Topic: SSD external hard disk corrupted contain 70 BTC~! - page 3. (Read 1175 times)

agree but i already pass over all , the controller is damaged.

Can still companies recover it , even if the controller is damaged/ and sdd is encrypted?

so we are talking about the "Sandforce SF-2281 controller" (or something like that) I guess.
use AES256 encyption

There are some companies out there which can recover it.

But, first IMHO you (anybody who is a pro!) has to check what's the fault. Is is a power supply chip for e.g. the controller, is it a simple fuse,
is it a destroyed voltage regulator, etc... is it the chip itself, and so on...

Normally, to check whether a chip is broken or not you have to -> measure it. (anything else - please don't get me wrong - is guessing)
(ok, not if completly destroyed / burned, etc... )

Bye,

If the wallet file is protected with a strong password then there won't be anything they can steal at all short of running a password cracker on it which for them would be a borderline illegal activity if they've only been tasked to recover the wallet file. And if a professional company attempted to do this then they will be legally liable for theft of users' personal information and you can take them to court for that. Stealing bitcoins from a wallet.dat file is one of the more blatant forms of stealing personal information and any reasonable lawyer should be able to successfully argue the case to award you damages.

It reminds me of the time Best Buy was sued (and forced to pay damages) because some of their lot of hired technical support employees they called "Geek Squad" copied their client's personal files for themselves.

---

I'm not really sure. Like I said, I'm no hardware expert so we have to wait for someone more experienced to reply on this thread.

TheBeardedBaby

FNT

As final digging into this , most probably and the only good chance is that the controller is broken and can be replaced

The main issue is that it is a sandforce - based SSD controller which encrypt on low level language all the hardware


What are my chances, any advice how to get Controller replaced properly ?

The problem in PC3000 company machine , dont recognize sandforce firmware


NotATether and Guys , do you confirm any damaged Chip on the picture , because all process is useless if 1 of the chips is damaged, since the harddisk is encrypted. ! if 1 i loose 1 single byte i loose all the data.


Any recommendation? or replies
thanks

Hi!

Could you please do us a favor and upload a good/big pictures of the circuit board? front and back side, so we could see chip type, etc...

First interessting thing is, WHAT is (not) working?
Is it "just" the fuse as mentioned, is it a (small) controller or a connection brick? etc... are components "responding" like they should?

The NAND readout is one thing, because if readout is ok and you have the image of the NAND, you need to "know" how
to "puzzle" it together block management / etc... (which is done by controller) to get the data.
-> controller for NANDs are important to know which controller (on the front side) is used, there are controller which encypt the how data on NAND, etc..
(this encryption has nothing to do with any USER software/disk encytption!)

I don't know whether it could work to readout NAND chip 1:1, copy it to a new drive to the NAND chips 1:1 and try to start-up.

Shouldn't be there 2 x 8 NANDs, as I asked before?

@NotATether: broken NAND flash controllers, where do you see it?
NAND: it has 48pins, but normaly (I don't have the datsheet of this NAND) not all pins are used.

Bye

PS: this are jobs for professionals, who have done this before! as I said in my first post.

Hold on, as a owner of a computer hardware repair shop for more than 10 years I can give you one advice. If you don't know what you are doing, please don't attempt to repair it alone. I've seen "repaired" things that are beyond repair.
Keep in mind that whatever you do with the disk you have a high chance of destroying what was left on it.
Example every time you power up a SSD the firmware will will attempt to do a maintenance even if it's not connected to a PC, those are processes you cannot stop and they can make things even worse depends on the failure you have.

To me it seems like you have a controller chip corruption the way you explained the issued you got, this is the most common failure you get with those ssds. The memory chips should be all fine. I'm not a professional data recovery expert but I can bet on  that was the initial issue you had. I don't know the current situation after the "friends" repair attempts but if the hard drive didn't have any physical damage and just suddenly stopped working then controller chip corruption is the most common what can happen.

There's a possibility to replace the controller chip and the drive has quite high chance of getting back to normal but don't attempt to change it yourself.

If you have taken it to a professional company and they said that it cannot be repaired, the are not a professional data recovery company, or your drive is physically broken and total loss.

On the other side, the company cannot make a full recovery if the drive is encrypted and they don't have the decryption key, most likely every reputable company will require it. You might have a chance to make an agreement to get the raw data on an external drive and try to decrypt it yourself, but the company will not be able to verify if the data was properly extracted. You might end up with a bunch of 0s and 1s that have no meaning even after decrypting the data. You have to either risk the chance of getting your coins stolen, with a reputable companies the risk is lower, or just forget about the coins at all. Trying to fix it yourself won't do the job.

This is what I can tell you from my experience. Good luck with the recovery.

I'm not exactly a hardware guy but from the picture of the broken board you posted, you don't have a broken SATA or SSD controller, one of your eight NAND flash controllers are busted. You can see a white background around one of the chips. Hopefully your wallet file was not on it.

Trying to repair it is a waste of time since the data on that flash controller is gone.

You need to find a company that specializes in recovering data from flash controllers. There is, for example, eProvided. You should give them a shot.

How did you find what is the source of problem?

https://dfarq.homeip.net/fix-dead-ssd/

https://www.youtube.com/watch?v=QYkzcw1Z47c

Guys thanks again for the feedback. make sure am a man with honor i pledge to contact all who interact here if it work for NICE CASH bonus if this work . thank you.


I learned maybe that the controller inside the SSD is broken, and this maybe encrypted low level language , can PC 3000 overpass it or anyway ,
maybe i can call the company for a production of same model controller since i have the serial number?

Advice please with opinions.

If that drive is dead then i am afraid that utility will not help.
I think it's one of the most expensive solutions those prices are ridiculous.

And yes i think these NAND chips are fine.
The biggest problem is that the data is scattered across them.

With the basic PC-3000 set, you can use the power of the PC-3000 technologies for recovering data from HDD and SSD at the lowest possible price!

Basic PC-3000 UDMA SSD Set
(PC-3000 UDMA + DE UDMA + PC-3000 SSD)

Recommended to buy with this Basic PC-3000 Set: SATA-mSATA, SATA-M.2 and PC PATA-SATA (SSD) adapters at the special price 199 EUR for all of them.

THE BIGGEST DISCOUNTS FOR THE PC-3000 PROFESSIONAL SYSTEMS

Equip your lab with the all-powerful PC-3000 professional systems such as the newest PC-3000 Portable III, the well-established PC-3000 Express including the RAID and SSD add-ons, the fastest PC-3000 SAS including the RAID add-on, and the leading tool in NAND Flash data recovery — PC-3000 Flash.

PC-3000 Portable III System (or SSD/RAID/Ultimate System) NEW!   

20% discount
PC-3000 Express System (or SSD/RAID/Ultimate System)
PC-3000 SAS System (or RAID System)
PC-3000 Flash ver.4.0 (Basic Package, Basic Package + Spider Board Adapter, All-in-One Package)

Also, you can see the extra adapters included in the SSD/RAID/Ultimate Systems and the regular prices without discounts in the attached Price List for the PC-3000 Products.




For the part pf psi , those connecters are available , what do you think ?

Also regarding your 80 % did you look at the photo of the chips ? and know they still Ok ?
Thanks

I think there is at least 80% hope.
But you need the right skills and tools to get it done.
Reading your last query it appears to me that the best route from here is to go on and extract the raw data from each of these NAND chips.
Once extracted you can mount the image in read only mode to examine it further, and possibly decrypt whatever part is left of it.
Your are lucky because sometimes these chips are baked onto the board with the connections on the bottom side leaving them unreachable. In your case the connections are on the sides which makes them accessible with needle or test clip adapters to access the data.
You can see on youtube some repair men have a channel and they will demonstrate to you the process of repair and recovery and much can be learned from there.
It's important however that you have the key to decrypt the data otherwise that obstacle would reduce my expectations from 80 to about 1~5 % and i would consider the funds lost.
Did you say you used Truecrypt ? or Veracrypt ??
If you have the key and the data is there then there is no reason to give up yet.

