Hard Drive Recovery: Software and Services
If a disk drive fails, would you know how to get your data back? For many consumers and small to midsize businesses, the first step is purchasing or downloading free data recovery software. This might work if the only problem is an accidentally deleted file since the data isn’t really gone from the disk, but homebrew remedies can be problematic and perhaps permanently destroy the data if proper precautions are not taken.
There are numerous consumer products for simple data recovery, such as a getting back a deleted file, a deleted disk partition, or data from a damaged disk sector. Microsoft Windows’ built-in CHKDSK command, which has been around since the DOS days, can identify and remap damaged sectors. Commercial products such as R-Studio, Ontrack EasyRecovery, Stellar Phoenix, and several others can recover deleted or reformatted disk partitions on a variety of storage devices, including internal and external drives, USB thumb drives, and SD Cards.
Backup and disk imaging products, such as Acronis True Image, StorageCraft ShadowProtect, Marcium Reflect, Symantec’s Norton Ghost and many others are able to create full disk images that are exact duplicates of the original disk. Differential and incremental images can be added after the original image is created, reflecting all changes from the time the image was made until the most recent update. If anything happens to the original drive, the image can be used to restore anything from a single file to the entire disk back to a known, working condition. An image backup includes everything on the disk, including hidden and system files that a file-based backup would not include. Many of the popular commercial products also have free trial versions or freeware versions that have limited capabilities.
While these approaches can work for some lost data, they are ineffective when a drive has a physical problem. What's more, while these approaches are often effective, they involve overwriting the source hard disk and could have unintended consequences, such as potentially overwriting a good file with a corrupt one.
Finding a professional qualified to recover data is difficult because there is a dearth of proper training and certifications. Anybody today can hang out a shingle that says they do data recovery. Whether or not they can, at least without putting the rest of the data on the drive at risk, however, is questionable.
Very few states have license requirements for computer forensics experts, let alone computer repair depots, says Steven Burgess, founder of Burgess Consulting & Forensics in Santa Maria, CA, and a 20-year veteran of the data recovery industry. In Texas, for example, a private investigator’s license is required for any disk data recovery, he says. This differs from other states where the PI license is only required when the data from the hard drive will be used in court and must be handled as evidence.
Burgess says that roughly 60 percent of the disk recovery projects he sees can be repaired with software only. Sometimes consumer-grade software can do the job but sometimes that same consumer-grade software might overwrite important data. The remaining 40 percent are equally divided between physical disk failures, such as a head crash, or failures in a RAID environment. While the disk failures in RAID sometimes can be repaired just using software, failures with RAID configurations can require different repair protocols.
Consumers should not try any do-it-yourself attempts to recover data if the hard disk is making noises, such as clicks or chirps, Burgess says. Sounds and smoke indicate a physical failure that rarely can be fixed with software.