Register FAQ / Rules Forum Spy Search Today's Posts Mark Forums Read
Go Back   MacRumors Forums > Apple Systems and Services > Mac Basics and Help

Reply
 
Thread Tools Search this Thread Display Modes
Old Apr 26, 2012, 01:52 PM   #1
Luto
macrumors newbie
 
Join Date: Apr 2012
Lost data on usb drive, because did not eject it prior un-plg. How to restore?

S.O.S. !
I am new user of Mac and was heavenly happy with it until I made the huge mistake to not eject the external usb drive before unplugging. I had there important documents, supposed to be safe in a back-up on that usb stick.

Next time I plugged-in the usb drive I found out all the data were lost!

Now I see on my usb drive only the main folders names, but folders are completely empty - all the sub folders and files have been lost.

I tried the same drive on a PC with Windows 7 and it showed the same, files are missing.

Can the usb drive be damaged or this is Mac's punishment for not following instructions to eject prior unplugging :-(

I tried some recovery softwares, but those found only small part of my files.

Could you recommend me a smart way or powerful software, able to recover ALL my so important info?

Thank you in advance!
Luto is offline   0 Reply With Quote
Old Apr 26, 2012, 01:55 PM   #2
simsaladimbamba
macrumors Core
 
simsaladimbamba's Avatar
 
Join Date: Nov 2010
Location: located
What recovery software did you already try, thus we don't recommend endlessly the ones you already used?
Data Rescue 3 (trial lets you scan the HDD and see, if data is recoverable, but to actually recover files, you need to buy the full version for 99 USD) or
FileSalvage (trial lets you scan the HDD and see, if data is recoverable, but to actually recover files, you need to buy the full version for 89.95 USD).
DiskDrill - lets you recover data from HFS/HFS+, FAT, NTFS & other file systems right on your Mac.
As for not properly ejecting it, the OS writes small data to any HDD at various times, if you just plugged any drive during such process, you can corrupt the data on it, or at least the file tree.
__________________
living on the moderately profane edge
simsaladimbamba is offline   0 Reply With Quote
Old Apr 30, 2012, 02:42 AM   #3
Luto
Thread Starter
macrumors newbie
 
Join Date: Apr 2012
Many thanks for your feedback!
Data Rescue 3 does not show the file names, so I can not estimate is it worthy to pay 99$. Disc Drill (deep scan) could not find all the files as well.

Is there any software which can search for a particular file name and show if it can be recovered (before purchase) ?

I would be very grateful for your help!
Luto is offline   0 Reply With Quote
Old Apr 30, 2012, 08:22 AM   #4
Mal
macrumors 603
 
Mal's Avatar
 
Join Date: Jan 2002
Location: Orlando
Are the file names important to you? Look at the file sizes and types recoverable with Data Rescue. Often it will not be able to get the file names (because the directory is corrupt) but the data will be intact.

jW
__________________
The Bearded Nerd
13" MacBook Pro; 64GB iPod touch
"It's a real burn, being right so often."
NoiseTrade.com/Walker
Mal is offline   0 Reply With Quote
Old Apr 30, 2012, 10:50 AM   #5
mfram
macrumors 6502a
 
Join Date: Jan 2010
The USB drive is not damaged. The data written to the drive is cached by the computer. It won't get written out until the drive is ejected. If you don't you eject the drive the data is never written. I doubt filesystem recovery tools will help.
mfram is offline   -1 Reply With Quote
Old Apr 30, 2012, 11:21 AM   #6
Mal
macrumors 603
 
Mal's Avatar
 
Join Date: Jan 2002
Location: Orlando
Quote:
Originally Posted by mfram View Post
The USB drive is not damaged. The data written to the drive is cached by the computer. It won't get written out until the drive is ejected. If you don't you eject the drive the data is never written. I doubt filesystem recovery tools will help.
Huh? Where did you hear that? It's not true, btw. Data is written as the operations are performed. Nothing is done when the drive is ejected except to unmount the volume. If you pull the drive out while it's copying, then yes, the data will be damaged and not recoverable, but it has nothing to do with whether you ejected the drive or not.

jW
__________________
The Bearded Nerd
13" MacBook Pro; 64GB iPod touch
"It's a real burn, being right so often."
NoiseTrade.com/Walker
Mal is offline   0 Reply With Quote
Old Apr 30, 2012, 11:58 AM   #7
blueroom
macrumors 603
 
blueroom's Avatar
 
Join Date: Feb 2009
Location: Toronto, Canada
USB Flash drives can be notoriously flakey, I'd recommend using cloud storage like DropBox in the future.
Add to that Time Machine backups to stay worry free about your data.
__________________
My iOS devices are not jailbroken.
Bill
My Blog
blueroom is offline   0 Reply With Quote
Old May 1, 2012, 05:31 AM   #8
Guiyon
macrumors 6502a
 
