Switch to full style
Anything related to computer forensics (new section!)
Post a reply

A corrupted Flash drive.

August 1st, 2020, 1:34

Hello,
I have a Silicon Power flash drive that it has a problem and when I want to copy the files from it then the drive unattached suddenly. I used "dd" and "ddrescue" tools for creating a clone of the device but not matter and device unattached suddenly.
How can I solve this problem?

Thank you.

Re: A corrupted Flash drive.

August 1st, 2020, 5:15

Code:
$ sudo ddrescue -f -r3 /dev/sdc1 image.dd mapfile
GNU ddrescue 1.23
Press Ctrl-C to interrupt
     ipos:   52756 kB, non-trimmed:   34750 kB,  current rate:       0 B/s
     opos:   52756 kB, non-scraped:        0 B,  average rate:    455 kB/s
non-tried:   32177 MB,  bad-sector:        0 B,    error rate:  34684 kB/s
  rescued:   25034 kB,   bad areas:        0,        run time:         54s
pct rescued:    0.07%, read errors:      629,  remaining time:         n/a
                              time since last successful read:          0s
Copying non-tried blocks... Pass 5 (forwards)
ddrescue: Input file disappeared: No such file or directory

Re: A corrupted Flash drive.

August 1st, 2020, 9:58

Try HDDSuperClone. It can better tell when a device is not responding properly. If it works better, then when it goes offline, you would need to power cycle the device (unplug and replug). If it constantly goes offline without reading much data, you would need to have an automated way to power cycle. If it triggers a skip reset, I would try disabling phases 1-3, but a skip reset means it isn't reading any data, and the chances of recovery would be low.

Your ddrescue output indicates that most of the reads were bad, as it made it to phase 5 without reading much data. If you get the same results with HDDSuperClone, the device is likely not recoverable by normal means, and would require a pro that can deal with flash.

Re: A corrupted Flash drive.

August 1st, 2020, 10:25

maximus wrote:Try HDDSuperClone. It can better tell when a device is not responding properly. If it works better, then when it goes offline, you would need to power cycle the device (unplug and replug). If it constantly goes offline without reading much data, you would need to have an automated way to power cycle. If it triggers a skip reset, I would try disabling phases 1-3, but a skip reset means it isn't reading any data, and the chances of recovery would be low.

Your ddrescue output indicates that most of the reads were bad, as it made it to phase 5 without reading much data. If you get the same results with HDDSuperClone, the device is likely not recoverable by normal means, and would require a pro that can deal with flash.

A pro, use special software or hardware?

Re: A corrupted Flash drive.

August 1st, 2020, 10:39

A pro that can handle flash will have special hardware, and be capable of chip off recovery.
Post a reply