Recover data forensically for use in court (UK)

With legal cases involving digital evidence that goes to court in the UK, it’s important that the contentious data is extracted forensically. This means following ‘chain of custody‘ procedures that ensure that the recovered data is admissible in a UK court of law. The following are examples of cases where it’s been necessary to preserve data that has been acquired forensically. This digital data has been acquired from either mobile phones or computer hard drives. Forensic data recovery is also possible from CCTV and DVR too – run a Google search for forensic ‘data recovery companies in London’ or ‘data recovery companies in Manchester’ to find a company that provides this service.

Forensic data recovery of iPhone

forensic data recovery service in the UKI’m trying to find a company that can assist in the forensic data recovery of files from an iPhone. A few days ago went to update my iphone 6s to ios 11.2.5 from the phone. It updated fine but whenever I went into photos or notes it would give me a blank page for 1 minute then disappear, the rest of the phone was fine. I asked a friend for advice and he told me to connect to my macbook while holding home and power button then let go of power button. He told me to click update software (again) and it would overwrite the update and fix my problem. The update loaded half way then crashed, now stuck in recovery mode and will not come out of it. I have tried updating again and again but keeps coming up with error code (14). I do not want to restore the phone as I don’t have a backup saved besides a few small things in icloud dating back several months, instead I want to forensically recover the phone’s data as I’m involved in an ongoing legal case and the data is to be used in court. I have 7 years worth of memories on this phone that I have transferred from phone to phone over the years. The main bit missing would be my photos between 2016 and now. Really distraught as all of my cherished photos from family, holidays and the whole past 2 years are not on icloud. I do not want to restore and wipe the phone without someone trying to recover my current pictures first. I know that the photos were there after my initial faulty update as when I force pressed the photos album I could see the most recent photo. Now phone is stuck in recovery mode and continuously failing to update or change screen. I have spoken to multiple people including the apple store team who tried on their own laptops and could not help me. PLEASE tell me these can be recovered somehow and you can get through the encryption to access the data??????

Forensic data recovery of external hard disk

Hi – do you provide a forensic data recovery service from an external hard drive? My Lexar external drive failed on me yesterday, it was flashing red when I entered it into my laptop and not being detected. I tried a few online fixes which said to change the drive letter, this helped slightly as the laptop can now detect the USB but there’s no data on it. It’s of paramount importance that I forensically retrieve the files from this device as they form part of the evidence in a court case. I tested out a few data recovery programs but they only recover deleted data from 8th of Jan and before; none of the programs I tried can retrieve data after Jan 8th specifically my dissertation which I was writing up yesterday and saved on my flash drive. Please can you help me as I tried nearly everything to recover my recent data but only recovers old data that I don’t need.

Read More

Retrieve stored files from OCZ in Manchester

OCZ Agility 3 SSD drive has stopped working without warning. No longer works in Mac or external drive caddy. Suspect controller fault.
Can you recover data?

OCZ Agility 3 SSD

I have an scsi external HD for my OCZ E Mu sampler SSD (music) and it’s been solid as a rock until last night where I heard it spin up… then down again: now the sampler ‘sees’ it as sleeping but it will not wake. Lights on, so power supply good. I am in Manchester M16 and need data off it/fixed or, wosrt case, at least a storage solution.

My OCZ external hard drive for a few years and has all of my work / photos on it. However, it no longer shows up when I plug it in. I have used disk utility on my Mac which is telling me it needs repaired but says it can’t be fixed when i press ‘first aid’.
I’ve ordered a new external hard drive for tomorrow in a hope that the files can be transferred from the existing one on to the new one?

I have an OCZ Hard Drive
I dropped the hard disk from office table and it stopped working
After dropping, i connected again the hard drive to computer and let if on for 30 minutes
After 30 minutes i heard a long noise
I disconnected the hard drive from computer and tried to log back again
But it gave 2 beep sounds and failed to connect
At the moment it is not working and my initial attempts to recover the data failed
I was told that the hard drive’s requires the following:
* A platter exchange is required that cleans the disk platters with alcohol solution to remove any remnants of the failed read/write heads
* Images the disk platters individually
* This procedures allows, image more sectors from the disk platters which means more data will get imaged.
Can i kindly request your help to advise whether this is possible with your service and cost of the service if possible

Read More

Data Recovery in Sheffield

QNAP Data Recovery Sheffield
I have a QNAP TS-212 that I used to store music, photos and films for streaming around the home. I think we may have had a power cut a week or so ago and ever since the NAS hard drive has stopped working. The status light is flashing red and green – I have tried resetting but the issue has not resolved. I am in Sheffield, West Yorkshire.

SheffieldRecover Verbatim Hard Drive
Left the hard drive overnight to copy folder with movies from laptop and when woke up in the morning hard drive was shut down. All setup was left on the carpet so the hard drive has overheat itself and die. Now when i plug in to laptop it all starts like it should, HDD starts spinning, click once and stops that’s it. Laptop can’t see the HDD.
Verbatim 47512 1TB (review here).

Data Recovery Seagate – Sheffield
i have seagate expansion hdd (2tb). i the drive has stopped spinning and i think the it got knocked somehow. even the power light doesnt come on. its where i have all the kids stuff on, so i really need your help – drive is in Sheffield (Woodhouse).

External Harddrive Seagate Barracuda 7200.11 1 Terrabyte. Drive was removed from a Maxtor box. Looking for quote to recover files on drive

Tablet Repair
May I ask if you offer to fix computer/tablet (Asus T100H). It seems to the battery faulty – I tried to fix it by myself but It wasn’t a succes. I have bough the right one. And how much it might cost for it ?

Read More

The Old (Data Recovery) Curiosity Shop

The Old Curiosity Shop is of course a book by Charles Dickens from 1841 concerning a shop that is full of odds and ends. I thought I’d write a similar post about hard drives and the need for data recovery.

Hard drives can suffer from all types of curious ailments and I’ve reproduced some of them below, with thanks for the hard drive recovery experts at Data Clinic in Manchester (near Halifax!) for their assistance in writing this post.

We are a Halifax computer shop and we have a problem accessing the data on a hard drive. It does not show up on computer when connected. ticking noise can be heard when it starts up and turns off. It may have been knocked about – possible cause of issue.

halifax, data recovery

Got a couple of old PCs which I can no longer operate due to not having the keyboard and mouse connectivity.
Just looking to retrieve any old photos/MP4 files from a couple of Samsung hard drives. I’m in Halifax.

Western Digital – my passport ultra
no apparent failure cause.
The drive first does not show up, after allocating it a letter. The drive shows up without its original name. When trying to open it, the entire computer slows down until the drive is unplugged. After unplugging it a error messages shows up with “impossible to access the drive”

Pin was stuck on hard drive as wasn’t detecting on disk manager. Pin moved to normal location. And now recognised but unaccesible as all data in RAW. CHKDSK wont run. Used easeUS recovery software , deep scan located files but unable to retrieve as programme seems to freeze after using. Any recommendation and what to do?

Samsung HM100UI 1TB 2.5″ FAT (I think)
No access to iTunes media files on drive. Drive just ‘squeaks’
Does not show up in Finder or Disk Utility

I have 2 external hard drives (brands: Samsung, Buffalo) which are not working anymore. Both of them have been through a lot of moving houses and one for sure has been dropped on the floor and not worked since. Neither of them make any noise when plugged into a computer, nor are they visible under My Computer folder.

Western Digital My Passport stopped working. Light on, shows on machine, but says access denied

SEAGATE HARD DRIVE IN A DELL PC. CAME UP WITH A MESSAGE HARD DRIVE ERROR CODE 2000-0142. HARD DRIVE HAS NOW BEEN REPLACED WITH A NEW ONE. CAN YOU HELP TO RECOVER THE DATA FROM THE OLD DRIVE?

Hard drive does not show up on device when plugged in after a knock, therefore not being able to retrieve any data. I think the disk has been damaged. does not make any noise or anything.

WD My Passport 1TB external USB HDD has died. Makes all the right noises and the access light flashes, but won’t show up on mine or my partner’s Mac.

As you can read from the above there are many problems that can befall a hard drive. If you are close to Halifax or Manchester and your hard drive develops a fault, speak to the guys at the Clinic, who will help you regain your data.

Read More

Dropped hard drives in Stockport

I have a hard drive that was dropped on the floor a few days ago. I can still access files but transfer speeds are extremely slow (in the kb/s range). Ppt files regularly crash when opening. When saving, files also tend to crash. When I place my hand on the drive as it is spinning, it feels like there is a faint ticking, indicating a mechanical problem in reading files. It is essential that I recover as much data as possible (about 70gb in a 1tb Hard drive) as I am a new teacher and foolishly have not made a back up.

A friend has a Seagate 1TB hard drive that I dropped and has now stopped working. I really need the data on the hard drive as I use it to archive performances of my band. I’m wondering how much would it cost to be repaired? And where exactly are the Data Clinic hard drive recovery stores around Stockport?.

a map of stockport

Hard drive now removed (replaced with new) from 14 year old Toshiba laptop.
Hard drive physically will not rotate and seems totally broken. I need one file from it only, a draft of my memoirs (about 75,000 words). I live close to to Bredbury and Hazel Grove area of Stockport and can call in if you wish to recover my data.

The Destop HDD isn’t able to launch Windows (10) and using the Windows recovery tool shows the main partition as empty, being a WD Blue 2.5″ 640Gb capacity. I’ve connected the HDD to an external USB3 unit but I can’t access the data.

I urgently need Data Clinic’s help in recovering the files from a Western Digital My Passport Ultra external drive. Recently it started to taking a long time to show on a 2017 Macbook Pro after a fall onto the floor. We have an older Windows machine, running Windows 7 and the drive would show up, but transferring anything in the last few hours has seen frequent I/O errors appearing. Now it is struggling to even show the folders on the drive.

Read More

Data recovery for Lightroom user

Here’s an interesting data recovery enquiry I had from a professional photographer based in Wigan. I passed this enquiry onto the people at http://data-recovery-tips.co.uk/ who were able to get the data back.

Wigan

I have a 1 TB Transcend Storejet external HD no more than 4 months old. I was using it yesterday to run my lightroom catalogue whilst editing photos on my Macbook Pro and a strange error message came up (loads of commas and random letters) and Lightroom crashed and my Hardrive kind of froze (it wouldn’t eject but the symbol was still on my desktop). Ive tried plugging the hard rive into two different mac book pros, my iMac and changed cables aden the problem doesn’t change — it isn’t recognised, there is no sign of it at all. It has life as the blue power light is on on the hard rive but it is a continue light rather than flickering slightly like usual. Would like to try and recover the stuff on there and if possible get it working again.

Another one of my devices also needs sorting out: My HP Pavilion 15-b135ea Sleekbook had coffee spilled onto it, I then dried it out. The laptop then worked briefly, but now when I power it on it displays:
Boot Device Not Found
Please install an operating system on your hard disk.
Hard disk (3F0)
I pressed F2 for system diagnostics and ran a memory test, which was passed. I then ran a quick hard drive check which said:
SMART Check : Not installed
Short DST : Not installed
Then I ran an extensive hard drive check:
SMART Check : Not installed
Long DST : Not installed

This is the machine that I run Lightroom from, so not only do I need my data recovering from the Transcend hard drive I also need the laptop sorting out – do you think you can recover the data and get the laptop working again? I am in Wigan, Lancashire and can call in to see you if required.

Read More

Damaged unrecognised drives

I live in York and have a 1TB samsung M3 external hard drive which is now no longer recognised on windows 8/10 machines and samsung have indicated they will not be releasing new drivers to make this possible. I would like the data transferred to a new external HD. I am able to travel to Gelderd Road in Leeds if it’s any help

YorkMy Freecom 500GB external drive has got damaged – the mini USB port has become detached and I can feel the end of the unit is no longer solid. Not sure how it happened, as it is always stored in a pocket within my laptop case, but these things happen.
Is it likely the data on it can be saved?
And if so, at what kind of cost.

