Data Recovery Case File · Desktop Externals & Aging Drives · A Query or a Full Read
Two Very Different Things Go by the Same Name
His enquiry describes sensible diagnostic work with a cost he could not have known about. A seven-year-old secondary drive: "it initially prevented Windows from booting. I unplugged it from my PC and used a dock to run a disk scan on it. The result said there was physical degradation. The device was not dropped or hit." The finding is right. But "checking a drive's health" covers two operations that could hardly be more different — one takes seconds and costs nothing, the other is the heaviest load a failing drive can be given.
| Media | 2TB secondary storage drive of approximately seven years — obstructing host start-up; surface scanning performed by the owner reporting physical degradation; no impact history |
| Reported situation | Drive serving as secondary storage · preventing the host from completing start-up · removed and connected through a dock · disk utility scan performed reporting physical degradation · no impact or handling incident reported · contents required |
| Fault class | Progressive surface degradation confirmed — diagnostic method having applied sustained full-surface load; margin reduced |
| Equipment used | No further scanning permitted · self-reported attributes read as a query rather than by surface scan · Atola Insight Forensic error-rate assessment · imaged write-blocked under per-sector timeouts with weak regions revisited · losses mapped per file |
The decode: the two operations, and which one he ran
The first — reading the drive's own statistics. Every modern drive keeps an internal log: reallocated sectors, pending sectors, error counts, hours in service, temperature history. Reading it is a query — the tool asks the drive for the log and the drive hands it over. It takes a few seconds, reads a tiny internal area, and costs nothing whatsoever. For a drive suspected of degrading, this is the correct check, and it will usually say plainly that sectors are being reallocated.
The second — a surface scan. The tool reads every sector of the drive from beginning to end, recording which ones respond and which do not. On a 2TB drive that is hours of continuous reading, and on a degrading drive it means repeatedly hitting the exact regions that are failing, at full retry, while the drive runs warm throughout. It is the single heaviest thing you can ask a failing drive to do.
Why they get confused: most utilities offer both, frequently in the same window, and people describe either as "running a health check" or "scanning the drive". Nothing in the interface explains that one is free and the other is expensive, and there is no reason a reasonable person would know.
What his scan cost, and what it bought: it confirmed physical degradation, which is a correct and useful finding. The same conclusion was available from the self-reported attributes in seconds, without the hours of sustained reading. So he paid margin for information he could have had for nothing — and margin is the variable that determines how much comes back.
Why none of this is a reproach: he removed the drive from the machine, connected it externally, and tested it rather than continuing to use it. That is more careful than most, and the sequence was right. Only the choice of test carried a cost, and it is not a choice most people know they are making.
Why it stopped the machine booting, briefly: firmware asks each attached drive to identify itself and waits for the reply, and a drive that responds partly and never finishes holds the process through every retry. Removing it resolves that instantly, which he had already found.
What happens now: no further scanning. Error rates are established from the drive's own reporting, then the drive is imaged once under strict per-sector timeouts with weak regions revisited on later passes.
On the bench
No further scanning was permitted. Self-reported attributes were read as a query rather than by surface scan — a drive's internal log being retrievable in seconds and reporting reallocated and pending sectors directly, where a full-surface scan reads every sector for hours and repeatedly strikes exactly the failing regions. The Atola Insight Forensic assessed error rates, and imaging ran write-blocked under per-sector timeouts with weak regions revisited, losses resolved to individual files.
The outcome
The attributes read as a query, error rates assessed and the drive imaged once under timeout control. Free assessment, one fixed written figure including VAT; where a drive has to be opened, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode: "checking a drive's health" means two very different things. Reading its internal log is a query taking seconds and costing nothing. A surface scan reads every sector for hours, striking the failing regions repeatedly on a drive that is warm throughout. Your finding was right; the cheap version would have said the same.
Before you run a health check on a failing drive
Read the drive's own statistics rather than scanning its surface — those are two different operations that most utilities offer in the same window, and nothing explains that one is free and the other expensive. Every modern drive keeps an internal log of reallocated sectors, pending sectors and error counts, and reading it is a query: seconds, a tiny internal area, no cost at all. It will usually tell you plainly that sectors are being reallocated. A surface scan reads every sector from beginning to end, which on a large drive is hours of continuous work, repeatedly hitting the exact regions that are failing while the drive runs warm. That's the heaviest thing you can ask a failing drive to do.
Don't scan it again — call Guildford Data Recovery on 01483 901310; attributes read as a query, error rates assessed, imaged once under per-sector timeouts with weak regions revisited.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.