Data Recovery, recovering Hard Drive data, RAID data recovery

Need Our After-Hours Emergency Service?

Deleted SSD Files … Gone Forever?

Posted on

It wasn’t long after the introduction of the PC that computer enthusiasts figured out that if you deleted a file on your hard drive, it could generally still be recovered. This was possible because deleting a file only deleted its index entry while the file itself remained intact and undamaged. Armed with this knowledge, many IT professionals rescued deleted files and won the accolades of their panicked customers in the process. But the rules have changed with the modern SSD or Solid State Drive and in most cases, if a file is deleted from an SSD, the file is deleted forever!

data recovery Ontario
To understand why, it helps to understand a little more about SSDs.

Unlike a hard drive which can simply write over existing data, an SSD must 1st erase existing data before it can write new data. The process of erasing a data block is very slow in comparison to writing or reading a data block, and as a result 1st generation SSDs became considerably slower over time. To address this concern, newer SSDs started preemptively erasing recently freed blocks during their idle time. This process is referred to as garbage collection and is found in all current SSDs.

However, initially SSDs did not understand or communicate with operating systems like Windows, consequently when Windows deleted a file and marked the space as free for re-use, the SSD knew nothing about it. As far as the SSD was concerned, this space was written to and was thus in-use. To overcome this build-up of unknown and thus unavailable space, SSD manufacturers introduced a feature called TRIM. TRIM allows the operating system to communicate and inform the SSD of free data blocks as they become available. The SSD will then add these blocks to its list of blocks to be preemptively erased. Unfortunately in the real world, these blocks are erased and prepared for re-use almost immediately. Consequently, a deleted file is now totally unrecoverable within moments of being deleted.

Even if you do a quick format on an SSD, the data will be gone almost instantaneously and forever! Previously with hard drives, it was still possible to recover the original data files even if you formatted your hard drive. See our Recovering Data After a Format blog post for more information on that topic.

There are exceptions where deleted SSD data can still be recovered. This is usually because the SSD, operating system or storage configuration does not support TRIM. Below are some examples where TRIM is not supported and hence, deleted files may still be recoverable:

  • Using an older 1st generation SSD or Solid State Drive
  • Running Windows versions before Vista and MAC OSX versions prior to 10.6.8
  • Using an SSDs inside an external USB or Firewire enclosures, and most NAS boxes.
  • File system has become corrupted and the volume is no longer recognized or accessible.
  • SSD formatted with FAT16 or FAT32
  • PCI Express SSDs generally do not support TRIM
  • Encrypted volumes do not usually support TRIM
  • SSD RAID arrays do not typically support TRIM.

Solid Sate Drives are becoming much more common as the prices comes down and their benefits become apparent, but as always, there are tradeoffs, and understanding the implications is always important. If we can help resolve your data loss situation or if you just want a second opinion, please don’t hesitate to contact us at 1-800-MEMOFIX or [email protected].

 

Want to be a Hero?

Posted on

Memofix Data Recovery Services is looking for a few talented data recovery technicians. If you have a passion for problem solving, an unquenchable lust for knowledge and really enjoy helping people and businesses recover their irreplaceable data, we may have a home for you.

As a data recovery technician, you will join our team of proven data recovery professionals in our quest to become the most technically capable data recovery service company in the world. To become the greatest, we are looking for experts in many areas. We need skilled hard drive surgeons experienced in resuscitating damaged and crashed hard drives. We need PC3000 masters with in-depth knowledge of hard drive system areas (secret OS of the hard drive). And we need file system specialists with an intricate understanding of the various operating systems as well as a thorough understanding of RAID variations and rebuilding techniques.

If you have 2 or more years of experience in the areas listed below, we want to talk to you;

  • Diagnosing and identifying hard drive problems.
  • Diagnosing and repairing of defective hard drive PCBs including NVRAM transfers.
  • Identifying defective heads and replacement techniques in a cleanroom environment.
  • Dealing with seized spindle motors.
  • Transplanting of disks into a new body and motor.
  • Using the PC3000, Data Extractor and other specialized hard drive tools.
  • Specialized techniques such as individual head imaging.
  • Performing hard drive hot swaps with a system area compatible donor drive and PCB.
  • Identifying, repairing and rebuilding file system structure damage in FAT, NTFS, MAC and Linux type operating systems.
  • Identifying striping schemes and pertinent parameters in various flavors of RAID.
  • Repairing and Rebuilding RAID arrays physically and virtually using various software tools.

Memofix offers competitive salaries, equal opportunities, a full benefits package, and a wonderful work environment for all of our employees.

If you have the skills, aptitude, and desire to join a team dedicated to becoming the best at recovering the world’s data, please send your resume to me at [email protected]. Please reference “Hero Ad” in your email subject line.

 

 

Toronto and Vaughan RAID Data Recovery

Posted on

Enterprise level RAID arrays often use SCSI or SAS (serial attached SCSI) hard disk drives. Compared to PATA and SATA IDE hard drives, SCSI and SAS are not as common. And as a result few data recovery companies have much experience with them.

Fortunately, Memofix (located in Vaughan, Ontario) has been around for so long that we still remember when all servers and RAID arrays used SCSI hard drives. I too have been “around” for a long time and during my 12 years at ActionFront and Seagate Recovery Services I was the “go to guy” for SCSI recoveries. By the end of my career at these Toronto GTA based recovery companies, I was full-time management with the exception of working exclusively on cases that used SCSI hard drives. As a result, I became thee expert at resurrecting dead SCSI and SAS drives. And as they were most often used in RAID arrays, my skills at rebuilding and recovering RAID data was also very good.

At Memofix this expertise has been passed on, but I still personally monitor every SCSI, SAS and RAID array we receive. I believe we are the best in the industry whether that RAID is used on a MAC. Windows, Unix or even a Solaris operating system. If you need some expertise on your failing RAID call the professionals. http://www.memofixdatarecovery.com/data-recovery-raid.php

Remote Data Recovery

Posted on

Toronto GTA, Ontario, Canada. Recovering data remotely is a service presently being offered by several of the larger data recovery companies. It sounds so convenient, no shipping, no computer disassembly, no risk, just call someone up and they remotely connect to my computer, and “poof” my data is restored. If only it were so simple. In reality it’s much more of a marketing ploy then a realistic recovery option. The complexities and dangers of offering remote service seem to counter the very pillars of data safety.

First you must consider that for a remote data recovery service to be successful the hard drive must be functioning properly; otherwise there is a serious risk of causing further damage. If the drive has physical problems and is beginning to fail, there may only a short window before the damage becomes insurmountable. As every data recovery company will advise, if the data is important, shut it off immediately and do nothing. So unless you’re knowledgeable enough to determine the condition of your hard drive or you don’t mind a 50/50 chance of doing further damage you may want to reconsider a remote data recovery service.

Furthermore, this service requires the user to have some technical computer skills as the original hard drive must be removed and installed in a second web attached computer along with possibly an additional hard drive to copy the recovered data to. Some assistance will also be required to setup and establish the remote link. And while some users may feel comfortable with these tasks, the real concern is with the increased risk of causing further damage whether due to physical handling, static shock, or the unintended running of automatic drive utilities like chkdsk.

It is our policy and that of most other professional data recovery services to create an exact image or mirror of the original drive. The original drive is then put away for safe keeping, while any alterations to the file system structures or running of utilities are completed on a copy of the copy. In a remote data recovery situation, you do not have the luxury of having a backup copy in case things go wrong.

We also see many cases of apparent file structure damage where the storage device or hard drive initially appears to be operating fine but as we attempt to image it we discover read errors or the drive starts failing in some other way. In instances like this there is a strong chance the file structure damage was actually caused by the physical issue. Attempting to recover data from a drive like this will just aggravate the situation and risk further damage to the storage device or filesystem.

