Switch to full style
CompactFlash, SD, MMC, USB flash storage. Anything that does not have moving parts inside.
Post a reply

Deleted Data Recovery from SSD impossible ?

March 28th, 2017, 0:42

I am working on a client SSD in which he has deleted data. Diagnostics shows recovered files are zero filled by SSD Trim firmware so even raw recovery gives nothing. Google search shows only Manufacturer can recover data in his own lab.
Is there any way to retrieve it ? What is your experience in SSD recovery ?
Attachments
DSS1.JPG

Re: Deleted Data Recovery from SSD impossible ?

March 28th, 2017, 4:33

If TRIM has finished its job, nobody will help you.

Re: Deleted Data Recovery from SSD impossible ?

March 28th, 2017, 5:05

Martin wrote:If TRIM has finished its job, nobody will help you.


+100
don`t waste your time

Re: Deleted Data Recovery from SSD impossible ?

March 28th, 2017, 6:59

I think the last sentence of your posted picture is quite funny, actually.

+1 to what the others said, if TRIM is finished data is gone.

Re: Deleted Data Recovery from SSD impossible ?

March 28th, 2017, 7:29

:( so it is confirmed no one can recover data. Its hard to say to customer when data is very much critical.
Thank you all for shading light.

Re: Deleted Data Recovery from SSD impossible ?

March 28th, 2017, 13:52

athena wrote::( so it is confirmed no one can recover data. Its hard to say to customer when data is very much critical

If data is very critical you make backups frequently

Re: Deleted Data Recovery from SSD impossible ?

March 28th, 2017, 22:06

Hi jermy
yes backup is very essential . This disk is of my customer.

Re: Deleted Data Recovery from SSD impossible ?

March 30th, 2017, 11:59

Martin wrote:If TRIM has finished its job, nobody will help you.

Neither the manufacturer?

Re: Deleted Data Recovery from SSD impossible ?

March 30th, 2017, 12:58

geagle wrote:
Martin wrote:If TRIM has finished its job, nobody will help you.

Neither the manufacturer?


If drive supports TRIM - yes, despite of brand\manufacturer.

Re: Deleted Data Recovery from SSD impossible ?

March 30th, 2017, 17:28

going back to the Original post:

"Diagnostics shows recovered files are zero filled by SSD Trim firmware so even raw recovery gives nothing."

what exactly is diagnostics? unless you have read the NAND chip and looked at the dump, you really can't be making assumptions. If you did some sort of logical recovery, R-Studio or GDB on the device, then I would

How were you able to say for sure the zero filled files were because of TRIM?

There are quite a few SSD's that can be recovered and methods same as flash drives. Sandforce, Marvell and some Phison are exceptions. The main factor in making them "worse" to recover is multiple NAND chips, some single NAND chips having 16 or 32 dumps each and the sheer time it takes to process ECC / read dumps.. and storage space.

in flash you cannot talk in general terms. one drive may be a total cow to recover, the next one with same controller/NAND and PCB could be a piece of cake. One thing is for sure though, not knowing when to move on to next case can be a real deciding factor of if you go broke or not.

Re: Deleted Data Recovery from SSD impossible ?

March 31st, 2017, 20:15

Hi HaQue
Thanks for shading light on the subject which might be useful for me and everyone in future.

There is no way to know whether files are zeroes by TRIM . I have only logical / raw recovery as I don't have chip-off tools to directly read Nand nor technology / knowledge to interpret dumps. If opened in hex view files all then show is zeros.
Post a reply