Home / Case Studies / Formatting and Logical Faults
Formatting and Logical Faults · case file

Windows Wants to Format It

A tattoo studio on Smithdown Road keeps every design it has ever drawn. The drive holding them had already had one repair, a broken USB connection that was fixed by moving the disk into a replacement case, and after that it worked fine for months. Then one morning it asked to be formatted. The owner knew enough not to say yes.

External DriveCorruption / FilesystemDeleted / Formatted
// case at a glance
MediaAn external drive housed in a replacement case after an earlier connector failure, which now prompts to be formatted whenever it is connected.
What was reportedExternal drive, prompts to be formatted on connection, owner aware that formatting would clear the data, drive previously moved into a replacement case after the USB connection broke, worked for months afterwards then failed suddenly.
Fault classLogical. The filesystem structures were damaged, so Windows could not read a valid volume and offered the only thing it knows to offer. The disk surface was sound and the replacement case was not implicated.
On the benchRead behind a hardware write blocker so nothing could be written or formatted, drive taken out of the replacement case and read directly where the bridge was in question, imaged on DeepSpar, filesystem parsed in R-Studio from the image with the damaged structures rebuilt, remaining files carved by content signature where directory references had gone, validated and written to fresh media.
// the decode

The decode

The prompt is not a suggestion, it is a confession. Windows is saying it cannot find a filesystem it recognises. It offers to format because that is the only remedy it has. It has no way of knowing the drive is full of a decade of artwork.

Saying yes writes a new empty map. The files are not erased by a quick format, but the structures that describe where each one starts and ends are replaced. Recovery after that is carving by content signature, which loses filenames and folder structure. On a design archive, that is most of the value gone.

The earlier repair was not the cause. A drive moved into a new case is still the same drive and the same disk. Months of correct operation afterwards confirms the transplant was fine. This was a separate, later filesystem failure.

Everything is done to an image, never the drive. The rebuild happens against a copy. If a rebuild attempt goes wrong, the bench goes back to the image and tries a different approach, which is not an option available to anybody working on the drive itself.

// on the bench

On the bench

A hardware write blocker went on first so that no format, repair or automatic check could reach the drive. Because the disk had been moved into a replacement case, it was taken out and read directly, which removed the bridge from consideration. The surface read cleanly.

It was imaged on DeepSpar and the filesystem parsed in R-Studio from the image. The damaged structures were rebuilt, which returned most of the archive with filenames and folder hierarchy intact. Where directory references had gone entirely, the remaining files were carved by content signature and matched back by date. Everything was validated by opening a sample before being written to fresh media.

// the outcome

The outcome

The archive came back with its structure, which for a studio filing by client and year is the difference between a recovery and a pile of files. A small number of carved items came back without names and were handed over separately.

One drive, £300 + VAT. A damaged filesystem is logical work, so the job ran on no fix, no fee terms. Nothing was opened and no board work was involved.

If you are asked to format a drive that already has data on it

Say no every time, including the fourth time it asks. Then unplug it. Do not run a check disk, because repair tools write to the volume and a check disk on a damaged filesystem can turn recoverable files into numbered fragments. Do not run free recovery software that offers to fix the drive, and be careful about anything that writes its own output back to the same disk. The files are almost always still there behind a damaged map. Rebuilding that map from an image is routine work with a good success rate, but only while nothing has been written over the top.

Something like this on your own desk? Every job starts the same way. The diagnostic is free and takes 2 working days from the parcel reaching the bench, never faster, and it ends in one written figure that does not move afterwards. The fastest a completed recovery leaves here is 2-4 working days. The published rule is this: no fix, no fee all jobs except electronic and mechanical failures, chip level work, DVR and Forensic jobs. So logical faults, firmware and service area work included, run on no fix, no fee. Anything physical — a drive opened in clean air, a board or chip-level repair, water or fire damage — takes 50% of the quoted price upfront, with the balance only on success. CCTV and DVR work, BitLocker volumes and forensic jobs with a report are settled in advance. Cards and USB pen drives are £250 + VAT, any single hard drive or SSD including NVMe is £300 + VAT, arrays, NAS boxes and servers start at £500 + VAT, CCTV and DVR is £400 + VAT, BitLocker is £400 + VAT and forensic work with a report is £800 + VAT. Where the data sits inside a laptop, a desktop, a Mac or a server, take the drive or SSD out and post that on its own: internal drives are not removed from machines here, and flash soldered directly to a logic board, as in ultraslim laptops, tablets and Apple Silicon Macs, is outside what this lab takes in. If it unplugs or unscrews, it is our sort of work. Post it tracked and insured to Manchester Data Recovery, Peter House, Oxford Street, Manchester M1 5AN, or book and pay for a courier yourself. There is no collection service and no counter in Liverpool. Freephone 0800 689 0668, Mon–Fri 9:00am–5:30pm. Packing advice and the shipping form live here.
Start a free diagnostic

Every case file here is written up from a real enquiry handled for households and businesses across Liverpool, Merseyside and the wider North West, anonymised so that nobody is identifiable. Each one gives the reasoning behind the diagnosis, the method the fault actually called for, and the equipment it was worked on.

// related case files

Other files in the same vein

Browse all case studies →

Recognise your own drive in this one?

The diagnostic is free and takes 2 working days from arrival, the figure is fixed in writing, and logical faults run on no fix, no fee. Start online or ring the freephone.