Case Study on Flash Doctor: Data Recovery from K9F1G08-MT29F2G08AAB_C-1-1
Case Study on Flash Doctor: Data Recovery from K9F1G08-MT29F2G08AAB_C-1-1
Flash doctor is the latest data recovery tool for USB pen drive , memory stick and SD card etc developed by SalvationDATA technology. The tools used for flash storage devices’ data recovery is deferent from the first generation flash Doctor in the current market. By adopting new general algorithm, our new product can conduct data recovery with or without integrating the mode of controller chip and the quantity of chip. Compared to our counterparts, the possibility of its data recovery is advanced. Here we introduce the data recovery flow and main functions of this flash device by the following cases.
Failure Analysis
USB pen drive malfunction can be detected under windows, however, once attempting to start it, instruction of disk unformatted will pop out, as a result data cannot be accessed. Generally speaking, here are three reasons for this problem:
USB pen drive controller chip gets damaged, pins of flash chip don’t be connected properly, FIRMWARE defect, these matters are all in the scope of flash data recovery doctor , please note that if the following event happened, It is incapable about these problems: 1. Media damage, however, the possibility is minimal. 2. Because of the failure of flash chip to be dismounted, it cannot be connected to the device. 3. Some data base of some U pen drives are encrypted, especially Scandisk. At present, no solutions can deal with it.
Preparation
Firstly ,Remove the flash chip from USB pen drive carefully, put flash chip on paper board in order not to get table damaged by hot air blower. In order to make it heated evenly, do smear proper amount of flux around the pins before using hot air gun. Next set the temperature at 300 or so, and scan the flash chip above it about 3-4 minutes, then check the chip with tweezers to verify whether it loosens. Finally remove the flash chip from circuit board, when removing the chip, tweezers should be lift up ward, if horizontally, it may lead to pins stick together so that data cannot be read out
2 After removing flash chip, soldering should be cleaned up with alcohol .if pins stick together , electric iron should be used to separate them to make sure link well. Till now pre work is over.
Data recovery flow
First lift the wrench on base, insert chip slot to the base carefully, then release the wrench to tie fixer.
Note: when conducting this step, the triangle icon should point to ‘led’ indicator light.
Next press on the spring grooves of fixer, and insert the chip into the slot. Note: the small ball in the chip should face the triangle icon.
Then link tools to computer by USB ATA, and run flash EXP program to create a new item 1.
Item info is to help user classify and manage items, though the input info does not affect following data recovery flow, accurate info should be given so as to find documents conveniently in the future.
Click ‘access chip parameters automatically’ to access info of chip. If responding parameters are not read out after clicking, it indicates chip and slot are not connected properly. That Pins are not be cleaned up or chip are not in the right position may cause such problem. However, chip itself may be defected, case like this is rare. After having access the info in chip, click ’save’ to save this case in the computer, which make it convenient to revisit this file by loading file ‘profect.ini’
Then the program will jump to ’save chip info’, there is no need to set up chip access and access speed, and it accesses the data according to the default parameters. As for device with multiple chips, user should adopt corresponding chip number to carry out data access according to the order of chips. Note: the order of chips can be acquired from the number of circuit board. After that, click ‘read chip’ to analyze the contents, and it will calculate the quantity of all kinds contents and encryption
Next, program will jump to ‘data mix’. It is the hardest but essential part of the whole program. Basic relationship, unit layout, management module layout as well as flash storage layout, all these will be analyzed here. For a beginner, it is not an easy matter to understand and master them in short time. Therefore we just give a brief illustration but not elaborate the procedure.
Basic relationship: automatically analyze the order of chip encryption and multiple chips. Generally speaking, ‘byte mix’ should be chosen before conducting analysis in case the data recovered is in disorder.
Unit layout: unlike ordinary hard disk, data in flash device is stored by pages. So this column defines how data is arranged in every page. 
Management module layout defines the location of ID data, starting point and coverage of the device. Generally speaking，ID data can be found by means of searching contents mark ‘2E20202020202020202020′with winhex.
Mixed:
it defines the mix restoration of data, including Disking block operation, access operation and so on，which is the most difficult part needing much practice.
Others
Check data: Two columns on the left just show the data of management module, while column on the right present the native data. We can verify the structure of ID data through series contrast and analysis.
Collection: after having set up all parameters, click ‘collection’. Program will rearrange the data fixed, and show the result of rearrangement.
Import arithmetic: if having come across same cases before, importing successful arithmetic can save the time of reanalyzing calculation processing..
Save arithmetic: save the arithmetic which has extracted data successfully, so that it can be used directly when meeting same type of cases.
Extract data: Click it into DCEXP to extract data
Imaging: After imaging the data , files can be obtained by scanning imaging files with DCEXP. Through series of analysis and counting, we can get illustration presented as below, click ‘extract data’ to access data from flash devices.
The Later operations are familiar with the previous ones. Click ‘open disk’ and then open flash device.
.
Now there is a partition of FAT32 in current device, Double-click this partition,then click the root file on the lower right corner to access files.
Try to open a text file from the file list on the right to check whether data can be accessed normally. If not, it indicates some parameters should be readjusted
As shown above, the text file has been opened successfully, which proves that previous settings are correct and data recovery of this disk is accomplished..
From the above case, we can see, data recovery for Flash device is complicated than hard disk data recovery, for clients who use this device for the first time，carefulness and patience are need to be skillfully in its using and improve your business .
