0

I have a drive which is showing signs of bad sectors. Errors are "Current Pending Sector Count" and "Uncorrectable Sector Count". Crystal Disk Info did that buzz sound which I really hate. Next thing, my system froze. So I yanked the USB from its port, which, I know I shouldn't have done. Doing this unfroze everything however, using Truecrypt to try and attempt to mount the drive has become impossible now. It just renders TrueCrypt non responsive.

So I'm thinking maybe the only way for me to recover data is to do a quick format of the drive (which I haven't done yet, mind) and try and rescue the data using data recovery software?

I probably know the answer to this, so before I commit to it, will it work?

I have backups already, but the way the files was re-arranged on this drive is the reason why I want to recover it.

Hennes
  • 65,804
  • 7
  • 115
  • 169
chickensweaters
  • 1

1 Answers1

2

PLEASE DON'T FORMAT THE DRIVE. Quick formatting the drive has only 2 possible outcomes - making data recovery an order of magnitude more difficult or impossible.

(Unless you are going to take the drive to a company that specialises in recovery), the appropriate steps are -

  1. Stop using the drive now - except for to attempt recovery.
  2. Get another drive which is the same size or larger then the existing one.
  3. Do a bitcopy of the failing drive as best you can - The typical goto solution is to use ddrescue. This will allow multiple attempts, and is designed to recover as much data as possible.
  4. Once you have the bitcopy, you can then target fixing the problem with truecrypt, which likely means decrypting the device and doing an fsck on the resulting filesystem, or running data recovery on that. (The ideal, of-course, is to make a clone of the clone - so you can have multiple attempts - but that requires 2 new drives)

Your proposed strategy is likely to put a lot of extra stress on the drive compounding the rate at which it fails, and a quick format will likely make it harder to recover the container and its encryption header - and without this encryption header, its game over.

davidgo
  • 73,366