarding on a personal level. Of course there is the enjoyment of helping someone in need. But the real reward for a good data recovery technician comes from the satisfaction of solving problems others can’t.

However, not all data recovery cases are solvable and that’s hard for my techs and our clients to hear. One of the most frustrating data recovery scenarios involves uncorrectable read errors. We see a lot of these cases.

In this typical scenario we receive a small 2.5” laptop hard drive for data recovery. We evaluate the hard drive and deem it functional enough to start creating a sector by sector image. But as we image off the drive it encounters more and more Error Check & Correction or ECC errors; to the point that there is at least one unreadable sector for every 5000 sectors we read. When a disk drive encounters a read error it will attempt to read the same sector at least 10 times. This slows the imaging process to a crawl and as a result it’s not uncommon for the imaging to take months to complete. Besides the time delay, the image is also riddled with unreadable sectors located randomly across the entire data area and in close proximity to each other, making it difficult to find large contiguous blocks of error free data. This means many larger files may be damaged beyond being use-able and often the majority of the good data will be restricted to smaller sized files. Depending on the size of the files the client needs, this may be acceptable or not.

What is most frustrating is the fact that there is little that can be done. These errors are the result of data not being written properly to the drive in the first place. Bad in equals bad out!

It helps to understand where these errors are triggered. When a hard drive reads a sector of data, it also reads a 50 byte ECC code that resides just after the real data. When the data was 1^st written to the sector it ran a sophisticated algorithm on the 512 bytes of sector data and this resulted in a unique ECC code which can only be replicated by reading the exact same data. When a sector is read later, the drive attempts to validate the data by running the same algorithm on the data and comparing it to the previously stored ECC code. If the code doesn’t match, the disk drive produces an error code and prevents the transfer of the data. The hard drive will normally attempt to re-read the data up to 10 times as it tries to match the ECC code and this process slows the drive down considerably.

With our hard drive expertise we are able to disable the retries and other housekeeping chores that slow the drive down. But even with these shortcuts, it is not uncommon for hard drives with this problem to take weeks or even 2-3 months to completely read off every readable sector, especially if the drive is 1TB or larger.

We do have the capability to use special read commands to bypass the ECC error checking but the data is usually garbage or at the very least, it can never be trusted 100%. We will do this for a few key sectors of data if the situation warrants it.

So what cause these ECC errors to proliferate? ECC errors can be the result of many different causes.

If a weak head is having problems writing data, ECC errors can often be created. The head appears to be stable when it writes the data and even passes the ECC check initially. But when it attempts to read the same sector later the ECC check fails and the request is aborted.

lf a hard drive is running under extreme heat conditions, for example if a laptop gets extremely hot while you are working from home by the swimming pool, the hard drive which is a mechanical device made of many sorts of metals will expand. Writing data while the drive is in this state may cause problems later when trying to read the drive in a cooled down state as the positioning will affected ever so slightly. This shouldn’t normally cause problems but extremes of operability are always unpredictable.

BUT the number one reason for the proliferation of ECC errors in our opinion is a bad memory chip whether on the hard drive or more likely inside the desktop or laptop.

If your storage device is riddled in read errors, we can help and are usually successful in recovering the majority of a user’s data. Costs for these types of cases are typically in the $400-700 range depending on the severity of the errors and the capacity of your hard drive. Please give us a call today to discuss your data loss situation.

What is a CRASHED hard drive?

December 12, 2025

We hear the words “my hard drive has crashed” at least a hundred times a month and yet it is seldom what we discover when we open the lid of someones “crashed” hard drive. The picture below shows two Seagate 500 GB hard drives we recently received for data recovery. Both drives were declared crashed by their owners! However only one appears to be physically crashed.

The drive on the left is in pristine condition. The disks are extremely shiny and consistent across the entire surface of the disk surface. The clients problem was determined to be a bad PCB or printed circuit board.

The drive on the right is not so pristine and has physically CRASHED! The smooth shiny disk surface has been scored and ringed by constant contact with the heads while the disks were spinning. This amount of damage could only occur if the drive was left running for a long period after the initial contact damage. Click on the picture for a closer more shocking look.

The drive on the left should be recoverable. The drive on the right is NOT recoverable.

If you require a price estimate on our data recovery services, follow this link for a quick reply … Canada’s Data Recovery Experts

Tape Backup Gets Squeezed by The Cloud and SSDs

July 25, 2026

For the past couple of years we have been telling our customers and social media followers that Tape Is Not Dead. But the past 12 months has put increasing pressure on a backup technology that business has relied on for decades. Memofix is one of the few repair facilities in North America that repairs hard drives and we continue to support customers of HP, IBM and Quantum tape drives, among others. However we see the signs that tape is quickly being pushed out of IT operations by Cloud and Solid State Drives (SSDs).

In our conversations with storage OEMs, customers and industry contacts there’s no surprise that Cloud backup is becoming the backup and data recovery option that many companies are moving to. Local storage is not going away and the move to disk-to-disk backup has been underway for years. But the Cloud is quickly replacing tape as the guarantee for business continuity. It provides offsite security while eliminating the majority of administration associated with tape backup processes, and there’s no need for expensive equipment purchases or upgrades. It was a logical move for Memofix to offer Cloud Backup solutions in order to continue serving the thousands of customers who have relied on us for storage technology and services for 25+ years.

How are SSDs affecting the use of tape for data backups? SSD Manufacturers and systems integrators are selling flash technology with the emphasis on savings. The primary saving comes from a reduction in power consumption and reduced impact on IT cooling systems. But we are also hearing more pitches that tout the speed of SSDs and the productivity gains that companies can achieve, particularly when dealing with large data sets and industries where response is critical. As SSDs grow in capacity and come down in price, they are starting to push traditional HDD storage into a Disk-to-Disk backup role. This means the tape drive infrastructure is rendered obsolete or its role is greatly reduced.

In a backup market that has plenty of new sexy technologies, tape continues to be the solid low-cost performer, albeit less exciting. It’s a little bit like shopping for a new car. IT managers and business owners can either afford to drive out of the showroom with the leading solutions in Cloud, SSD and disk-to-disk, or they have to settle for the economy model that everyone thinks is already obsolete. Whatever you’re driving, we can help you tune up your backup strategy.

Choosing a Data Recovery Service Before You Need Them

February 21, 2026

Today’s blog features a guest post from Larry Shulman, our Business Development Manager and a veteran of the Canadian computer industry.

IT managers have a tough job today. Most are dealing with demand for expanding data storage capacity, keeping a complex computing infrastructure running with less dollars and planning for disaster recovery and business continuity. Memofix, drawing on our experience as an extension of our customer’s IT department, has some suggestions on what to look for when choosing service partners for specific challenges.

Too often our clients come to us in the midst of an emergency. They may have a hardware failure and require an immediate turnaround on a repair or replacement unit. Perhaps a hard drive or RAID system has crashed and the data is critical to their operation. At that point in the crisis customers may not have the luxury of worrying about the security of the data contained on those devices or about how to solve a complex technical issue. Memofix is known for their responsiveness in these situations but we can’t help think that a small amount of research would also give our customers added confidence that they are not put at undue risk.

When it comes to data recovery we think our customers, both IT managers and technology resellers, need to look deeper at the service partner they are considering. A prospective data recovery partner will have access to sensitive data that only they can access. Therefore don’t just rely on technical ability to recovery data in a timely manner. You need to partner with someone who takes privacy and data security as seriously as you do. Therefore we think you should do the following:

If you’re looking for data services of any kind, do a back ground check. If you are sending storage devices or media to a supplier, for repair or data recovery services, can you trust them to ensure proper security measures are taken? Memofix recommends that you ask for references and check them out thoroughly. We regularly sign NDAs (non-disclosure agreements) for our customers and our technicians that work on any data device are subject to an extensive background check before they are hired.
Tour the supplier’s facilities and talk to their management and employees. You want to make sure that your potential partner has an efficient operation and that their staff is motivated to solve problems on behalf of the customer. Memofix has an open door policy for potential new clients or existing customers and we’re more than happy to let you visit.
Ask for a demonstration of the services you are looking for. For data recovery it’s easy to demonstrate how to solve simple problems but the supplier should be able to walk you through the process of rebuilding a drive or extracting data from a failed RAID. Memofix can address any specific types of devices that you need to support and we’ll even provide some advice on how to avoid having to call us.
Make sure that a prospective partner has invested in areas that support your requirements. Memofix has made a significant investment in our data recovery lab, in our technicians and in stocking over 20,000 hard drives for spare parts.

Memofix has every confidence that we will meet or exceed the scrutiny that we recommend. We provide depot work for some of the largest storage OEMs in the industry which means we’ve passed stringent audits and assessments. Make sure that you put any prospective data recovery partner through a similar process before handing over any storage device or media. Or simply contact Memofix and come by for a visit.

Memofix Announces Cloud Backup Service

October 23, 2025

October 24th, 2012

Professionals and companies are coping with an ever increasing amount of information and they realize that it’s critical to have a dependable system in place to safeguard their valuable data files. That system may involve additional storage capacity or tape backup technology which requires an increase in equipment purchases and technical support to manage a regular backup process.

Memofix can provide you with a Cloud Data Backup service that can simplify your IT operations and give you economies of scale. A cloud backup, recovery and restore solution takes advantage of your existing infrastructure, so you don’t need to buy or install expensive equipment. Our cloud backup software integrates with IT environments to locate and prioritize files for backup, and then securely transmits encrypted copies of those files to offsite data centers. This results in a lower total cost of ownership compared to the purchase and maintenance of complex tape backup systems.

Our Infrastructure is powered by IBM’s Award Winning Tivoli Storage Manager Software, ensuring compliancy with government mandates while securing your most important asset, your data. This managed solution includes daily backup notifications summarizing the previous days backup details, full technical support and a full monitored service. Memofix provides automated, policy-based, data backup and restore services that can easily be customized for you or your company’s specific requirements.

Our backup process creates a copy of your files or application data, compresses and encrypts it, and then securely transfers the copy at a prescheduled time to servers which are located at a secure Canadian facility. Backups can be scheduled, performed manually, or performed remotely using a Web-based interface.

Memofix Cloud Backup service advantages:

• Smarter use of IT resources. Our cloud backup, recovery and restore solution allows you to redirect IT resources to more strategic initiatives. Select a backup schedule as often as you want, specify the number of days or versions to keep, and data is saved automatically. You never outgrow your backup requirements and only pay for the space you need.
• Stronger compliance safeguards. A cloud backup solution provides more reliability and redundancy than tape backup. Your data resides in a secure Canadian sate of the art facility. Our service supports Windows, Linux and Mac operating systems, and SQL, Exchange, Oracle and other databases.
• Eliminates the shortcomings of tape backup. Tape backups may be vulnerable to obsolescence and can be lost or damaged while being transported off-site. Recovering data from a tape system can be a slow process, especially if a tape needs to be retrieved from an off-site vault.
• Improved reliability and speed of recovery. Our cloud backup solutions provides instant restoration of data, including individual files and access to previous versions of your files. You can archive backups for long term storage and retrieve files as needed.

The Memofix Cloud Backup service can save you money, simplify your IT operations and give you an increased sense of security about your data. Let us show you the advantages of our solution over your current backup process.

For more information please contact Larry Shulman via phone at 905.660.4936, extension 25, or by email at [email protected].

Helium Hard Drives?

October 1, 2026

Better not leave your hard drive just lying around, or it may just float away. Or at least that may be the case after 2013, when at least one hard drive manufacture, Hitachi Global Storage (now owned by Western Digital) has plans to start filling hard drives with helium.

http://www.hgst.com/press-room/2012/hgst-announces-radically-new-helium-filled-hard-disk-drive-platform

We all know helium as that “lighter than air” gas that has been used to fill and float party balloons for years. But due to it’s lighter then air composition, operating in a helium environment also allows mechanical devices like motors, to spin with less effort, produce less air turbulence, and to operate with less heat and noise. Hard drive manufactures have known of these advantages for years but the problem was keeping the helium from escaping the sealed internal chamber of a hard disk drive. Now that a solution has been found, it will be possible to install more disks on the same motor by spacing them even closer together. Presently, 5 disks can be used in a normal air filled hard drive. Using a sealed helium environment will allow 7 disks for a maximum capacity of 5.6 TB in a single hard drive! WOW!

Helium is harvested as a bi-product of natural gas production and Texas has some of the highest concentrations in the world but the demand continues to outstrip supply. Helium is mainly used in the medical industry to cool MRI machines, and in cryogenics, arc welding and wafer fabrication. It is still unclear how the hard drive industries requirements could effect this shortage but it will no doubt help drive up the cost of hard drives should it become common place.

As for data recovery, it could be a tough barrier to overcome. Assuming that the process used to seal in the helium is a one time affair it may not be possible to reload the hard drive with helium. Consequently we may not be able to replace damaged heads or open the sealed disk chamber in any way … or perhaps we will need to operate in a helium filled clean room .. I can hear the recovery techs speaking in high pitched chipmunk-like voices now … 🙂 .. is that you Alvin?

RAID Disaster Area!

September 13, 2026

It’s been a while since I’ve posted any astonishing pictures of actual data recovery cases we receive. This morning we received a pair of matching Seagate 7200.11 500GB SATA hard drives that were in such bad shape I just had to share …

They were part of a 2 drive RAID-1 set which means they were exact copies of each other. The client assumed having two copies of their data on two drives would ensure they would be safe. Unfortunately they were wrong.

Their assumption of safety is flawed on a several accounts by my reckoning.

First, both drives are physically in the same box . So if one falls off the table, they both fall of the table. And judging by the physical damage of these two hard drives, this might very well be what happened. Notice the scoring and rings forming all across the disks or platters of both drives. This is a real physical crash where the magnetic coating that was used to retain the data has been scraped off and left scattered through out the drive’s internals as a fine black powder.

Regardless, of how the physical damage happened, it is also apparent that the drives were running for sometime in this state. Typically minor crash debris is collected by a filter located in the top left corner of each drive. The filter is originally white in color but as you can see in the picture, both filters are now black. Crashes like this are also very audible and for a sample of what this sounds like, listen to the recording of one of these drive below.

Secondly, RAID box vendors often recommend you use two identical hard drives as was the situation here. Again, this does not sound like such a good practice to me. If one drive has a manufacturing defect, then there is a good chance the 2nd drive will have the same manufacturing defect, especially if the drives are bought at the same time from the same vendor. And even if the hard drives have no manufacturing defects, their life spans are bound to be very similar. Once one drive fails, the odds of the next one failing shortly after are quite high as well.

If your data is valuable, nothing beats a good back up on a separate distinct device that is stored in a different physical location. But should you find yourself without a backup and a failing RAID box, do your data a favor and shut yourRAID array down immediately and contact Memofix Data Recovery Services for immediate assistance.