Join Date: Mar 2008
Location: North Shore, MA
Quote:
Originally Posted by Mal View Post
Huh? Where did you hear that? It's not true, btw. Data is written as the operations are performed. Nothing is done when the drive is ejected except to unmount the volume. If you pull the drive out while it's copying, then yes, the data will be damaged and not recoverable, but it has nothing to do with whether you ejected the drive or not.
Not always. All modern systems will not always write the data immediately. Sometimes, they will just cache the changes in memory (to varying degrees) and write them out to the disk at a later time. If you pull the drive before this step can happen, then you get corruption. For example, if you change the behavior from 'Quick Removal' (fsync each write immediately) to 'Faster Performance' (cache writes) on Windows, you'll get the same effect.
__________________
Make life easier if you have a programming question!
http://www.sscce.org/
Guiyon is offline   0 Reply With Quote
Old May 1, 2012, 08:28 AM   #9
Mal
macrumors 603
 
Mal's Avatar
 
Join Date: Jan 2002
Location: Orlando
Quote:
Originally Posted by Guiyon View Post
Not always. All modern systems will not always write the data immediately. Sometimes, they will just cache the changes in memory (to varying degrees) and write them out to the disk at a later time. If you pull the drive before this step can happen, then you get corruption. For example, if you change the behavior from 'Quick Removal' (fsync each write immediately) to 'Faster Performance' (cache writes) on Windows, you'll get the same effect.
The timeframe between the data being cached and the data being written is imperceptible to a human. Test it for yourself. Copy a file over to a flash drive, eject it and remove it immediately. Insert into a different computer (just to eliminate any cached copy being referenced), and you'll find the file is there. While technically you might be correct, it's an irrelevant distinction, and was not related to the issue described.

jW
__________________
The Bearded Nerd
13" MacBook Pro; 64GB iPod touch
"It's a real burn, being right so often."
NoiseTrade.com/Walker
Mal is offline   0 Reply With Quote
Old Jul 28, 2013, 08:44 PM   #10
liiiily
macrumors newbie
 
Join Date: Jul 2013
Quote:
Originally Posted by blueroom View Post
USB Flash drives can be notoriously flakey, I'd recommend using cloud storage like DropBox in the future.
Add to that Time Machine backups to stay worry free about your data.
When you lost your data of USB Flash Driver, donít worry, if you didnít write any new contents to overwrite them, you can certainly get them back. The Data Recovery can help you with it. because the deleted data still remain in it, the Data Recovery can extract the lost data after scanning the card, you can retrieve them in a few minutes if you follow the instructions.
liiiily is offline   0 Reply With Quote
Old Jul 29, 2013, 09:43 AM   #11
Fishrrman
macrumors 68040
 
Join Date: Feb 2009
I'll try to help.

You seem to have access to a PC -- have you tried "Spinrite" on the PC side first? (I know nothing about it other than it's supposed to be the best of its kind on PC's)

Questions:
How MANY important documents were on the flashdrive?
One?
Two?
More?
How many?

You _might_ be able to use DataRescue (and perhaps one or two other of the "data recovery" apps) to get a _few files_ back, without having to pay the registration.

Keep in mind that all these apps work the same way. They will let you recover _one_ file in demo mode. If you download and try 3-4 different apps, you _might_ get 3-4 files back.

Also -- if you take the time to hunt down and delete each app's preference (and other related) files, the app may "forget" that it has already run once, and let you repeat the process -- thus getting back a second file. Tedious, but it could work if you only need a few files back.

Now, to address the "unmountable" part.

If nothing else works, I will explain a technique I once used in a similar situation.
WARNING: Do this at your own risk!
WARNING: This worked for me on a hard drive -- not sure if it will work on a flashdrive.

What I did:
I -REINITIALIZED- the unmountable drive. You are reading that correctly.
(IMPORANT: I DID NOT "zero out" the data -- DO NOT DO THIS)

Why I did this:
The drive wouldn't mount because the directory was corrupted in some way. Not the data on the drive, just the directory.

Re-initializing the drive replaces the old directory with a fresh one. The drive will now mount, but of course it "shows empty" because you just put a new, "clean" directory onto it. HOWEVER...

.... The actual _data_ on the drive was not damaged or replaced. Just the directory.

Then -- I was able to mount the drive on the desktop. Because it was now mounted, the data recovery app could "get to it", too. DataRescue could "look around" the directory, and "go right to the drive itself". DR found the old data, scavenged and recostructed it, and saved it to another drive.

The "re-initialize, then recover" process worked for me when it looked like nothing else would.

Again, my experience only -- do this at your own risk.
Fishrrman is offline   0 Reply With Quote
Old Jul 30, 2013, 01:59 AM   #12
throAU
macrumors 68030
 
Join Date: Feb 2012
Location: Perth, Western Australia
There's no guarantee you can get the data back.

Essentially, until you select "eject" there is no guarantee that OS X has actually performed any outstanding writes to disk.

If the writes have not been commited to disk at all, they won't be there to attempt to recover.

Until the point where writes have been committed, OS X (and windows for that matter) will buffer writes in cache memory to allow the application performing the operation to have better responsiveness.


So... always ensure you eject properly if it is data you actually care about that you don't have a copy of elsewhere!



edit:
thread necromancy detected...
__________________
MBP (early 2011) - Core i7 2720 2.2ghz, Hires Glossy, 16GB, Seagate Momentus XT 750GB
Mac Mini (mid 2007) - Core2 Duo 1.8, 2gb, 320gb 7200 rpm
iPhone 4S, iPad 4, iPad Mini, HTC One (eval)
throAU is offline   0 Reply With Quote

Reply
MacRumors Forums > Apple Systems and Services > Mac Basics and Help

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 11:46 PM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC