Bad Sector Failure ...
 
Notifications
Clear all

Bad Sector Failure using ImageMaster

3 Posts
2 Users
0 Reactions
732 Views
(@pfkoss)
Active Member
Joined: 21 years ago
Posts: 18
Topic starter  

Recently had to aquire a 8gb slow speed Maxtor . Tried Imagemaster and failed on Bad Sector error right off the bat. Even with the menu option checked to continue after bad sectors.

Also tried FTK imager but the OS locked up as soon as it started to read. The client claims that the machine is/was working although I could not verify this.

Any suggestions ?….


   
Quote
 Andy
(@andy)
Reputable Member
Joined: 21 years ago
Posts: 357
 

Was the bad sector/failure on your ‘cloned’ drive? Did the clone verify ok? (MD5 hash values match)

And how are you trying to acquire the image with FTK Imager? For example with hardware write blocker. The reason I ask is because it might be the acquisition process that has failed and not the suspect drive. I have experienced failures with the Imagemaster Solo II in the past. Some makes of HDD’s have 'issues' with it. and need jumper settings altered/changed to work correctly. If my memory serves me correctly there is some amendments in the user instructions relating to compatibility problems with certain drives.

A solution may to try making a forensic image of the original drive – using EnCase acquisition mode in DOS (this is the free product that comes with the demo download, and you don’t need the security dongle), and using the original machine with your target drive attached on a spare IDE channel (then you are using the original bios of the machine). I say try this because you say the OS locked up, and DOS may be a workaround. You can download the EnCase boot disk with the DOS imager free of charge from the GSI website.

Or try using Linux DD.

The client claims that the machine is/was working

The HDD might be on the way out, from how you describe it, it sounds quite old. Does it get overly warm or make any unusual noises when you try to acquire it? It may only get one more go at trying to acquire the data from it. I have heard that with some drives on their last legs, if you cool them down by putting them in the fridge (wrapped in a towel) for an hour, then this helps slow the overheating process - gives them one last lease of life – just long enough for you to copy……But then it sounds a bit way out…

Andy


   
ReplyQuote
(@pfkoss)
Active Member
Joined: 21 years ago
Posts: 18
Topic starter  

The error was occuring on the suspect drive right at the start of the image process. We have run into problems with older drives and the Imagemasster as well but have always been able to get our portable PC system to work. In this case I think the drive is going down. The client has decided to leave the drive alone for the time being as we had 3 other drives to investigate. If we get back to it I'll let you know how it goes.

Thanks


   
ReplyQuote
Share: