HDD GURU FORUMS
http://forum.hddguru.com/

Need help
http://forum.hddguru.com/viewtopic.php?f=10&t=43205
Page 1 of 1

Author:  caano [ March 18th, 2023, 11:05 ]
Post subject:  Need help

Hello all, hope you're doing well, would really appreciate your help. I have an SD card on my android phone that corrupted(images became black and won't load). I quickly took it out from my phone and backed it up with ddrescue, I now have a .dd file. After examining the sd card through test disk and r-studio no partitions show up. I've also tried to scan the .dd file and also no partitions show up. I do not know what else to try at this point. Hope you could point me to the right course of action to take.
Many thanks.

Author:  fzabkar [ March 18th, 2023, 14:31 ]
Post subject:  Re: Need help

Is the card encrypted?

Can you show us the contents of the first sector with a hex editor such as HxD (freeware)?

Author:  caano [ March 18th, 2023, 17:54 ]
Post subject:  Re: Need help

fzabkar wrote:
Is the card encrypted?

Can you show us the contents of the first sector with a hex editor such as HxD (freeware)?


Hello, I'm not really sure if the card was encrypted. Okay I will do it right now.

Author:  caano [ March 18th, 2023, 18:09 ]
Post subject:  Re: Need help

Attachment:
File comment: Output of HxD, for both the actual card and the backup image
sector.png
sector.png [ 114.66 KiB | Viewed 4021 times ]

Hello here's the output of HxD both from the actual card and the .dd image.

Author:  fzabkar [ March 18th, 2023, 18:13 ]
Post subject:  Re: Need help

That's what you would expect if the card had been erased. If you drag the vertical scrollbar from top to bottom, do you see anything that looks like data?

If you select Analysis -> Statistics, do you see anything other than a large spike at the RHS (FFh)?

If you compress the dd image with 7Zip, what size is the compressed image?

Author:  caano [ March 18th, 2023, 18:50 ]
Post subject:  Re: Need help

Hello again sorry for the late reply.
1. Nope, all I see is FF FF FF and so on...
2. It's still analyzing. Will follow up on the result.
3. I compressed the dd image with 7zip to sbd.7z format and the compressed size is just 4,618 kb.

Author:  fzabkar [ March 18th, 2023, 19:27 ]
Post subject:  Re: Need help

Your card appears to have been totally erased, or is in a state where there is no data access.

Author:  caano [ March 18th, 2023, 19:36 ]
Post subject:  Re: Need help

Thank you so much for your help. I guess I'm just out of luck and will just have to live with the loss of my data :(

Author:  fzabkar [ March 18th, 2023, 20:24 ]
Post subject:  Re: Need help

Try another card reader just to be sure.

Author:  caano [ March 18th, 2023, 20:26 ]
Post subject:  Re: Need help

fzabkar wrote:
Try another card reader just to be sure.

I've tried it on two different laptops, doesn't read it at all. No partition shows up.

Author:  caano [ March 18th, 2023, 20:55 ]
Post subject:  Re: Need help

caano wrote:
Hello again sorry for the late reply.
1. Nope, all I see is FF FF FF and so on...
2. It's still analyzing. Will follow up on the result.
3. I compressed the dd image with 7zip to sbd.7z format and the compressed size is just 4,618 kb.

Just finished analysis, nothing shows up there at all, just a plain blank white screen.

Author:  arvika [ March 19th, 2023, 3:21 ]
Post subject:  Re: Need help

There is still chip-off method recovery which can give good result even if now you see only FF.

Author:  caano [ March 19th, 2023, 6:58 ]
Post subject:  Re: Need help

Is that something I could do or would I need a professional to do that? If it's the latter how much do those kinds of services cost? I'm not that rich at all :(

Author:  caano [ March 19th, 2023, 9:44 ]
Post subject:  Re: Need help

arvika wrote:
There is still chip-off method recovery which can give good result even if now you see only FF.

Is this something I could do or would I need a professional for this? Also if it's the latter how much do there types of services usually cost?
Thanks a lot.

Author:  arvika [ March 19th, 2023, 13:59 ]
Post subject:  Re: Need help

For such job you need data recovery company (not all can do this). Cost depends on capacity, controler type, monolith or standard construction etc.

Author:  Lardman [ March 19th, 2023, 14:33 ]
Post subject:  Re: Need help

@arvika - Somewhat surprised to see you post that considering the situation. It's a microsd out of the phone. It's going to be monolithic, potentially ldpc and highly likely to encrypted. I would have thought problems with the translator/controller would be the least of the concerns. Chip off in this case appears to be somewhat of a very long shot.

Author:  arvika [ March 19th, 2023, 16:12 ]
Post subject:  Re: Need help

Lardman, I miss info that it is from phone. So it is monolith for sure. But why you assume that it is LDPC? We do not know what is the model. I meet many cards looks erased, filled by FF, but chip-off give very good result. One model of PNY card have such problem quite often.

Author:  Lardman [ March 19th, 2023, 16:30 ]
Post subject:  Re: Need help

Just based on what gets dumped on my desk - all be it nowhere near the volumes you see. It wasn't just the lpdc I was referring to as encryption but also that of the android phone itself. Feels rather a long shot for useable data to be recovered.

Author:  arvika [ March 19th, 2023, 16:43 ]
Post subject:  Re: Need help

Many scenrio is possible. Thats why it is worth make an expertise. Than client decide what to do ;)

Author:  caano [ March 19th, 2023, 17:49 ]
Post subject:  Re: Need help

Thank you for all your replies, I've just decided to live with the fact that I've lost years worth of data.

Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/