PNY 32GB USB Flash Drive Data Recovery - Damaged Controller - Part 1

Подписаться 553

Просмотров 1,2 тыс.

50% 1

This video illustrates a data recovery attempt from a PNY 32GB USB 3.0 Flash Memory Drive. The drive was first used successfully, then safely ejected from the computer that was using it, and finally 15 minutes failed to mount to a different computer.
A DeepSpar USB Stabilizer Pro 10Gb was first used to attempt to initialize the drive but that attempt was unsuccessful. The drive would consume a steady 93mA of current and occasionally drop down to 73mA for a brief moment. In addition, the drive was unable to report its total capacity.
Next, the circuit board of the USB drive was removed from its protective plastic case and visually inspected for damage. After no apparent damage was found, a LCR meter was used to test the passive components on the logic board. One capacitor, C99, was discovered to be malfunctioning due to the high measured resistance across the entire testable frequency range of 100Hz - 100kHz.
The faulty C99 capacitor was then removed using hot air and tested out of circuit to confirm its damaged condition. After plugging into the DeepSpar USB Stabilizer 10Gb again, the USB Flash drive behaved identically to how it did before: consuming 93mA and periodically dropping momentarily to 73mA. Again, the drive was unable to report its total capacity.
To conclude testing, the USB Flash drive was provided electrical power and observed running with a thermal infrared camera. Unfortunately, a hot spot immediately developed in the center of the Phison controller QFP chip located on the transverse side of the BGA Flash memory chip, indicating a failure of some kind. This is consistent with the controller being unable to provide the USB Stabilizer 10Gb a total drive capacity.
Lastly, the BGA Flash memory chip was prepared for a chip-off data recovery attempt using an ACELab PC-3000 Flash by removing the excess non-leaded solder from the BGA chip pads and cleaning the chip of flux and debris using isopropyl alcohol (IPA) and cotton swabs.
Part 2 (coming soon) will showcase the use of an ACELab PC-3000 Flash to perform a chip-off NAND Flash data recovery.
If you need help with a data recovery, please feel free to contact us 7 days a week by telephone and text at 1.858.692.0541, by e-mail at info@it-sd.com, or visit our website at www.it-sd.com.
MUSIC CREDITS:
------------------------------------------------
"Nck - To Be Free" is under a Creative Commons (cc-by) license
Music promoted by BreakingCopyright: bit.ly/nck-to-be-free
------------------------------------------------
------------------------------------------------
Ferco & Dér Zsolt - 2020
Creative Commons - Attribution 3.0 Unported (CC BY 3.0)
Free Download: hypeddit.com/xbit6t
Video: • Ferco & Dér Zsolt - 2020 (Free Download)
------------------------------------------------
------------------------------------------------
Ferco - The Monster
Creative Commons - Attribution 3.0 Unported (CC BY 3.0)
Free Download: hypeddit.com/fe2zfp
Video: • Ferco - The Monster [Free Download]
------------------------------------------------
------------------------------------------------
Music by INOSSI
Listen: bit.ly/3mIA24Z
Watch: • INOSSI - Far Away (Official)
------------------------------------------------
------------------------------------------------
Ferco & Rodnie - What Should Be The Name
Creative Commons - Attribution 3.0 Unported (CC BY 3.0)
Free Download: hypeddit.com/g0mu71
Video: • Ferco & Rodnie - What Should Be The N...
------------------------------------------------

Опубликовано:

28 янв 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 10

@sebastiannielsen 4 месяца назад

It seems that the U5 is the culprit that blew both the C99 and main chip. Wonder what U5 is for anything? I looked into the datasheet of P2251 and it seems it already contains a voltage regulator that creates 3v3 and 1v8, and that the phison chip can eat 5v directly, so a external voltage regulator shouldn't be neccessary. The cap C99 seems to be either a decoupling cap for U5, or it provides a adjustable function (frequency) for the U5 chip, which, by misadjusting, severely destroyed the main controller. Then it somehow connects via L6 (inductor) to the other pin of that chip. And GND seems to come in at the middle pin. U5 seems to be a very weird component requiring a inductor between 2 pins and GND in-between.

@it-sd 4 месяца назад

Thank you for your comment! The U5 chip lacks many markings so I never even bothered attempting to research the chip C99 is connected to. The PNY USB Flash drive is mine so I can tell you what happened. It contains the Windows 10 2023 Update | Version 22H2 installer made by the Windows Media Creation Tool. I needed it to reinstall Windows on a client’s computer. So before I left for the job, I plugged it into a computer of mine, confirmed it was what I thought it was, and safely ejected the drive. Not more than 15 minutes later, when plugged into the client’s computer, it no longer worked. Their computer’s BIOS didn’t even recognize a drive was plugged in. The drive has been dead since.

@sebastiannielsen 4 месяца назад

@@it-sd Sounds like the client computer had dodgy USB ports then and somehow blew the U5 chip. But why are you doing a off-chip recovery on it when you could just install a new windows on a new stick? Maybe you should check the USB ports on that client computer with a USB voltimeter so its not spitting out too much voltage.

@it-sd 4 месяца назад

We’re on the same page. Before diagnosing the broken USB drive, I copied the Windows 10 2023 Update | Version 22H2 installer to another working USB drive and used it to reinstall Windows on the client’s computer. I’m just doing a chip-off recovery for fun to showcase the process. Thankfully, the chip-off data recovery went extremely well. The entire chip was read in about 2 hours, XOR was found based on the controller, ECC was found and corrected, and a solution containing the data preparation steps and translator configuration was found online. I only wish all chip-off data recoveries would go so smoothly.

@sebastiannielsen 4 месяца назад

@@it-sd I wonder, how do you find which blocks are used by the data? Since the controller is doing the wear-leveling and scrambling around the data to distribute the writes evenly to avoid flash wear... Or are the wear-leveling data stored on the flash-chip itself? but then you would still somehow reverse-engineer how to convert the scrambled data and the wear leveling information into usable data?

@it-sd 4 месяца назад

@sebastiannielsen The people over at ACELab reverse engineer the multitude of functions (like wear-leveling) of many of the popular Flash memory controllers available and then program those functions into the PC-3000 Flash software. In addition, ACELab hosts an online Solution Center where people can share PC-3000 Flash solutions that have worked for them in real life. I was able to find a nearly perfect solution online to my data recovery online. All I did was search for solutions based on the type of controller that was used in this PNY USB Flash drive. The trick to executing chip-off NAND Flash data recoveries is to buy an ACELab PC-3000 Flash and pay for updates every year so you have access to all of the newly reverse engineered controllers as ACELab produces them. If you watch my next video, I show how I used my PC-3000 Flash to perform the chip-off data recovery.