External Drive turned to RAW

Mike McCall

Well-Known Member
Reaction score
1,072
Location
Silverton, Oregon
My sister-in-law's external drive magically changed from NTFS to RAW. She has a lot of data (pictures mainly) on the drive. Some software recovery programs claim to be able to recover the data before reformatting or replacing the drive. Not had to do this before so new territory here. Any recommendations?
 
Tread carefully if the stuff is irreplaceable. it is tough to "work" for family.
What brand external?
We've already had the discussion about risk and possible outcomes. She understands I'll do what I can, but it may turn out that it needs to go out for recovery or written off. She's in the process of moving to Texas, though I'm not sure what part exactly. My wife will be bringing the drive back with her (about 3hrs. away).

I believe the drive is a 2TB WD Elements.
 
Clone the drive with ddrescue, put the original on a shelf/in a drawer for safe storage. Work from the clone only.

There's a reason it went RAW and until you know what that reason is, consider the original drive high risk and not to be used even for recovery purposes.

Ask her if she used a password with it. A lot of WD drives include encryption systems and some people set it up. If she did, she may be screwed.

I use R-Studio to recover the data and it works great in these situations. It is recommended by a lot of people here which is where I heard of it. For this situation you may be able to find some cheaper/free software though. Success will depend on how good the clone turned out, what caused the original problem, and if it was encrypted.
 
Before you do more harm then good ring up the guys at recovery force and let them handle it for you.

I had them handle a similar situation for me and they did it quickly and professionally.

Sent from my SM-G870W using Tapatalk
 
Clone the drive with ddrescue, put the original on a shelf/in a drawer for safe storage. Work from the clone only.

There's a reason it went RAW and until you know what that reason is, consider the original drive high risk and not to be used even for recovery purposes.

Ask her if she used a password with it. A lot of WD drives include encryption systems and some people set it up. If she did, she may be screwed.

I use R-Studio to recover the data and it works great in these situations. It is recommended by a lot of people here which is where I heard of it. For this situation you may be able to find some cheaper/free software though. Success will depend on how good the clone turned out, what caused the original problem, and if it was encrypted.
From what I've read so far, anything from a virus to not being properly ejected can cause this, although I don't recall seeing a drive randomly change file systems. That said, proceeding with caution will be the order of the day. Since I setup the drive for her initially I know there's no password or encryption.

Here's a couple of things I've found already about this:

https://www.easeus.com/resource/raw-file-system-to-ntfs.htm

https://www.icare-recovery.com/howto/convert-raw-ntfs.html

https://www.partitionwizard.com/partitionmagic/convert-raw-to-ntfs.html

Most seem to indicate this is a more common problem than I would think, and that the data should be recoverable.
 
Raw recovery is completely possible of done correctly.


Sent from my SM-G870W using Tapatalk
 
Luke, I recognize and respect your greater knowledge & experience in such matters. I suspect that more than a few techs would prefer to send much of their work on drives out, rather than risk an undesirable outcome. Whether we like it or not, the mindset of the residential customer is often - "If my trusted tech can't recover it, I'll count it a loss." The objection to sending it out is cost. That's what I hear every time I suggest it (and I do suggest it). I'm not saying the costs are out of line, just that most residential customers won't pay for it. To the customer, we're their best hope of recovery (mainly because they won't pay to send it out). To the data recovery company, we are ill-equipped (at best) to do a proper job.
 
@Mike McCall I did not suggest you need to send it to a lab. I was providing you information to help you better come up with a gameplan.

If your first step isn't to clone the drive, you are likely making more work for yourself and risking compounding the data loss.

To me, it seems like a lot of work for you to spend at least 2 days (time to clone the drive, scan the drive with a recovery program, the time to copy the recovered files to a destination drive and the time to sanitize your clone a couple weeks after the project is closed) for free if the data is not recoverable and for less than a $300 USD that they would pay a pro. Meanwhile, you are occupied from doing any other billable work. The only way I can make it work for my lab to charge as little as we do is based on volume, doing many recoveries at the same time.
 
@Mike McCall I did not suggest you need to send it to a lab. I was providing you information to help you better come up with a gameplan.

If your first step isn't to clone the drive, you are likely making more work for yourself and risking compounding the data loss.

To me, it seems like a lot of work for you to spend at least 2 days (time to clone the drive, scan the drive with a recovery program, the time to copy the recovered files to a destination drive and the time to sanitize your clone a couple weeks after the project is closed) for free if the data is not recoverable and for less than a $300 USD that they would pay a pro. Meanwhile, you are occupied from doing any other billable work. The only way I can make it work for my lab to charge as little as we do is based on volume, doing many recoveries at the same time.

Luke, it was not my intent to offend you or start an argument of any sort, and I was not taking you to task about your pricing. Rather, I was merely stating a fact about a majority of residential customers unwillingness to pay the cost of lab recovery. It costs what it costs, I get that. I can suggest all I want to the customer, but when they hear the minimum price of recovery they refuse. It's that simple.

If your intent was to provide me information on a game plan - "If your first step isn't to clone the drive, you are likely making more work for yourself and risking compounding the data loss" - why didn't you say that? Reminding me to clone the drive first isn't really the point though. Those of us who have been here for any length of time, and value your input (as I do) have read your articles and posts on these matters. If I've paid any attention to those things I'm going to clone the drive before anything else. Yet, the assumption is I either don't know it or haven't thought of it.

On the page you sent me to it lists 4 possible reasons why one might see a drive like this. Only one (Bad Sectors) might be recoverable by a repair shop (unless properly equipped). Failing heads either work well enough for cloning or they don't. No usable information which might change my options. Other sites listed above suggest different potential causes and possible solutions. Even if they're absolute crap it doesn't change my options. I can either make my best attempt, or I can tell the customer their data is lost. Neither will convince the customer to send the drive out. That seems to be the part you're missing in this.

I can easily see the process taking a couple of days as you suggest. I don't have to babysit the process once it's started. Keep an eye on it, yes. But in the end the process will either work or it won't. Don't know where you get the notion I would not be able to perform any other billable work. I have plenty of other things to do while trying to recover the drive.

All my data recovery/hard drive issue customers are told that I get a "window" where I have a chance of being able to help (depending on the particular issue), that things can go sideways at any point in the process putting all data at risk, and their best bet is to send it out. I, like many here are forced to deal with customers who won't send out drives for recovery, period. I can't help that. You don't seem to get that and I don't know how to make you understand.

You say it seems like a lot of work for free if recovery fails, or less than the $300 they would pay a pro. But it's not just a $300 bill to a pro, is it? If it turns out to be anything other than a "simple" recovery the costs can go up quickly and substantially. Not finding fault. It is what it is. However, for the residential customer it seems to start out at more than what they're willing to pay and go up from there.

Near the bottom of the page you sent me to is this:

"If you are experiencing this type of issue, please be very careful on how you and/or your technician deal with it. If you value your data, it is best to have your hard drive assessed by data recovery professionals, like the team at Recovery Force. In most cases, Recovery Force is able to recover the data from this type of issue at our minor recovery rate and it is usually completed within a couple business days."

"If you value your data..."

Perfect.
 
Sorry but if your customers are refusing it it's likely because you are educating them wrong.

Have you asked them what the data is worth to them?

If they truely trust you then they should trust that you are being honest when advising them their best bet is to send it to a professional.

I recently sent a similar recovery to recovery force And while they did what they are great at I was out making more money.

Now I completely agree there are times customers say the data is not worth much to them and just want to try the cheapest method because they don't care about the outcome.

Sent from my SM-G870W using Tapatalk
 
Sorry but if your customers are refusing it it's likely because you are educating them wrong.

Have you asked them what the data is worth to them?

If they truely trust you then they should trust that you are being honest when advising them their best bet is to send it to a professional.

I recently sent a similar recovery to recovery force And while they did what they are great at I was out making more money.

Now I completely agree there are times customers say the data is not worth much to them and just want to try the cheapest method because they don't care about the outcome.

Sent from my SM-G870W using Tapatalk
B***S***! Don't blame me for the value judgments customers make. I can provide the information and even make suggestions, but they make their own decisions for their own reasons.
 
I gotta ask what do you charge your customers for your trusted tech we make no promises and may or may not know what we are doing approach?

Sent from my SM-G870W using Tapatalk
 
Really? I have no doubt Luke is fully capable of engaging in an adult conversation even if there's a disagreement or different perspective. Clearly you are not.
 
I gotta ask what do you charge your customers for your trusted tech we make no promises and may or may not know what we are doing approach?

Sent from my SM-G870W using Tapatalk
Whoa! I agree that's a bit harsh!
I've gone through this scenario many times. As @Computer Bloke intimated above - their data is "priceless" until it comes to opening their wallet.
Then suddenly that priceless data becomes a shrug of the shoulders and an "oh well, it's gone!"
 
I wasn't trying to be harsh and I apologize if it came off that way I was just curious the cost difference between him attempting recovery and sending it to a firm.

I know for me I'm around 200$ to attempt data recovery and to send it out is around 300$ sometimes once I can show customers the cost to send it out isn't 300$ it's more like $100 more then I will charge they have an easier time realizing it may be worth sending out.

I'm just trying to play devils advocate to inspire discussion.

Sent from my SM-G870W using Tapatalk
 
Back
Top