Digital Evidence Investigation – Data Recovery and E-Discovery

As more of our lives are stored digitally, so more of this digital information is often seen as evidence. Maybe a phone contains images from a crime scene, or perhaps a hard drive contains an important email that warrants a forensic investigation of the data. One term for this is forensic data recovery.

Most data recovery companies are able to examine data forensically. Digital evidence examination basically looks at the data on a digital storage device in an attempt to discover if there is any pertinent information detailing illegal activity.

Enquiries for e-discovery (or ‘data discovery’) as it is widely known vary. Here are a few examples from clients wanting a forensic examination of their hard drives and mobile phones.

Linux ext4 formatted 2TB WD HDD that is fairly new. Will not initialise or mount. Has 1TB of films I need back as the online backup has, incredibly, failed at the same time. I have a spare drive to move the data to. I’m interested in having this data examined forensically – I think the phrase is e-discovery or examination of digital evidence.

My Seagate External Hard drive has stopped working, and the light will not light up. However it does ask for me to initialize the disk, and makes a clicking, beeping noise.

Over christmas I took a lot of video footage on my phone to make into a short movie – i put my SD card into my laptop and transferred the videos onto my desktop or iCloud, i also made folders for them on my SD card, now when i came to open the folder it has turned into an exec file which now it won’t open my videos and i fear i may have lost them! i tried to download a free software to try recover the data but it only recovered the audio and even then it was broken, i believe that the footage is still there i just need a way to bring it back, now my Mac is not recognising my SD and i don’t want to keep trying unless i cause further damage. It is only now that I realise that some of the footage may contain digital evidence of wrong doing and it may be necessary to reproduce this in a legal case. What facilities exist to examine the hard drive, SD card and phone forensically? Can you examine each of them and produce a forensic report as the what activity has taken place on each?

Read More

Retrieve stored files from OCZ in Manchester

OCZ Agility 3 SSD drive has stopped working without warning. No longer works in Mac or external drive caddy. Suspect controller fault.
Can you recover data?

OCZ Agility 3 SSD

I have an scsi external HD for my OCZ E Mu sampler SSD (music) and it’s been solid as a rock until last night where I heard it spin up… then down again: now the sampler ‘sees’ it as sleeping but it will not wake. Lights on, so power supply good. I am in Manchester M16 and need data off it/fixed or, wosrt case, at least a storage solution.

My OCZ external hard drive for a few years and has all of my work / photos on it. However, it no longer shows up when I plug it in. I have used disk utility on my Mac which is telling me it needs repaired but says it can’t be fixed when i press ‘first aid’.
I’ve ordered a new external hard drive for tomorrow in a hope that the files can be transferred from the existing one on to the new one?

I have an OCZ Hard Drive
I dropped the hard disk from office table and it stopped working
After dropping, i connected again the hard drive to computer and let if on for 30 minutes
After 30 minutes i heard a long noise
I disconnected the hard drive from computer and tried to log back again
But it gave 2 beep sounds and failed to connect
At the moment it is not working and my initial attempts to recover the data failed
I was told that the hard drive’s requires the following:
* A platter exchange is required that cleans the disk platters with alcohol solution to remove any remnants of the failed read/write heads
* Images the disk platters individually
* This procedures allows, image more sectors from the disk platters which means more data will get imaged.
Can i kindly request your help to advise whether this is possible with your service and cost of the service if possible

Read More

Data Recovery London

I have an office PC that needs the hard drive replacing. We have the new hard drive already, we just wanted the old one removed and replacing with the new one. Would you advise on how much you would charge for this? I am most contactable via email, so please use this as a primary contact. I am able to have the drive delivered to your London data recovery offices.

I have a duel boot laptop with linux and windows. There is something wrong with the linux partition, pretty much summarized in this link https://itsfoss.com/fix-minimal-bash-line-editing-supported-grub-error-linux/.
I have tried to create a boot repair usb but it doesnt seem to work, I still get the same problem. If you can help that would be great, I can bring my laptop in this week.

london (geotagged photo)

Laptop hard drive dead and data needs to be recovered. Home laptop, but office based in Westminster (London) so can be collected from there. I believe your Lombard Street (London City) is closest but Chiswick is possible too.

