In this bussines, there are no guarantees. Neverthless, good news are
that it is possible, bad news are that it is highly specialised job.
Flash cards contains chips. Chances are that chips are not damaged (they are
stronger then the substrate) and can be 1) removed 2) inserted into a
suitable test board in a computer, and offloaded onto new media.
Here is a picture of what we are talking about:
http://www.datarescue.com/laboratory/cfcompare/index.htm
There are many 'sofware solutions' advertised on the web- programs
which can read damaged media. Those will not help you. You need an
expert who can handle chips.
I suggest you contact this firm first.
If they cannot do that, I may remove this posting
or work further to identify the company which can do it
as you may choose.
I assume you reside in US ?
Hedgie |
Clarification of Answer by
hedgie-ga
on
16 Jan 2006 05:38 PST
Here is first installment on question "was it ever done?"
Here is one 'case history':
Extracting Data from an EEPROM Recovered from the Swissair 111 Crash
http://www.chipworks.com/resources/whitepapers/SwissAir.PDF
The EEprom tester is not an overly exotic or expensive instrument.
It is often used by control engineers. It can be used only on intact chips.
Article above talks about that, but also about examination of data in
a broken chip. That would be more complex, 'research lab equipment'
job.
So, first step would be to determine how many (if any) chips are broken,
and if some are, how much would 100% recovery be worth. There is an
'order of magnitude' difference in dificulty and cost of the two
levels of recovery.
Here is a photo of an EEPROM tester. Chips are inserted into a special
'zero force socket' and can be read and written.
|
Clarification of Answer by
hedgie-ga
on
16 Jan 2006 12:21 PST
Not only aircrafts, but also cars have these 'black boxes' and recovery of data
after a crash is used in forensic anaylysis.
Which means: there are more labs which maybe able to do the job.
There are some myth around, as well: box is not black, I just learned.
".. I approached certain very reliable individuals at Chevrolet and GM
for an official on the record statement and relative data regarding
the "black box?
First, It must be stated that it is not black. Its silver and the name
?black box? originated from the airlines' use of "flight data
recorders" which are often referred to as the "black box", mostly by
the media...
The real name of this box is "Sensing Diagnostic Module" and its true and actual
purpose is to record automotive crash data.
"
http://www-nrd.nhtsa.dot.gov/edr-site/uploads/GMs_Black_Box--Corvette.pdf
" five seconds of data immediately preceding algorithm enable are
stored in EEPROM. All stored data can be later recovered using a
laptop PC equipped with appropriate software and interface
hardware...
"If technical service information is needed, the C5 Service Manuals
such as the one for '99 alone
contains approximately 75 pages about this very subject. It is best to
go to the Helm, Inc. "On-
Line Bookstore" at: http://www.helminc.com or call 800-782-4356
Same source . There is number of articles on the topic under the
SEARCH TERMS: car crash black box EEPROM
I would need some response from you to continue the search for lab with
proper expertise. You want someone who has done it before, since chips
may be damaged by improper handling.
There is more on these data recovery from these SDM devices and we may
be able to find a list of local consultants.
Please let me know which state, city, .. you are in.
Hedgie
|
Clarification of Answer by
hedgie-ga
on
17 Jan 2006 05:10 PST
These cards are manufactured by Sandisk
http://www.sandisk.com/OEM/Products/
which offers a rescue software (which is unlikely to help in your case)
and customer service (which requires serial number of the product).
I suggest you call their number (866-603-2195) and ask 'who can do a
chip level data recovery' from media broken in two pieces:
Here is the quote from their OEM-> technical support page
" RescuePro - Recovery Software
As a valued SanDisk customer, we're passing along a special discount
on this software which can be purchased by clicking the link above.
Please use this online order code, SNDK-RP-1203, to recieve the
disount on the software. Additionally, SanDisk offers file recovery
service at a discount through LC Technology, and more information can
be found on the same link or by calling 866-603-2195.."
RescuePRO is a recovery solution for digital media.
It recovers images, documents, mail, video, music or just about anything.
https://www.customernation.com/pls/ps/ps.ps_main?p_host=304&p_supplier=5096&p_parm=PSHPP
LC Technology International is a firm which specialises in file
recovery and hard drive data ... Digital media recovery RAID recovery,
lost data recovery, lost partition ...
and FORENSIC INVESTIGATION
http://www.lc-tech.com/
They have a form to fill out and ask for more info
http://www.lc-tech.com/Techsupport/techsupport.html
Hedgie
|
Request for Answer Clarification by
kzap-ga
on
17 Jan 2006 18:27 PST
Hi,
Thank you for your research, I will contact these companies, and see
if they have ever done such work before. I am located in the
Philippines, so sending back and forth is through Fedex etc.
|
Clarification of Answer by
hedgie-ga
on
22 Jan 2006 21:25 PST
You are welcome. Additional RFC (requests for clarifications) are
available if additionak research would be needed.
Please let us all know what the result was.
