Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a dell laptop that recently "died" (It would get the blue screen of death upon starting) and the hard drive would make a weird cyclic clicking noises.

I wanted to see if I could use some tools on my linux machine to recover the data, so I plugged it into there.

If I run "fdisk" I get:

Disk /dev/sdb: 20.0 GB, 20003880960 bytes
64 heads, 32 sectors/track, 19077 cylinders
Units = cylinders of 2048 * 512 = 1048576 bytes
Disk identifier: 0x64651a0a

Disk /dev/sdb doesn't contain a valid partition table

Fine, the partition table is messed up. However if I run "testdisk" in attempt to fix the table, it freezes at this point, making the same cyclical clicking noises:

Disk /dev/sdb - 20 GB / 18 GiB - CHS 19078 64 32
Analyse cylinder   158/19077: 00%

I don't really care about the hard drive working again, and just the data, so I ran "gpart" to figure out where the partitions used to be. I got this:

dev(/dev/sdb) mss(512) chs(19077/64/32)(LBA) #s(39069696) size(19077mb)

* Warning: strange partition table magic 0x2A55.
Primary partition(1)
   type: 222(0xDE)(UNKNOWN)
   size: 15mb #s(31429) s(63-31491)
   chs:  (0/1/1)-(3/126/63)d (0/1/32)-(15/24/4)r
   hex:  00 01 01 00 DE 7E 3F 03 3F 00 00 00 C5 7A 00 00

Primary partition(2)
   type: 007(0x07)(OS/2 HPFS, NTFS, QNX or Advanced UNIX) (BOOT)
   size: 19021mb #s(38956987) s(31492-38988478)
   chs:  (4/0/1)-(895/126/63)d (15/24/5)-(19037/21/31)r
   hex:  80 00 01 04 07 7E FF 7F 04 7B 00 00 BB 6F 52 02

So I tried to mount just to the old NTFS partition, but got an error:

sudo mount -o loop,ro,offset=16123904 -t ntfs /dev/sdb /mnt/usb
NTFS signature is missing.

Ugh. Okay. But then I tried to get a raw data dump by running

dd if=/dev/sdb of=/home/erik/brokenhd skip=31492 count=38956987

But the file got up to 59885568 bytes, and made the same cyclical clicking noises.

Obviously there is a bad sector, but I don't know what to do about it!

The data is still there... if I view that 57MB file in textpad... I can see raw data from files.

How can I get my data back?

Thanks for any suggestions,

Solution:

I was able to recover about 90% of my data:

  1. Froze harddrive in freezer
  2. Used Ddrescue to make a copy of the drive
  3. Since Ddrescue wasn't able to get enough of my drive to use testdisk to recover my partitions/file system, I ended up using photorec to recover most of my files
share|improve this question
    
Insert hard drive into freezer for best results. –  Shotgun Ninja Oct 29 '13 at 22:46
add comment

4 Answers

up vote 8 down vote accepted

DDrescue is designed to get data off in situations like this. Then try mounting the image, and if files are missing give testdisk and photorec a chance on the image.

share|improve this answer
    
I'm having the same problem as everything else. Ddrescue gets me about a 75mb file before I hear the harddrive noises and it freezes. I can't even CTRL+C out of it. Is there a way to hack this logfile to start a sector after it left off? Or a flag I can set to make it care less about bad sectors? –  Erik W Dec 24 '09 at 5:09
    
Further searching I read in an FAQ: "If ddrescue does not refresh the screen nor respond to Ctrl-C it is because the drive is blocked. Give it some time to finish the read request." I guess I'll let it sit overnight... –  Erik W Dec 24 '09 at 5:32
    
... no such luck :( –  Erik W Dec 25 '09 at 22:32
    
its supposed to ignore bad sectors. If a drive has catastropic physical damage though, A last ditch recovery method might involve putting the drive in a freezer. lifehacker.com/170257/… –  Journeyman Geek Dec 26 '09 at 0:32
    
I thought the freezer thing was a myth but it worked and helped DDrescue get past the rough spots. Then I used photorec to get my files. I got about 90% of my drive's data. Thanks for your help! –  Erik W Dec 26 '09 at 9:34
add comment

Since you are Linux savvy, try running both Testdisk and PhotoRec on the drive. Or even better, try to get a dd image of the drive and have them crawl through it. Hard drives that make noise tends to have serious problems and not last long after the noises begin.

share|improve this answer
    
+ "Hard drives that make noise tends to have serious problems and not last long after the noises begin" very true –  hyperslug Dec 24 '09 at 3:44
    
I never heard of PhotoRec, it's a pretty cool app! The problem is that it freezes after recovering about 50mb of data, just like testdisk. Is there some way to make these apps skip over this bad sector? –  Erik W Dec 24 '09 at 4:16
add comment

http://www.grc.com/spinrite.htm

I've heard so many good things about this program.

It costs a pretty penny ($ 89.00 for a lifetime, i believe, licence), and i cannot talk about it from personal experience.

However i hope the community will downvote me if it isn't a good solution to your problem - wait for other responses (and feedback) before spending cash.

That said, the basic idea of the program is that it scans the drive at a deep level, reading every sector, looking for defects, errors, misreads, etc. and subsequently "fixes" them (swaps them for a good sector, or simply lets the HD do it itself).

*Irregardless, i suggest the moment you get the data off your drive you get a new one! Clicking is very very bad!*

share|improve this answer
    
+1 I have only heard good things about this program. –  Steve Rowe Dec 24 '09 at 3:31
    
Spinrite can sometimes help, but the first task should always be to make and (partial) image with dd_rescue and after you have a as good copy as you can get, then play with the drive with Spinrite or any other rescue app. –  Raynet Dec 24 '09 at 4:16
    
Yeah, I'm hesitant to play with this program since I can't seem to create an image of the drive with anything. –  Erik W Dec 24 '09 at 5:23
add comment

How can I get my data back?

The best tool I've ever used for hard drive recovery is Runtime Software's GetDataBack. It's a Windows program, so you'll have to find a way to plug that hard drive into a desktop machine running Windows. I've used it to recover off a SCSI drive, an IDE drive reformatted with Windows XP (partial recovery), a drive with a partition blown away with FDISK, a disk that BIOS couldn't even detect, etc.

You can run the evaluation version to find out exactly which files you will get back, but it costs around USD 80 to actually begin recovering files. I have both the NTFS and FAT versions, but only used FAT once.

share|improve this answer
    
Well, there were a couple problems using this app. First, Windows things the hard drive is 1TB. Which it is clearly not (20GB) Then when it's done scanning it says it can't find any NTFS files. –  Erik W Dec 24 '09 at 5:24
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.