A colleague at work has a Kingston 240GB SSD drive which has come out of a now dead computer. We want to be able to recover some data from it (no backups sadly) however the drive won't mount properly.
I am using an Anker USB3 external HDD enclosure which I know to be working correctly. The drive has come from an Apple computer, and we are attempting recovery on another MacBook Pro.
The drive appears under DiskUtility, however is greyed out. Trying to click mount
does nothing. FirstAid also fails.
What Have We Tried?
So far, we've run diskutil repairVolume disk2s2
which gave the following output:
Repairing file system
Volume is already unmounted
Performing fsck_hfs -fy -x /dev/rdisk2s2
Checking Journaled HFS Plus volume
Invalid record count
Checking extents overflow file
Invalid record count
The volume could not be verified completely
File system check exit code is 8
Restoring the original state found as unmounted
Error: -69845: File system verify or repair failed
Underlying error: 8: Exec format error
We have also run sudo /sbin/fsck_hfs -yprd /dev/disk2s2
which returned:
/dev/rdisk2s2: starting
journal_replay(/dev/disk2s2) returned 0
Using cacheBlockSize=32K cacheTotalBlock=65536 cacheSize=2097152K.
Executing fsck_hfs (version hfs-407.50.6).
** Checking Journaled HFS Plus volume.
hfs_swap_BTNode: invalid forward link (0xFFFFFFFF)
hfs_swap_BTNode: invalid backward link (0xFFFFFFFF)
hfs_swap_BTNode: invalid node height (255)
hfs_swap_BTNode: invalid record count (0xFFFF)
Invalid record count
(4, 25511)
...repeats similar output...
Node 35746's back link is 0x0; expected 0x8c17
disk offset = 0x78f41000, size = 0x2000
Invalid sibling link
(4, 35746)
Node 35746's forward link is 0x0; expected 0x6489
disk offset = 0x78f41000, size = 0x2000
Invalid node height
(4, 35746)
Index key doesn't match first node key
Invalid index key
(4, 35746)
** The volume could not be verified completely.
volume check failed with error 7
volume type is pure HFS+
primary MDB is at block 0 0x00
alternate MDB is at block 0 0x00
primary VHB is at block 2 0x02
alternate VHB is at block 467182910 0x1bd8a53e
sector size = 512 0x200
VolumeObject flags = 0x07
total sectors for volume = 467182912 0x1bd8a540
total sectors for embedded volume = 0 0x00
CheckForClean - could not get VHB/MDB at block 467182910
CheckHFS returned -1317, fsmodified = 1
What Next?
I am hopeful that with the drive being recognised, the data is still recoverable. Before looking at paid software such as DiskWarrior, is there anything else that I can try so that I can access the disk or to repair this record count
problem.
You can try some of these for free. They will report back what they find and you pay to recover the files.
"Stellar Phoenix Macintosh - Mac data recovery software, recovers data from damaged, deleted, or corrupted volumes and even from initialized disks." They have a trial version, so I guess you can see if your data can be recovered... http://www.stellarinfo.com/mac-data-recovery.htm
"Data Rescue II is the best data recovery software on the market for recovering files from a problem hard drive. Data Rescue II works when other tools fail. Data Rescue II is also completely safe to use since it does not attempt any risky repairs to the drive while its scanning." http://www.prosofteng.com/products/data_rescue.php
FileSalvage is an extremely powerful Macintosh application for exploring and recovering deleted files from a drive or volume. FileSalvage is designed to restore files that have: -- been accidentally deleted. -- become unreadable due to media faults. -- been stored on a drive before it was re-initialized/formatted.
http://subrosasoft.com/OSXSoftware/index.php?main_page=product_info&products_id=1
Wondershare Data Recovery for Mac
"Recover lost photos, video, documents, email and archive files from any Mac-based hard drive or external hard drive, iPod, USB drive, SD card, digital camera, mobile phone, and MP3/MP4 player, due to accidental deleting, formatting, virus infection, improper operation, unexpected power failure, and other unknown reasons. Also, iPhone recovery allows you to recover lost photos, videos, SMS, contacts, note, calendar and call history from iTunes backup file. With the free trial, you can preview all your recovered images, videos, music, documents and archive files prior purchasing this Mac Data Recovery." http://software.bigbigsoft.com/data-recovery-mac
"If there is any chance of recovery at all your best bet is Prosoft Data Recovery." by macjack https://www.prosofteng.com/datarescue-mac-data-recovery/
Try copying the disk byte by byte and then recover it. It's not a good idea to write into the disk (e.g. repair it) as it might have been damaged. It's a good idea to minimize its read, and scan though the backup using various softwares instead.
You may do that through payware like Disk Drill (which can then scan the whole backup image for files) or simply using a copy tool like dd.
You may run "man dd" to learn more and customize your usage, or copy your disk to your folder by running "dd if=/dev/disk2 of=/path/to/your/folder". When you are finished, simply rename the file to .dmg and attach it. If it successfully mounted, copy your files to a new drive. If it doesn't, try the following command: "hdiutil attch -nomount /path/to/dmg/file" and then "fsck_hfs -dfy /dev/diskXsX" (replace XsX with what hdiutil give you).
User contributions licensed under CC BY-SA 3.0