2tb AV power hard drive has a broken head i believe. bought a 4tb expansion pack that a dodgy parition map i believe as that what the mac recovery thing said, there are important pictures on the 4tb that i want recovered also. I would like the 2tb recovered onto the mended 4tb drive in essence.

Pen drive used in work computer and it was encrypted by checkpoint. I can’t get it to open now on my home or new work computer. my password doesn’t work and I’m now doubting it is correct

I put a the wrong power cable in an external HDD. I burnt out the PCB. So removed 2TB 3.5 HDD (Samsung HD204UI) and put in my PC. Unfortunately it wasn’t recognised and it looks like the a single diode is burnt too. How much will it cost to fix the PCB and/or extract the data?

I have a Samsung M3 Portable 1TB external hard drive model no. HX-M101TCBG. It suffered a drop and is no longer seen by computer. Can only be found in device manager. Blue light on hard drive stays on constantly.
No grinding noise heard from drive. The hard drive is located in London.

I was making a Word file and when I tried to save it to the hard disk, it made the quiet sound it normally makes when the PC is accessing to it but this time there was a beeping sound afterwards, the whole PC froze and I turned it off. Since then, everytime I turn the PC on, the hdd beeps and the systems mentions that the hard disk didn’t initialise properly, it IS being recognised by the PC but it doesn’t shows up properly nor it can be accessed. My HDD is a 5 year old, 2000 GB Seagate Barracuda Green, it only has like 1 Tb of files and I would like to know how much would it cost me to recover those files, if possible.

Read More

Seagate recovery near Thurrock

I have a 24 year old Seagate ST15230N SCSI hard disk. I no longer have a PC with a SCSI card. The last time I ran it up was about 8 years ago and it was working fine. I don’t need data recovery, I would just like a copy of all non-windows files on the disk. Is that something you can do – and assuming the drive runs up ok can you give me a idea of cost. I’m looking for a data recovery service that based close to Thurrock in Essex (near Grays).

My ‘My Passport’ WD Ultra external hard drive is not readable by my MAC suddenly. I have used it less than a week ago.
In the meantime from my MAC I deleted loads of files that looked irrelevant.
I also went to disc utilities – synced, erased and re-set and made another WD hard drive that was empty so it was compatible with a MAC (this one was for work whereas the one that since then isn’t working is personal).
Maybe I have messed things up in the process. I just don’t want to have lost my many precious things on my own hard drive.

Thurrock church

I’m in Thurrock Essex. Can no longer access the files on the hard drive. The hard drive makes a noise when plugged in.

I have a Seagate Barracuda as a secondary disk for data that suddenly stopped working, making my computer go slow and becoming unredeable by the OS. Clearly is the case you guys describe and hopefully my data is still there. I’ve already switched it off and hopefully you guys can call me back to arrange a collection.

Sega external hard drive is not mounting and clicking. Please, can you help? Plus send me a quote for removing all the data

wd 2 TB external hard drive ,
stopped working from one day to another , used it with Imac so did a disk repair and nothing , it says ‘ invalid content in journal ,
need to retrieve some of the files inside the hard drive

Can i get a quote for 2 Western Digital external hard drives that will not connect to my laptop
One is WD1200 and one newer 1TB device

Read More

Critical Process Has Died – Hard Drive Recovery

My hard drive was replaced last week but on the old one there are documents I would like to retain. I could enter my password as usual but nothing happened after that and a system recover was not possible. I did get a message saying a ‘critical process had died‘.

I have about 1 TB of files on an external hard drive that can not get power. It worked 3 weeks ago when i last did an update. I should mention this was in Nottingham and the power sources is fit for USA electrical outlets. I moved to the UK, tried attaching a UK adapter and no luck having it run. Sometimes you may hear a motor running and then you realize the electronic device is not fit for a different voltage and it stops. there was none of this. just quiet from the beginning. i have no way of checking what the problem could be now that im in the UK. my hard drive does not show a voltage range or process either. is the plug adapter just not appropriate or did i break it.

