Data Recovery Procedures
Services | RAID Recovery | Media and Operating Systems | Procedures | Forensic Services
Removable media
Data-loss circumstances
Recovery from physical and practical harm due to software corruption, mechanical malfunction, or human miscalculation, such as:
- Ruined data
- Unobtainable media
- Bugs or virus attack
- Inadvertent erasure of data
- Media surface corruption and destruction
- Combustion & water impairment
- Inadvertent reformatting
Recovery procedure for removable media
By conducting a preliminary analysis, we can ascertain whether the media is well matched with our lab equipment. If it is, our primary concern is to plan a crude representation of the information on Data Detect media so that a sensible assessment can settle on the degree of the information loss. If the data is difficult to locate our lab will examine the workings and cautiously inspect the state of the media to determine the degree of damage.
The process of recovering data from hard disks frequently means swapping failed or tainted workings in a dirt free zone by means of devoted hardware and software gear to create the basic representation. Failed workings typically include electronics, head assemblies, read/write heads, magnets & drive motors.
Reasonable retrieval uses the basic representation by examining the low-level information zones and settling on the necessary repairs to file scheme structures that are required to amplify entry to the important information. Sometimes the presented file scheme structures are missing or injured to such a large degree that information has to be deleted straight from one or more sections of the basic representation.
Data Detect has devised a variety of software tools that our technicians use to inspect, mend & recover information from simple representations of all operating systems. Once recovery is triumphant, a file inventory is formed and data legitimacy is then established.
Desktop/Laptop
Data-loss circumstances
Recovery from tangible and logical damage due to electrical or mechanical failure, human error or software corruption, such as:
- Notebook dropped or bumped - no longer turns on
- CPU won't boot
- Difficult to get to drives and partitions
- Corrupted data
- Applications that are unable to run or load data
- Bugs or virus attack
- Hard disk crashes
- Inadvertent erasure of information
- Hard disk parts failure
- Accidental deletion of data
- Media surface corruption and destruction
- Combustion & water department
- Inadvertent reformatting
Recovery procedure for hard disk drives
Each state of affairs has its own exclusive features. Based on Data Detect's wide knowledge, we can classify most single hard drive recoveries into two wide categories: External and Internal.
External cases
- Logical (Drive is Functioning):
- Erased files
- Corrupted file-system structures
- Physical:
- Read errors.
- External electronic issues
These issues can be addressed without opening the Head Disk Assembly (HDA) of the drive.
External situations can go beyond this variety if there is severe corruption of the file-system or if the drive comes from a APPLE MACINTOSH or UNIX system.
Internal cases
- Electro mechanical
- Head crash
- Contamination
These issues can only be targeted by opening up the Head Disk Assembly (HDA) of the drive beneath clean room conditions.
Internal cases more than this variety include, for example, a 200GB SCSI drive needing a high cost of parts. Drives from UNIX or APPLE MACINTOSH systems may also go beyond this variety.
The specific price of any case is determined by two main factors:
- The value (cost) of components.
- The total lab time used up on the case and what amount
of the work is done by subordinate, intermediate or higher-ranking
technicians. In turn, the sum of lab time and superiority
of staff needed are affected by:
- The extent of file-system reconstruction needed. This is the sum of reasonable restoration work needed for an external recovery or as the follow-up steps for an internal recovery.
- The File-system category. (Different Windows systems such as FAT32 and NTFS, APPLE MAC or UNIX)
Other factors affecting the price quote are:
Other issues influencing the price are the sequential lab accomplishment ratio on certain types of data loss on particular models. Please take note that if data cannot be recovered the expense incurred in attempting the recovery is borne entirely by Data Detect and the client will not be charged. Where we take enjoyment in a greater likelihood of achievement (and thus less threat) the price quote may be less than those cases with a lower likelihood of achievement and more hazards.
Substantial research and development is necessary to remain up to date with the technical developments in the disk drive industry. Consequently, data loss issues on new technology are charged superior than for more traditional models.
Palm/Pocket PC & IPOD
Data-loss circumstances
Recovery from physical and logical damage due to mechanical and electrical failure, software corruption or human error such as:
- Contaminated data
- Unreachable media
- Fire and or water damage
- Accidental reformatting
- Media surface contamination and damage
- Unintentional deletion of data
Recovery procedure for Palm/Pocket PC's & IPOD's
While determined to uphold our technological edge in the data recovery industry we began an wide investigation syllabus into the development of equipment to execute IPOD data recovery. We understand Apple's IPOD architecture and the way in which it reads and writes data on the HPFS+ file system. Most pocket PC's have a comparable system configuration.
Our first round investigation ascertains whether the media is gracious to our software and apparatus. If so, the key issue is to design a basic representation of the information on a Data Detect server so that reasonable assessment can determine the state of the information loss. If the data is difficult to find we will examine the workings and cautiously examine its state to ascertain the degree of harm.
Recovery of crashed hard disks in the Palm Pc or IPOD often requires replacing unsuccessful or damaged components in a clean environment and using dedicated hardware and software tools to produce the raw image. Failed components typically include electronics, head assemblies, read/write heads, magnets and drive motors.
Logical recovery uses the raw image by investigating the low-level data divisions and determining what repairs to file system structures are required to gain access to the important data. Sometimes the presented file system structures are absent or injured so much that data has to be extracted straight from one or more remains of the raw image.
Mean time to repair
- Desktop/Laptop: Comprehensive recovery restore time including examination and recovery is usually between 1 and 5 days. Some critical cases can take a great deal longer.
- Removable Media: Comprehensive recovery turn-around time including examination and recovery is usually between 1 and 5 days. Some critical cases can take a great deal longer.
- Palm/Pocket PC/IPOD: Complete recovery turn-around time including analysis and recovery is usually between 2 and 7 days.
- RAID: Mean time to repair time including examination and recovery on RAID is usually between 2 and 14 days. Some critical cases can take a great deal longer.
Fax: (02) 9929 5433