In my past life, I worked for one of the larger data recovery companies that considered offering a remote recovery option. At the time we had multiple lab locations across the USA and we were already using remote connections to share the data recovery expertise spread throughout our different labs. Our more senior data recovery engineers essentially used remote access to evaluate and direct a more junior tech in how to proceed with a difficult data recovery. Prior to us offering the service to the general public, we investigated our competitors offering by conducting a secret shopper campaign where we attempted to engage their remote data recovery services. Surprisingly, we were repeatedly met with opposition when we requested a remote recovery. They tried to sell us data recovery software, followed by in-lab service before reluctantly agreeing to only attempt a remote recovery IF we approved a minimum of $1500 for the recovery if successful. And this was without ever looking at the media. It’s readily apparent that the entire concept was being used to get you to call them so they could then attempt to try and talk you into shipping the case to their lab.

Remote data recovery has most of same limitations and capabilities as that of a good data recovery software program. The drive must be functional and it must be connected to a working computer system. In many situations a data recovery program will perform as good as a remote recovery service. In fact, the remote recovery tech is more then likely going to be running utilities as part of the effort to salvage your data. So why pay for someone to hook up remotely and run utilities on your system. You can do that yourself and with less complications and time wasted establishing a safe connection.

There are a few occasions where remote data recovery does makes sense, where due to the isolation of the location there is no other option, but for those cases that can be delivered to a full service data recovery lab you would be very unwise not to take advantage of the hands on experience of a data recovery specialist. https://www.memofixdatarecovery.com/ … David Foster

Got Your Data Back, Now What? … Re-Integrating Your Data

Posted on

Toronto, Ontario, Canada. If you’ve had the misfortune to experience a data loss situation, whether because you accidentally dropped your laptop, your brother-in- law insisted on reformatting your hard drive or perhaps a passing lightning storm drove a voltage spike through the heart of your system, then you know getting your data recovered is just the first step in getting your computer back in order.

In recovery cases where the original hard drive was found to be defective, it will need to be replaced with a new drive. In cases where the only problem was a LOGICAL issue, you may be able to re-use the original hard drive, BUT we do not recommend this as some logical problems may be the result of intermittent problems with your hard drive. Regardless of your situation, once a reliable storage device has been physically installed in your computer, you need to install & configure the operating system and install all the various programs or applications you may use. In most cases you will require the original licensed installation diskette(s), CD/DVD(s) or USB flash stick.

Once you have your system setup and bootable, the storage device with the recovered data (typically a USB external hard drive) can be attached to the new system. Identifying where to locate and copy the recovered data to is determined by the operating system and what your original username was.

For example, in Windows XP there is a folder in the root directory or top level folder called “Documents and Settings”. Within the “Documents and Settings” folder you will see a folder named for each user set up to use the system. There will be folders with names like “Administrator” and “All Users”. Among these folders you should also see a folder with the same name as your previous login name. So if you previously logged in as JoeUser you should see a folder called “JoeUser”. This is the default location for storing all your personal data. Some advanced users may have chosen a non-default location for some of their data files but such users should not require this article to reintegrate their data. Once inside your personal “JoeUser” folder, you will see some standard data folders with names such as “Desktop”, “MyDocuments”, MyPictures”, and “MyFavorites” . If you were to open the “Desktop” folder you should see all the items that were previously on your desktop. To copy this folder to your new system so your desktop looks just like it was before, simply drag and drop the “Documents and Settings/JoeUser/ Desktop” folder into the “Documents and Settings/JoeUser” folder on the new system. The new system will prompt you for permission to overwrite the “Desktop” folder and once approved your data will be copied. Repeat this procedure for each additional folder you may wish to copy. By default much of your data will be stored in the “MyDocuments” folder.

If you use Outlook for your email under Windows XP, you can find your .pst data files in the default \Documents and Settings\%username%\Local Settings\Application Data\Microsoft\Outlook\ folder. In Vista or Windows 7 the default is \Users\%username%\AppData\Local\Microsoft\Outlook\.

The default location for storing your data in Windows Vista or Windows 2007 is very similar except the “Documents & Settings” folder has been renamed to “Users”. So if your login name was JoeUser, your data would be located in the “Users/JoeUser” folder. It’s interesting that this also happens to be the location of your data files on a Apple or MAC system. Apple also uses a top level folder called Users which contains a folder named for each user and within each user folder you will find that user’s data. Drag and drop the data folders into the same locations on your MAC drive and you’re done.

… David Foster