MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 13 posts ] 
Author Message
 Post subject: DeepSpar imaging failure
PostPosted: May 14th, 2014, 8:13 
Offline

Joined: June 18th, 2013, 4:46
Posts: 22
Location: Portsmouth
Hi,

I'm hoping that someone with more experience can help me out with this one.

We've got a Samsung (Seagate) ST500LM012 HDD which is detected by DeepSpar, however, every sector is being reported as unreadable after a considerable amount of time trying each sector (yellow colour), I'm sure that every sector surly is not bad, therefore, I'm considering that it could be the heads or firmware that are at fault.

We do have PC3000, however, until we can get on a training course, using this tool is trial and error, which is not ideal on an evidential item.

Does anyone have any suggestions to fault diagnosis using PC-3000 before resorting to a head swap.

Thanks in advance.


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 8:15 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2574
Location: Ontario, Canada
If you have a legit PC3K system, contact ACE tech support. http://ts.acelaboratory.com/

_________________
Luke
Recovery Force Data Recovery


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 8:23 
Offline

Joined: June 18th, 2013, 4:46
Posts: 22
Location: Portsmouth
Yes, fully legit, just limited to where we can obtain training from, Russia and China are not an option, we've been speaking with the makers of DeepSpar in Canada, however, there does not appear to be any public courses available and the bespoke courses are really expensive so we would probably struggle to obtain justification!


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 8:35 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3669
Location: Massachusetts, USA
RMP_Cyber wrote:
I'm considering that it could be the heads or firmware that are at fault.

Any preliminary information provided by customer regarding failure? Terminal output?
-------------------
About training:
Start reading the PC3K manuals. That should help with the fundamentals and take one in the right direction.

Important to understand is that a tool, no matter how great it is, it is unable to "tell" what the problem is. It is the human that has to interpret the drive's behavior correctly based on the tests conducted whether it is with DeepSpar, Atola, PC3K, terminal, etc. This only comes with reading/training, understanding, practice, test & trail, documentation, analysis, R&D, and so on. And once one combines those things then things develop and begin to come together = experience.

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 8:59 
Offline

Joined: June 18th, 2013, 4:46
Posts: 22
Location: Portsmouth
Thanks guys,

No unusual sounds, or anything else that is odd.

We are actually a forensic department for a law enforcement agency, this was an exhibit that failed to image through FTK Imager, due to the sensitivity of some of the items that we deal with, we don't outsource a great deal of items.

We have a good team when it comes to straight forward digital forensics, but specialist roles such as HDD repair, chip off, etc. are still a massive learning curve, we'll get there, it will just take time. It does not help that we do not deal with HDD repair or mobile device chip off on a constant basis.

Thanks for the offer of remote assistance, but we can't do that, again due to the sensitive nature of some of the work that we deal with.

Thanks.


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 9:17 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3669
Location: Massachusetts, USA
You may consider onsite recovery where someone comes to you. I doubt the cost will justify the service, but it is an option, especially if you can partner with somebody local who can do provide this service consistently.

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 9:20 
Offline
User avatar

Joined: June 23rd, 2008, 11:26
Posts: 511
Location: Austin, TX
PM Sent


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 9:32 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3669
Location: Massachusetts, USA
labtech wrote:
You may consider onsite recovery where someone comes to you. I doubt the cost will justify the service, but it is an option, especially if you can partner with somebody local who can do provide this service consistently.

The same concept would apply for training, where someone comes to you. Perhaps it would be more affordable (and perhaps more valuable) then Ace classes, as this can be customized based on your exact needs.

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 9:48 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2574
Location: Ontario, Canada
We just have officers come here for our assistance and we do our best to do all the work with them here.

_________________
Luke
Recovery Force Data Recovery


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 10:22 
Offline

Joined: January 8th, 2008, 5:21
Posts: 927
Location: uk
Hi! I just sent you a pm suggesting a company near you which might be able to help with this matter. Good luck!


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 11:36 
Offline

Joined: February 12th, 2008, 18:21
Posts: 25
Do you know what the scenario is behind the failure? Was the drive dropped? Or was it working fine and suddenly quit? If there is no reason to suspect platter damage or a crashed head, you can use the DeepSpar to try imaging specific heads. First build a heads map (Image -> Build Heads Map, or Ctrl+H). Then run the media test (Source -> Media Test or Ctrl+M). It should display results for each head and if there is one or more heads with green, you can image only the working heads by unchecking the weak / failing heads in the imaging screen (Imaging -> Imaging Process or Ctrl+I) at the bottom of the screen. If successful, then at least you have one or more heads worth of data imaged before you have to open the drive or do more invasive repairs.


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 12:19 
Offline
User avatar

Joined: June 23rd, 2008, 11:26
Posts: 511
Location: Austin, TX
TXRanger wrote:
Do you know what the scenario is behind the failure? Was the drive dropped? Or was it working fine and suddenly quit? If there is no reason to suspect platter damage or a crashed head, you can use the DeepSpar to try imaging specific heads. First build a heads map (Image -> Build Heads Map, or Ctrl+H). Then run the media test (Source -> Media Test or Ctrl+M). It should display results for each head and if there is one or more heads with green, you can image only the working heads by unchecking the weak / failing heads in the imaging screen (Imaging -> Imaging Process or Ctrl+I) at the bottom of the screen. If successful, then at least you have one or more heads worth of data imaged before you have to open the drive or do more invasive repairs.


Cannot head map on a deepspar machine with samsungs, but you can on the pc-3000.


Top
 Profile  
 
 Post subject: Re: DeepSpar imaging failure
PostPosted: May 14th, 2014, 14:10 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2821
Location: Kuwait
RMP_Cyber wrote:
Thanks guys,

No unusual sounds, or anything else that is odd.

We are actually a forensic department for a law enforcement agency, this was an exhibit that failed to image through FTK Imager, due to the sensitivity of some of the items that we deal with, we don't outsource a great deal of items.

We have a good team when it comes to straight forward digital forensics, but specialist roles such as HDD repair, chip off, etc. are still a massive learning curve, we'll get there, it will just take time. It does not help that we do not deal with HDD repair or mobile device chip off on a constant basis.

Thanks for the offer of remote assistance, but we can't do that, again due to the sensitive nature of some of the work that we deal with.

Thanks.


Well my dear, if you cannot offer remote help
and you don`t have much experience on such cases
and you have a problem

how do you plan to solve it? its just a Q here for you to think about

also consider, if you take and try any stupid advice from anywhere and you don`t know if its gonna kill your drive or not

so i think you have no other choice here ( in my opinion )

all the best ,,, :wink:

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 13 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 48 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group