Data Recovery · LanCologne

What does the ‚RAW‘ error message mean when it appears on a hard disk or SSD?

„RAW“ means that Windows can no longer recognise a known file system on the partition. This may be due to damaged boot sector or partition information, read errors in precisely these areas, or encryption that has not been unlocked.

Free enquiry

Technical background

Common causes include improperly disconnecting external drives, power cuts during write operations, bad sectors within the NTFS management structures ($MFT, boot sector) or a faulty USB adapter. BitLocker-encrypted or manufacturer-encrypted drives also appear as RAW unless they are unlocked.

What you should – and shouldn’t – do now

  • Decline the Windows formatting prompt.
  • Do not run chkdsk /f or /r – it alters the structures on the original.
  • Check whether the drive was encrypted (BitLocker, manufacturer’s software).
  • If you hear any noises or if it runs extremely slowly: switch it off.

Here’s how we do it

  • Complete image, with damaged areas shown last.
  • Search for backup copies of the boot sector and the $MFT mirror image.
  • Reconstruction of the partition table and file system from the image.

Borders

  • If large sections of the $MFT are damaged, file names and folder structures are lost; files can then only be found by type.
  • Unlocked encryption must be opened with a key.

Possible results

Recovered files should, where possible, retain their folder structure and file names.

How we carry out data recovery

Every data storage device is first diagnosed in our own laboratory in Cologne; the diagnosis is free of charge. You will then receive a written quote and can decide whether to accept it. If you decline, you can collect the data storage device from the laboratory by appointment – there are no postage costs involved – or we will post it back to you; in which case postage and packaging costs may apply. Data is recovered from copies, not from the original – using professional data recovery hardware such as the PC-3000. If a drive needs to be opened, this is carried out on a HEPA H14-filtered clean bench. We do not offer a guarantee of success prior to diagnosis, as this is simply not possible in a professional context. Your storage device and your data will remain confidential and will not be passed on to third parties.

1Enquiries and submission by post or in person at the laboratory by prior appointment
2Free diagnosis of the cause of the damage
3Written quotation – we will only proceed once you have approved it; if you decline, you may collect the item from the laboratory or we will return it to you (postage and packaging costs may apply)
4Recovery, data verification and confidential handover

Request a diagnosis   Find out more about the process, costs and confidentiality →

Frequently Asked Questions

Can I run chkdsk?+
It’s best not to run it on the original. If there are read errors, chkdsk can „repair“ structures by removing entries.
Why does Windows ask me to format the drive?+
Because it doesn’t recognise a file system. Formatting creates new structures and makes recovery more difficult.
Is RAW any different for SSDs?+
The causes are similar, and controller errors are also a factor. TRIM can make deleted sectors irretrievable.

Related topics

🔗 Related topics