Recovering a Bad Macintosh External Drive

Recovering a Bad Macintosh External Drive

A friend of mine reported this problem:

“You see, my external hard drive has just kicked the bucket…with all my files still on it. It randomly started making a clicking noise. It will no longer connect to any computer for longer than 40 seconds. I’ve gone around to a couple different places to see what they could do without sending it out for it to be taken apart to retrieve my data.”

I received the drive already removed from its IOMEGA 1TB enclosure. The drive was a regular 3.5″ 1TB SATA drive.

Low Level Disk Recovery

The first step was to stuff the drive into a bare PC rig and run Spinrite 6 on it. Spinrite is a hard drive utility written by Steve Gibson, an old-school assembly language programmer whose relationship to computers is similar to the way a master swordsmith relates to steel. Spinrite fixes any problems it finds at the very deepest level of the hard disk, below the operating system layer, so it works both for Macintosh drives as well as PC drives. It is very highly regarded. However, it only runs on PCs, not Macintoshes, so if you’re a Mac user or are a PC user that doesn’t have an extra throwaway PC lying around, you are out of luck; there is no comparable software for the Mac that goes as deep as this. Best bet: make friends with your local PC tech! This thread about disk recovery on Macintouch, while old, still gives useful information about the use of SpinRite with Macintosh hard drives.

After a 4.5 hour run at level 2 “data recovery” mode, Spinrite found no unreadable sectors. The drive was, as far as level 2 scanning was concerned, just fine. Furthermore, I didn’t see any signs of disconnecting or hear any weird clicking noises.

MacOS X Disk Utility

I booted up my MacBook Pro and used a USB SATA connection kit to connect to the drive. It mounted (appeared) on the desktop just fine.

Next step was to do a VERIFY DISK operation on it with Apple’s Disk Utility program. Disk Utility can check whether data on the disk is organized as expected. Every disk drive in a computer has data on it that describes how it is organized. Files, for example, have file names and other properties, and these are all put into an index that is stored in addition to your data. If the index gets corrupted, then the operating system can’t find files anymore. The data is there, but the pointer to the data is gone.

After a few hours, Disk Utility reported a minor problem (volume size mismatch), which it reportedly was able to repair. There were no other errors at all. I returned the drive to its owner to try to copy the data from it.

If Disk Utility had reported significant problems, then I would have had to purchase a utility like Disk Warrior to do a more comprehensive disk recovery. Unlike Disk Utility, which can only make minor repairs to an existing disk index, DiskWarrior looks at the hard drive like a giant jigsaw puzzle and attempt to reconstruct a new disk index from scratch through smart analysis of each sector and figuring out where it should go. This is a time-honored technique.

As I was not familiar with the current crop of Macintosh disk utilities, I looked for insightful commentary:

  • One non-technical computer user tried all five major repair tools: DiskWarrior, Drive Genius, Data Rescue, and Techtool Pro. Unfortunately, his experience did not have a happy ending. His despair, however, is our gain: he describes the difference between each tool, as he learned by trying out each one.

  • Old-school Macintosh user and tech writer Ted Landau writes about the fading-away of disk utilities in today’s marketplace. The comments provide additional insight into the use of each tool.

<

p>My assessment at this moment is that DiskWarrior is the program to buy, to be used after running Spinrite 6 on the drive on a PC. Like Spinrite, DiskWarrior is a single-purpose tool designed to repair the disk indexing structures. However, it does not fix unreadable sectors on a disk; that’s what Spinrite does. The combination of the two should be powerful enough to handle any data recovery situation where the drive is still physically operating. The other programs mentioned–Drive Genius, Data Rescue, and Techtool Pro–appear to be more like Swiss army knives, and are sold with dozens of functions that have more to do with broader disk management and general computer maintenance.

The mystery, however, is why Spinrite detected no errors and Disk Utility reported only a volume size mismatch. This is a non-critical error, akin asking someone how much money they have in their wallet and getting an answer that is a few pennies off. It should not have caused the clicking and disconnection problems reported.

Diagnosis?

As I mentioned, the disk itself was received already removed from its enclosure. Since the disk worked fine in my PC rig through the SATA port, and mounted without trouble on my Macintosh via a SATA-to-USB adapter, that means that it’s probably the enclosure itself that is faulty. There are two major components other than the disk drive itself: the logic board and the power supply.

