Data Recovery Case File · Mac & Apple Ecosystem · The Drive Is Visible
It Found a System and Could Not Use It
His enquiry reports two things that together define the case. A desktop machine "showing a prohibitory symbol on screen, so I shut down, then I opened it in Recovery and it sees the drive in the disk utility. I need the files recovered without erasing anything. Also advice on how to deal with the issue moving forward would be helpful." That symbol and that drive being visible are a much better combination than most — because one says a system was found, and the other says the hardware is answering.
| Media | Internal solid-state drive in a 2015 desktop — prohibitory symbol presented at start-up; drive enumerated normally by the recovery environment's disk utility |
| Reported situation | Machine displaying a prohibitory symbol at start-up · owner shutting down rather than persisting · recovery environment started successfully · drive visible in the disk utility · files required with no erasure · guidance sought for subsequent handling |
| Fault class | System or volume damage with storage presenting normally — device-level function intact; content available for capture before any repair |
| Equipment used | No reinstall or erase permitted at any stage · drive enumeration and volume state distinguished before any action · imaged write-blocked before any repair was considered · volume structures assessed against the image · contents delivered before the machine was addressed |
The decode: what the symbol means, and why the drive being visible changes everything
What a prohibitory symbol reports: a system was located and cannot be used. The machine looked, found something it recognised as a startup volume, examined it, and declined. That is materially different from the flashing folder, which means nothing suitable was found at all — and the distinction matters because his machine had something to reject.
What causes it: a system damaged or incomplete, an interrupted update leaving a partly-written installation, a version the hardware cannot run, or damage to the specific files the startup process requires. All of those sit on top of a volume that otherwise exists.
Why the drive appearing in the disk utility is the good news: that utility enumerates devices before it considers volumes, listing disks it cannot read and marking them accordingly. Seeing the drive normally means it is presenting itself, reporting its capacity, and answering — so nothing is wrong at device level. This is a system problem on working hardware, which is the most tractable position in this whole family of faults.
Why shutting down rather than persisting was right: repeated boot attempts against a damaged system achieve nothing and each one runs whatever automatic repair the system decides to attempt. Stopping preserved the volume in the state it reached.
Why his instruction about erasing matters so much: the recovery environment he is already in offers a reinstall, and the reinstall path offers to erase as part of it. Those options sit next to each other, and the erase one is frequently presented as the reliable way to produce a working machine. It is the correct answer to "fix this computer" and the wrong one to "get my files".
The order that serves him: capture first, repair afterwards. The drive is visible and readable now, so the contents can be imaged before anything is attempted on the system — at which point any repair, reinstall or erase becomes a free decision rather than a risk.
On his question about going forward: the useful answer is that this fault gave warning by being survivable. A machine whose drive still presents is a machine where copying is possible, and the habit worth forming is to treat any refusal to start as the moment to secure the data rather than the moment to start fixing.
On the bench
No reinstall or erase was permitted at any stage, the recovery environment offering both with the erase path adjacent. Drive enumeration and volume state were distinguished before any action — a prohibitory symbol indicating a system found and rejected rather than absent, and the disk utility listing the drive normally confirming device-level function. The drive was imaged write-blocked before any repair was considered, volume structures assessed against the image, and contents delivered before the machine was addressed.
The outcome
Enumeration separated from volume state, the drive imaged before any repair and the contents delivered before the machine was touched. Free assessment, one fixed written figure including VAT; where a chip has to be removed, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode: that symbol means a system was found and could not be used, which is different from none being found at all. And the drive appearing normally in the disk utility means it is presenting, reporting capacity and answering — so this is a system problem on working hardware. Capture first, repair afterwards.
Machine showing a prohibitory symbol with the drive still visible
Copy everything off before letting anyone repair anything — your drive is readable right now, and that makes any later reinstall a free decision rather than a gamble. Read the two signs together. The prohibitory symbol means a system was found and couldn't be used, which is better than the flashing folder that means none was found at all; it points at a damaged or interrupted installation sitting on a volume that otherwise exists. And the drive appearing normally in the disk utility means it's presenting itself and reporting capacity, so nothing is wrong at hardware level. Be careful in that recovery environment, though: the reinstall option sits next to an erase option, and erasing is presented as the reliable fix.
Capture before repairing — call Guildford Data Recovery on 01483 901310; enumeration separated from volume state, imaged write-blocked before any repair, contents delivered before the machine is addressed.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.