Hedgie
|
Request for Answer Clarification by
kzap-ga
on
29 Jan 2006 03:27 PST
Hi,
I'm not sure but after going through your posts, the only # to call
was the one from SanDisk, which is LC Technologies. They said they
dont do such recovery but referred me to DriverSavers.com who said
they could do it but would have to look at the chip first, so I will
send it to them and see what their results are. Are there any recovery
labs that you have found, the more options I have the better so I can
try another one incase one place isnt able to recover the data.
|
Clarification of Answer by
hedgie-ga
on
29 Jan 2006 22:06 PST
I assume you called the number 727-449-0891 which is in this text:
----------------------------------------------------
Digital Media Recovery Services
SanDisk? Digital Media Recovery Services
LC Technology offers same day service for all types of Digital Media
recovery. As one of the United States largest flash memory card
recovery companies..
please call our sales department (toll free in the US)
at 866-603-2195, or 727-449-0891 outside the US to speak with a
customer representative.
------------------------
According to their web page they DO recovery. Sometimes web pages
are not updated.
But sometimes employee at the other end of the line is not well informed.
I would cal again, perhaps trying the other number (toll call) as well.
It is important to use correct terminology and to explain that
these are 'precious data'. This is the reason:
1) In most cases of lost data, deleted files and such, data are not
actually lost. Only
the pointers to the data are deleted or corrupted. So, in routine
case, employee puts
media (card or disk) into computer with standard software which can
read data without the pointers, and makes a fresh copy. They charge
customer $200 and are done.
2) In few cases, when there is physical damage to the media, recovery
requires 'clean room facility' (since naked chips can be damaged by
dust). Recovery may cost several thousand dollars.
When an outcome of million dollar court proceeding depends on the
data, companies pay that.
The average customer is likely to balk at such cost.
So it is important that you convey that yours is not a routine case.
Since most recovery problems are easy (solved in the software, without
the lab work)
companies tend to dismiss the 'household type requests' unless they
understand that the
data are essential, and customer will foot the bill for 'chip level recovery'.
Only you can decide how precious the data are and negotiate the price.
You will have to send
the card for diagnosis, but you can ask for non-destructive tests
only, for the estimate.
(They will X-ray the card to see if any of the chips are damaged)
The correct terminology:
--------------------------
Let's differentiate between chip, dip and card. In the popular press, this
http://www.hardwaresecrets.com/imageview.php?image=40
is usually called 'a chip'. It is actually 'dip' chip is inside this
package, protected by
several mm of plastic. Picture on this page:
http://global.mitsubishielectric.com/news/news_releases/1999/mel0484a_b.html
shows a 'chip' encased in a 'dip'.
Naked 'chip' actually look like this
http://mnd-w1.fh-friedberg.de/Pictures/REM-Aufnahmen/Chip.jpg
and is rarely sen outside the lab. They 'live' in the clean rooms.
In the flashcard they do not use 'dips' (they are too thick) but mount
several chips
on a thin plastic plate (medium). So, you are not sending a chip, but the card.
They will have to uncover the chips and see if any of those are broken.
These are few more examples of these three different things: chips, dips and cards:
http://mnd-w1.fh-friedberg.de/Pictures/REM-Aufnahmen/Chip.jpg
This is what cards look like:
http://images.google.com/images?client=opera&rls=en&q=MMC%20card&sourceid=opera&ie=utf-8&oe=utf-8&sa=N&tab=wi
This is what company (related to LC) advertises:
"That is when we step in. Our professionally trained technicians are
experts at recovering data from with in the Digital Media. whether it
be a Hard Drive, Floppy Disk or Flash Card memory stick we can find
the information that your are in need of. Our technicians are using
the latest in technology to recover your data, and your
confidentiality is of the utmost importance to us"
http://www.htciatlctech.com/forensic.html
This company wants to be contacted using this form:
http://www.htciatlctech.com/contactus.html
It is not the only company which can do it, and it does make sense to
get competitive bids.
but it has the advantage of being partner of Sandisk.
Here are few others:
"There are very few companies in the United States who have the proper
facilities to provide full-service data recoveries.
Though some local companies may advertise to provide data recovery
services, be aware that they may only provide basic off-the-shelf
software recoveries because walk-in clean rooms are very expensive
investments. For this reason, some companies offering data recovery
services outsource their mechanical data recoveries (needing clean
rooms) to one of three or four full-service providers like Data
Recovery Link"
http://www.datarecoverylink.com/
Data Recovery Link 1-800-625-6451
http://www.datarecoverylink.com/
1-800-924-0305
http://www.swstars.com/services/flash/index.html
DGR 888 462-3282
http://www.datarecoverygroup.com/contact/index.htm
1-800-994-DISK (3475)
http://www.drivelabs.us/
For other companies in this are, you may consult this directory
http://dmoz.org/Computers/Hardware/Storage/Data_Recovery/
Most of these do specialize in hard disk and their experience in MMC is not known.
Several mention flashback memory services:
http://www.flashbackdata.com/
Provides services for RAID systems and servers, desktops, laptops,
tape cartridges, flash cards, and removable media devices. Contains a
listing of services, shipping instructions, and policies. Located in
Niles, Illinois, United States.
http://www.midwestdatarecovery.com/
Recover lost, deleted or corrupted pictures from flash memory cards.
http://www.apollo-one.com/
http://www.flashmedia911.com/
Multimedia Memory Card (MMC)
http://www.xcomputerforensics.com/
http://www.datadoctor.co.in/
In all cases you should be ready to send the card in for the diagnosis,
before an estimate and degree of recovery can be made. I am not faimiliar with
the company behind the DriverSavers.com, but that website does not look
to me like what you need.
Please let us know how it goes.
Hedgie
|