Nottingham

Seagate external hard drive beeps when plugged in and no data is transferred. When googles it appears the motor may be stuck. The hard drive has died and contains data for my teacher training year so it would be very useful to be able to recover the data or fix the drive.

I have a WD External Desktop Hardrive but the USB connection port is broken. The IT department at my school tried to fix the broken port but could not. The data on the hard drive is still there and it’s critical that I recover the contents. They tried placing the hard drive in another casing but as the data has some kind of protection / encryption they cannot get to it. Are you able to recover this data?

My Sony Xperia Z1 Compact has completely stopped working and I need to retrieve very important critical data from its internal storage. I have replaced the battery with a new one but nothing works.

2 x HDD Disks are from a Stora NAS drive both failed, set up as raid. Disks still spin up but cannot read them or access them. Have tried using aftermarket disk mount without success. Would like to know if you have hardware to enable reading of these disks and an approximate cost to recover data. Both discs are 1TB with about 500-750MB used. I saw an error telling me an important process has died – I need hard drive recovery – it’s critical that I get the data recovered.

I had some water damage over my MacBook Air (2013). Apple has put the storage into a safety bag, but did not comment on its condition. Wonder if your team can have a look to see if there are any issues / what it will cost to recover?

I have a Hitachi 5K250 160Gb (model number HTS542516K9SA00), with clicking noises, that is not readable.
Another company told me it’s impossible to recover data, as it is a mechanical issue. HDD was not open on this process.

I have a Buffalo Terastation showing multiple HD failures. I has a little data on it I think that I would like to keep.

I have a Lacie 2TB thunderbolt external drive that crashed. I have tried several recovery software programs but none are able to access any data from the drive. My Mac isn’t able to mount the drive- but after 15-20 min I get a message saying “the drive is unreadable- IGNORE FORMAT EJECT” I would like to know if it might be possible to recover 2 folders from this drive from one partition on the drive- I don’t need all of the data and what this would cost? I am located in Shoreditch

I was in Nottingham and one place I visited the lift doors opened to a yawning gap and in fright I dropped my bag – it fell down the shaft with my and my girlfriend’s phone plus a few other things. My phone and hard drive died so I took the brunt of it and long story short the mother board is damaged and ‘beyond repair’. Apple store says. Any suggestions if it’s possible to retrieve data / photos off of it? I really want the critical process data ie. the What’s App messages and photos from last few months – last backup to iCloud was in February (as it was full) so since then it’s just been on iTunes, on the phone. A friend of mine suggested contacting you. If you think it’s a no can do then please let me know. I can’t set up my new phone until I know as I’ll have to reset my iCloud and will lose all my other data. This is my Mum’s phone number as I don’t have one at the moment – email is best at the moment.

Read More

Data Recovery in Sheffield

QNAP Data Recovery Sheffield
I have a QNAP TS-212 that I used to store music, photos and films for streaming around the home. I think we may have had a power cut a week or so ago and ever since the NAS hard drive has stopped working. The status light is flashing red and green – I have tried resetting but the issue has not resolved. I am in Sheffield, West Yorkshire.

SheffieldRecover Verbatim Hard Drive
Left the hard drive overnight to copy folder with movies from laptop and when woke up in the morning hard drive was shut down. All setup was left on the carpet so the hard drive has overheat itself and die. Now when i plug in to laptop it all starts like it should, HDD starts spinning, click once and stops that’s it. Laptop can’t see the HDD.
Verbatim 47512 1TB (review here).

Data Recovery Seagate – Sheffield
i have seagate expansion hdd (2tb). i the drive has stopped spinning and i think the it got knocked somehow. even the power light doesnt come on. its where i have all the kids stuff on, so i really need your help – drive is in Sheffield (Woodhouse).

External Harddrive Seagate Barracuda 7200.11 1 Terrabyte. Drive was removed from a Maxtor box. Looking for quote to recover files on drive

Tablet Repair
May I ask if you offer to fix computer/tablet (Asus T100H). It seems to the battery faulty – I tried to fix it by myself but It wasn’t a succes. I have bough the right one. And how much it might cost for it ?