Unless there was some kind of electrical surge event, every single external hard drive enclosure I’ve owned since 1994 has failed due to the enclosure. The symptoms: the drive works intermittently and shuts down unexpectedly, or disappears from the operating system while you’re trying to use it. The drive itself is fine, so transplanting either the power supply or putting it in a new enclosure (which includes a new power supply) has worked. I haven’t been able to find references to “power supply degradation over time”, so I’m not sure how much of my experience is coincidence, but practically speaking I’ve had good luck swapping the drive with a newer power supply or enclosure.

As my friend had already purchased a new external hard drive, I didn’t bother to test the old enclosure by putting the drive back inside. However, I did check to see whether Iomega sold replacement power supplies (they are external AC-DC adapter “wall warts”), and they do. He may test the enclosure with a different power supply to see if there’s any difference. He’ll need to match voltage, current, plug and polarity.

Tools Mentioned

Software

  • Spinrite 6PC ONLY commercial software. Use for low-level data recovery/repair before doing anything else, as this verifies the physical data integrity (“whether data can be read or not”) of the disk. Requires a PC that can boot from either CD or floppy disk into FreeDOS. Although Spinrite 6 was last updated in 2004, it works with any hard drive in a PC that can be accessed from DOS. To use it, you must plug your hard drive into the computer, and then boot the Spinrite CD or diskette. It takes about 4 hours to scan a 1TB disk with no errors. If there are many errors on the disk, the scan/repair time can be measured in days; the software shows you the estimated time to completion. Price: US$89.

  • Disk Utility – Available in your Mac’s Utilities folder. Run DISK VERIFY on the Spinrite-recovered disk to ensure that the logical data integrity (“whether data is organized correctly”) is OK.

  • DiskWarrior – Commercial software that is highly specialized in fixing scrambled Macintosh hard drives, and nothing else. Doesn’t handle recovery of unreadable disk errors, so you would use Spinrite for that first. It’s possible that other Mac software such as Drive Genius, Tech Tool Pro, or Data Rescue can do that, but it seems unlikely that they are a match for Spinrite’s low-level approach. Price: US$99.

Hardware

  • Handling a Hard Drive Safely – Once you have removed a hard drive from its enclosure (be sure to handle it carefully to avoid damage). A drive that is outside of an enclosure or case is called a “bare drive” (as in naked).

  • SATA or PIDE – You need to see what kind of hard drive you have. Drives manufactured between 1990 and 2006 are probably going to be IDE drives. Such drives are described as ATA, PATA, or PIDE. They have a wide ribbon cable that plugs into the back, with a 4-prong power blog. Most drives today use SATA connectors, which are a lot smaller.

  • Hard Drive to USB Adapter – This is a device that allows you to temporarily connect a bare drive (either SATA or PIDE) to your computer through a USB port. There are many, many cheap kits on the market, but this one from the venerable Cables to Go gets high marks for build quality. I like that it also has an additional power switch. When you use one of these, you should be careful NOT TO MOVE THE DRIVE while it is operating, unless you really want to trash it permanently. You should also carefully power it on and off as you would any external drive. Price: About US$20 for the Cables to Go version, US$10 for the cheap-o versions.

  • Hard Drive Dock – Unlike the adapter, a dock allows you to plug a bare hard drive into a slot like a toaster. They’re useful if you like using bare drives for backup purposes. This is an option, generally speaking, only for SATA drives. If you have an older PIDE / ATA drive, then you need to use the adapter. Like the adapters, they plug into a USB port. If you are transferring data between bare drives, you might find the dual slot dock version more useful. Price: Between US$40 and US$80.

6 Comments

  1. Marianne 13 years ago

    Whoa, serendipity: my external backup drive succumbed a mere few days (DAYS!) after my laptop drive died, and, since I’m a file clutterbug, I hadn’t restored my time machine backups yet. I wanted to be selective and organized, naturally. The one time in my life this was not a good choice. (Most important working files are on Dropbox.)

    I will try this. Thanks!

  2. Author
    Dave Seah 13 years ago

    Good luck, Marianne!

    I also just updated this post to note that SpinRite 6 doesn’t run on a Macintosh, if you are looking to do low-level recovery of bad data, assuming your enclosure isn’t what went bad.

  3. Marianne 13 years ago

    Ah. Less serendipity: it’s not the enclosure.

    Thanks much, Dave! And good luck with your password and security sorting, and thanks for that warning.

  4. Myrcurial 12 years ago

    Dave,

    I have been a fan of your work for years and years.

    I would strongly caution you to stay clear of Steve Gibson and his claims. He is well known to be a somewhat disconnected from reality every time he opens his mouth. In fact, he’s actively tracked by the Attrition Errata Charlatan project: http://attrition.org/errata/charlatan/steve_gibson/

    The layers of emulation required to map current drive capabilities to aging interfaces (512 vs 4096 byte sectors for example) are not something that anyone other than the drive manufacturers should be claiming skills in.

    Stick with Disk Warrior and the command-line tools provided by Disk Utility (man diskutil in terminal) and avoid charlatans.

  5. Author
    Dave Seah 12 years ago

    Mycurial: On your suggestion I went through parts of the Attrition Errate Charlatan project, and saw all the bile for GRC in the area of security. I haven’t looked at any of his security projects, and I know as little about TCP/IP and security as I can get away with, so I’m incapable of objectively evaluating his claims there. On the other hand, I found the citations in the rebuttals nearly as bad: a lot of logical fallacies used to justify opinion, exacerbated by GRC’s tendency to not reveal any working details of his claims. He could very well have some good stuff going on, but it’s impossible to tell.

    As for SpinRite, I agree that his aging codebase may not play well with the emulation layers that are used on modern drives. I sort of took it on faith, though, that he figured out some way of bypassing it and entering a direct read mode, using statistical methods to regenerate bad data. I’m not sure what he modeled them on, but it jibes with my experience in high school using Apple II disk controllers and software like EDD and Locksmith to read raw data. Back then, we had to use assembly language for maximum performance and optimized size, so it’s a fond memory for me. Floppy disks were copy protected, and there was a constant war between the protectors and the deprotectors using commercial disk writers that could write “half tracks”, “synchronized tracks”, and “phantom bits” to buffalo the Apple II disk controller into some state that could be reached only with a legitimate copy and clever custom read routines. A lot of the SpinRite claims jibed with me because of this experience, and knowing a bit of the weirdnesses that can occur with disk encoding at the sub-bit level. Maybe a bit of nostalgia plays into this too.

    I don’t know if you’ve noticed, but the quality of driver software and hardware devices themselves have dropped quite a bit over the years, as complexity has risen and programmers have resorted to bloated libraries linked against ancient versions. No one really seems to know or cares about how to write this stuff anymore, with the possible exception of the Germans and Scandinavians. This doesn’t necessarily mean that GRC can do it, but I put it in the realm of possibility.

    I’m not sure whether manufacturers themselves can always be relied on for expertise either. From having assembled my fair share of PCs from components, and then having to debug their chipset failings, it seems that quite a bit of hardware from the manufacturer ships with buggy firmware, or have to work around buggy hardware through firmware.

    That said, I don’t really know whether SpinRite is a bunch of hooey or not, but I do know that it doesn’t give up as easily as the OS-level utilities like Disk Utility. The approach espoused here seems like a prudent approach, doing a block copy followed by a pass with SpinRite to see if it can do.

    I guess in summary, I do not presume to judge the quality of SpinRite based on the reputation of Steve Gibson in the security arena. They need to be assessed separately, and I don’t see a lot of technically-compelling argument against SpinRite by anyone who writes low-level IDE drivers. It’s something I’ve actually wanted to look to see what’s involved, as I still have a fascination for disk drives and encoding algorithms.

  6. Matthew Thompson 11 years ago

    enjoyed reading your journal very much. I do however have one question regarding Time machine back up that i have been looking for lately. I have had a problem with my Mac. I had to send my Mac away to Apple for a new hard drive as they informed me that they had previously had problems with my drive. I used to use Time machine back up to back up my computer to a separate drive. I was told that i needed to use a different back up format and the only drive i had to do this was my back up drive. I therefore had to wipe this drive and over write it with the new software. Unfortunately this only made a copy of my system software and no files or anything like that and i was unable to retrieve any of my time machine back up files. Is there any software that will enable me to retrieve deleted time machine back ups and restore them or at least the pictures that they had backed up?