Hello my friend , i have very little background about Technical - but all i know is suddenly it stop working and i tried somepople to examine it in terms of fuse , and all boards -
1 year back , with no success , i do not know already if they create bigger damage because 2 of them was non proffestional .
The only thing i have left i think is with Chip reading and moving data to new Harddisk .

This machine as they explain for me , act as board + cpu for the chips , which you can copy them to Other Hd.
I did not understand the comment at the machine you did , seems interesting i will copy the message to my friend lets see.

Do you think 100 % no hope with this machine?

The ssd when put in computer can not get any signal or any sound or anything.

No this will not work because those are targeted at PCIe SSD and yours is different from that.
And even if it worked you can use Gnome Disks (which is free) to pull an extended S.M.A.R.T report.
But like i said this will only work if the firmware still boots and the drive still communicates with the SATA interface bus.

If your hardware is damaged you will have to pull the raw data from each of the chips one by one.
But i do not think this is the case i have rarely ever seen this.

You did not tell much about how this problem arise.
Maybe the drive was full, some drives cycles sectors to extend lifetime and if there is a problem the firmware will lock the drive and prevent read write access.
Or maybe you live in a country that has a dirty mains electricity with many spikes present, for example when you are living close to some industrial area where there are factories that operate huge motors that fire spikes and over voltage back into the mains lines, of course such events can damage your sensitive computer equipment.

You can examine the circuit board most usually have a small fuse, if it's possible for you to find the datasheet you can examine the levels of the components with a voltmeter.
Many times the components are numbered C1 R6 F1 D5 or Q8 and etc. You can see C stands for Capacitor, R stands for Resistor and F stands for Fuse D is Diode and Q is a Transistor or IC.

Normally there is only one Fuse so that would be F1 and it is placed right after the power plug where the power enters the circuit board. You can check this Fuse with a voltmeter on the resistor or Ohm setting if it shows 0.00 the Fuse is good if it shows OL or OPEN LOOP then the Fuse is bad and it most likely saved the rest of the hardware when it burned through. This is it's purpose this is why it is there. Then you have to replace the fuse and the thing will come back to life again. If you have doubts about any of this then do not make any attempt or action and first study and look at examples until you feel comfortable to dive in.
  
Those are just some examples of what could be wrong. We do not know the current condition of the drive whether it still communicates of is a 100% dead. So if you really want useful advice we would have to know a bit more about the current status of the device.

Iam ordering the machine itself.

Again, if you do end up finding a service that may recover your disk I wouldn't give them your key to decrypt the disk since I don't think they need it to recover the device. Have you made this question in a more specialized forum ?

Guys thanks for the comments

I found this company

https://www.acelaboratory.com/pc3000-ssd.php


This may work ?

Whatever you do don't give your drive to anyone, even companies. Once they do find out what you have on the disk (because they will have full access to it during their recovery steps).
Have you tried searching google for someone in the same shoes that yourself? Granted that they wouldn't be able to access your BTC since they don't know the code but they could take the file and delete it (and then claim that they weren't able to recover the files).

Are you willing to risk that? What model are we talking about here, could you share it? Perhaps we could try to give you some recommendations based on what you tell us about.

Don't listen to people who tell you to give away that drive.
All you can do is cry when you discover they took your coins.
You will have to become a professional and do it yourself.
Trust no one.

It depends: if they get the entire disk to work, they can just create a raw copy of the entire encrypted partition. But if they can only do a partial recovery of the physical disk, they won't be able to recover individual files without the password.

You may be better off asking those questions on a more specialized forum. Leave out the part about 70 Bitcoin, that's irrelevant (until the files are actually recovered).