Read More

The Old (Data Recovery) Curiosity Shop

The Old Curiosity Shop is of course a book by Charles Dickens from 1841 concerning a shop that is full of odds and ends. I thought I’d write a similar post about hard drives and the need for data recovery.

Hard drives can suffer from all types of curious ailments and I’ve reproduced some of them below, with thanks for the hard drive recovery experts at Data Clinic in Manchester (near Halifax!) for their assistance in writing this post.

We are a Halifax computer shop and we have a problem accessing the data on a hard drive. It does not show up on computer when connected. ticking noise can be heard when it starts up and turns off. It may have been knocked about – possible cause of issue.

halifax, data recovery

Got a couple of old PCs which I can no longer operate due to not having the keyboard and mouse connectivity.
Just looking to retrieve any old photos/MP4 files from a couple of Samsung hard drives. I’m in Halifax.

Western Digital – my passport ultra
no apparent failure cause.
The drive first does not show up, after allocating it a letter. The drive shows up without its original name. When trying to open it, the entire computer slows down until the drive is unplugged. After unplugging it a error messages shows up with “impossible to access the drive”

Pin was stuck on hard drive as wasn’t detecting on disk manager. Pin moved to normal location. And now recognised but unaccesible as all data in RAW. CHKDSK wont run. Used easeUS recovery software , deep scan located files but unable to retrieve as programme seems to freeze after using. Any recommendation and what to do?

Samsung HM100UI 1TB 2.5″ FAT (I think)
No access to iTunes media files on drive. Drive just ‘squeaks’
Does not show up in Finder or Disk Utility

I have 2 external hard drives (brands: Samsung, Buffalo) which are not working anymore. Both of them have been through a lot of moving houses and one for sure has been dropped on the floor and not worked since. Neither of them make any noise when plugged into a computer, nor are they visible under My Computer folder.

Western Digital My Passport stopped working. Light on, shows on machine, but says access denied

SEAGATE HARD DRIVE IN A DELL PC. CAME UP WITH A MESSAGE HARD DRIVE ERROR CODE 2000-0142. HARD DRIVE HAS NOW BEEN REPLACED WITH A NEW ONE. CAN YOU HELP TO RECOVER THE DATA FROM THE OLD DRIVE?

Hard drive does not show up on device when plugged in after a knock, therefore not being able to retrieve any data. I think the disk has been damaged. does not make any noise or anything.

WD My Passport 1TB external USB HDD has died. Makes all the right noises and the access light flashes, but won’t show up on mine or my partner’s Mac.

As you can read from the above there are many problems that can befall a hard drive. If you are close to Halifax or Manchester and your hard drive develops a fault, speak to the guys at the Clinic, who will help you regain your data.

Read More

Recovering Files

The retrieval of files and data from hard drives is known as data recovery and in the UK there is a blog called Recover Deleted Data which has many different examples of hard drive failures and recommendation about what you can do to get your files back. Here are three examples along with advice.

Hard drive is broken

I’ve got a hard drive from my desktop which I took out before I scrapped the rest of the computer about 6 Years ago. I haven’t got a desktop any longer, only a laptop. I recently bought a 3.5” hard disk external enclosure to fit the hard drive into, which I can then connect to my laptop. But I fear the hard drive is broken or faulty, as nothing shows up when I connect it via the external hard disk enclosure. The hard drive was working 6 Years ago when I took it out. I cannot remember wether Windows was installed on this hard drive or I just used it for data storage.
Can you help me getting it to work? Or at least take out all the data that’s on it?

Advice: As long as you’ve got the PATA or SATA interface right, once you plug the power cable in, the hard drive should burst into life. If it doesn’t then there could be any number of faults with the hard drive.

Cracked Micro SD card

I’m hoping you can help, or tell me if you might be able to help with the following. My partner had a micro SD card in an adapter, plugged in to the side of her laptop…which she dropped. The micro SD card has cracked in half, around the middle of the card. Is this something which could be fixed? She has multiple work photos which she was in the process of backing up and is having a bit of a panic.
I’m based in Glasgow, so could pop along tomorrow (Tuesday) if this is something you can help with.