I have a problem with my hard drive on my MacBook Pro. It can not start-up, I did try to use command option p r but no success, try the safe mode but no success, try command r option but no success. This is urgent because I am at Leeds university.

HDD 500MB DAMAGE AFTER FALL ( itry to fix it with chkdsk – my laptop ist to slow for that) one partition full of photos and documents folder on another partition is important for me. what can be the price of your service and can you collect my device from my Leeds home?, or my work in York

Iomega external 360GB HDD – inside it’s a Seagate Barracuda 7200 I think. When we power it up the light blinks on and off and it doesn’t register on the PC. Having taken the casing off I couldn’t see an obvious loose connection. But I only got as far as taking the main outer casing off. Haven’t yet plugged it into a new drive mount etc.

External disk drive not detected by PC. Makes clicking noise when connected then stops, probable mechanical problem.

I have a Western Digital My Passport Ultra 3TB in York that fails to function for quite some time already. The light on the hard disk does not blink and is not found as an external hard disk when connected to my laptop. I have tried connecting it to a iOS and windows 10, but still not working. However, if I tried to hold the usb cable firmly over the hard disk, I can see light on the hard disk blinking, but it is still not connected to my laptop.

I’m at work in Leeds and when I plug in my WD My Passport to my laptop it makes five beeping sounds with the light flashing in time and then the light stays on but when I try to locate the drive it isn’t registering on my laptop.

Read More

Hard Disk Drive Recovery

6 instances of real data recovery worries from broken hard disk drives in this post, with links added where necessary. For more info, just contact me.

Sandisk Ultra II 480GB SSD failed out of the blue (came home to a black screen on my PC whilst it was on). The SSD does not show up on any PC in an OS or in the BIOS/UEFI. No updates were done to the firmware recently and no issues had occurred until today. Seems to be a sudden failure. The drive is about 18 months old only.

I have a toshiba external tg hard drive with auto back up disabled. It was connected to a MacBook pro while running a script when the MacBook Pro battery ran out and shut down. Since then my hard drive will not work on windows or mac. It calls it a local disk not its actual name. The first attempt gave an Error message of parameters. Subsequent error messages say corrupted and unreadable. It is missing the bar to say usage. When you select the properties, it says 0bytes used when before there was between 250 and 500gb. I haven’t run a check on it or any repairs for fear of causing more damage.

Disk is fully functional. I am attempting to recover data from a previous pc user who has deleted files. Another user has subsequently been set up on the pc along with software installs causing overwrites. Regular undelete programs have revealed lots of overwritten files and very little recoverable. Is this something you can help with?

Boss br1600I’ve left my external hard drive drop on the floor and since then it’s not reading anymore. It’s making a ticking and sound noises.
I’ve tried loads of times and nothing. I had a friend that had a quick look and he said that I should contact an specialist.
I have all of my work and personal stuff in there.
I would like to know if you guys could help me with that.

I have an old Maxtor external hard drive that backed up an old pc that broke. I would like to retrieve the data on it (namely photos and some old business files).
I live in Scarborough, but am in Leeds next Friday at St James’s hospital. I could drop it off after the appointment? Or I could post it – which ever is easiest.

I had two external drives attached to my iMac. I was using terminal to erase/format JHFS+ on disk4 but it couldn’t find the disk and appeared to move on and erased disk3. I have scanned it a couple of times with recovery programs but have not yet taken any action because the files I need most don’t show up. They are *.BR2 and *.VR8 files generated by a Boss Digital Recording Studio BR1600. What are my chance of getting a complete undelete? One of the scans showed up about 700k files but only the easy ones MP3,MP4,Doc,XLXS,Numbers,Pages etc. Also what is the likely cost if it is reversible?

Read More

SSD Data Recovery

In this post we look at SSD hard drive recovery services, using a customer enquiry as a question.

SSD hard drive“My laptop recently stopped working, I think it was something due to a little bit of beer being dropped onto the keyboard of my MacBook Pro. I took it into repair at PC world as I was insured however they have been unable to rescue the data. Instead they have returned the SSD drive to me. I was wandering.. there doesn’t seem to be any physical damage to the SSD and I have lots of important university work which I wish to retrieve. Can you advise me further as to the likelihood of my data being rescued. I have been recommended using an SSD recovery service like http://www.dataclinic.co.uk/ssd-data-recovery/ and wonder if you have any idea to how much this is likely to cost?”

The Data Clinic service you describe above is a good one. The company have been operating for some time and have built up quite a reputation as experts in data recovery. I don’t know their exact prices but you can expect to pay around £500 for their data recovery services.

Companies like Data Clinic don’t repair hard drives – instead they retrieve the data from them and put it on something else, such as another hard drive or memory stick. I know that they are a UK wide company with branches in most of the larger UK cities such as Liverpool, London and Glasgow.

Read More

Help with phones, ransomware and data recovery

I need help here. My laptop has been infected with a malacious virus called ransomware, everything on the lap is encrypted. could you fix it?

Sony M4 Xperia Mobile Phone – Been dropped and has vibration damage to the interior, and power is getting/ going/ registering with the mother board, and therefore cannot access the chip. Wish just to recover PHOTOS/ VIDEOS only. Phone has been examined by another company, however charged were very expensive, hence the description above.

I have a 1tb G-Tech Thunderbolt/USB 3.0 hard drive. Recently it stopped working as I was using it with Pro Tools and shut down the computer. When I restarted the computer I went into Disk Utility to try and repair the drive but as it was doing this it shut down the computer again. I can now see the drive in Finder and Disk Utility but when I double click on the drive it opens a new finder window and sometimes freezes. The rest of the time it will let me see the front face of the drive but nothing else. When I try to copy data to a different drive it freezes again and sometimes shuts the computer down.

Problem is with my iPhone 5c.
I forgot my pincode so cannot get into the phone to get my photos & videos from it. I no longer use this phone as I now have another phone but I desperately want my photos & videos from this phone.
The phone is in full working order I just can’t get into it.

Can see drive in the drives list but can’t access folders and can’t copy them as windows explorer and folders get frozen after I touch any folder. My external device doesnt show up on my macbook or any of my laptops. it used to show up and now it doesnt, sometimes it gets recognised by my macbook air utility. this problem just recently started, i have a lot of data on there that i do not want to lose

External hard drive not working. Once connected to any laptop it’s not connecting to laptop. Have tried it on 2 laptops and 1 desktop at home. Had a local repairer look at it and he said he can’t fix it.
The external hard drive has really important stuff on it, more sentimental stuff and really hope you can help.

Hard drive was showing files but then would go blank on and off. I tried to copy folders from one hard drive to another and it worked with one folder. Now my mac is not registering/recognising the hard drive when I plug it in.

Its turning on but wont let me log on.

I recently had my phone stolen and also had it recovered by the police. I ordered a replacement sim from Tesco however my phone would not work properly for weeks – could not call/text anyone. I finally resorted to taking my phone into Tesco to ask for help. They did a factory reset whilst I was in there and it was only afterwards that I had realised that my dissertation interview recordings were on my phone – in the voice recording app which I did while my IMEI was barred. I have since managed to get the phone unbarred and it now works – however my phone has been constantly restarted during this time. I have tried using both Dr. Fone recovery (did not recognise my phone at all) and Gihosoft (did not find the audio clips nor anything else – just what is on the phone now) with no luck. Do you think there is anyway it can be recovered please? Any chance you can email me a response please rather than a phone call as I have poor signal in my flat.

My 3TB Western Digital My Passport Drive received a hard knock and now displays classic clicking sound of the heads failing to read the disk and the actuator assembly arm jumping back to it’s parked position. The drive does not mount up.

i was in the process of creating an external boot usb drive for windows 10, The installer spent around 6 hours downloading a version of windows, during that time i attached my 500GB external drive to the laptop to move files and photos etc to the external drive. When windows finished downloading, the installer decided it would use my external hard drive as the boot drive and appears to have formatted it as a 32GB drive and all my files appear to be gone.
Is there any chance you would be able to undo this mess that windows made or be able to recover the files? I believe the drive was around half full.

Read More