Advice: The data on a micro sd card is held on a single wafer thin chip. If the chip is cracked, broken in two or otherwise damaged the data on it will not be recoverable. I know that Data Clinic have a file recovery office in Glasgow so you could always take the device in for a second opinion, but from what you tell me there is no chance of recovery.

Bad sectors

The external HD is rarely being registered by my Mac laptop and on the odd occasion it is, it won’t load any files. A pop up appears saying that I can access my files but not save or replace them – however I can not access them.

Advice: This is typical of bad sectors – parts of your drive becoming unreadable or very slow to access. If your data is valuable, turn your drive off and get it into a decent data recovery company.

Read More

Installed Linux over Mac Files

linux logoI stupidly installed linux over the top of my mac. this wiped everything, then when I re-installed mac osx nothing was there. I did send it off to Rapid Data recovery and they were not able to recover anything from the HD. Would you be able to do anything. I did speak to a friend who works in data and they said that there still could be a way.
This is what happened.
– Linux installed which wiped HD and old Mac OSX tables.
– re-installed new mac OSX – nothing there.
– Disk image taken of HD.
So I have a disk image of the HD at that state. As I said Rapid Data already looks at it and said they could not help, I have also run recovery software with no luck.

I have a macbook air 2013 where the ssd is nonresponsive from boot. the macbook doesnt recognise the hard drive but a recovery of documents is required. also will require an eta of recovery (if possible) as i am facing an important deadline. also have an old magnetic hd (LA Lacie Porsche) in which will require recovery of files (not urgent). It’s running a version of Linux and I’m in Salford.

I found an old Seagate drive (model ST1181677LCV). As it has an ultra-wide, 80 pin SCSI connection I am unable to connect to it – and so don’t know its format – though suspect Mac.
My guess is that it may have info from the mid 1990s on it. I am not aware of there being any ‘valuable’ data on it, but would double check if it was not going to cost too much.
Are you able to read this drive? – it’s running and old version of Linux and has some Mac data on it too. It’s these files that I want to recover. I’m in Huddersfield and work in Salford.

I bought a toshiba external hard drive a while ago and stupidly converted the format from Linux PC to Mac compatible and afterwards it wouldn’t work and slowly went down hill from there. Im really scared that all the data has been erased and think theres a slim chance of getting it back. Could you give me an idea of if this is possible to repair/at least get the data from it and how much this would cost? Has 18 years worth of pictures on it!

Read More

Help Required with Seagate Drives

Can anyone help me with the following problems? I’ve got a few Seagate hard drives that don’t work and I need the data off of them.

I have a PC that stopped booting up, the primary boot disk was an SSD and the secondary disk was a Seagate Barracuda 2TB (ST2000DM001). After checking further, the PC problem seemed to be an issue with the Seagate disk (if I disconnect the Seagate then the PC works fine). When powering the computer on with the seagate plugged in, it makes a clicking sound. I can’t actually hear the disk spinning up so I’m not sure if it’s just a problem with the PCB or not. The disk should be in excellent physical condition. It’s probably about 5 years old and has been in a fixed installation PC that hasn’t ever been moved since the initial installation. I’m very hopeful that you’ll be able to recover data.

Seagate hdd

External harddisk – when connecting to computer with USB-cable light is activated and you can hear it spin. But you are unable to access it on the computer. Do you think it will be recoverable, and what is estimated price?

I can see the files but I can´t copy them. A message like “The file X is in use and you can´t copy it” appears and it stops the copy.

Seagate external hard drive 3tb.
Grandson plugged in wrong power supply, which I found smoking.
Hard drive did not smoke, or get hot. However, it is now dead.
I assume it’s pcb fuse/diode has been damaged.
Can you repair?

A seagate expansion drive 1tb – The hard drive makes a beeping when connected to a computer – which sounds similar to sounds made when the heads break off/get stuck in other harddrives(a Google search indicated this to myself.) I’m looking for a quote please for the estimated cost of repairing this drive.

I am wondering if you can recover the data from an external USB stick? The casing is off the USB stick, and only the main logic board and chips remain. These parts are intact. I can send an image if it helps?

So if anyone can help – please let me know.

Read More