FYI: Refurbished Drives Aren't Always Cleared

Ketchup

Elite Member
Sep 1, 2002
14,559
248
106
I bought a couple refurbished drives recently. One of them caught be eye because it was already partitioned:

Screenshot_-_5_20_2017_2_24_09_PM.jpg


So I spent just a couple minutes looking and sure enough, it looks like some data would have been found:

Screenshot_-_5_20_2017_2_22_43_PM.jpg


So if at all possible, wipe the drive, or at least the partition before sending it in. Your data could end up in someone else's hands!
 

LTC8K6

Lifer
Mar 10, 2004
28,520
1,575
126
Probably means it was not really checked before they shipped it...
 

VirtualLarry

No Lifer
Aug 25, 2001
56,572
10,208
126
I think that it would be useful to make a very clear distinction, between mfg RMA processes and refurbishment, and vendors that acquire drives from old server machines, and SHOULD be responsible for data-destruction, and then they re-sell the "good" drives back on the open market as "refurbs". Sometimes, the latter misses a drive.
 

XavierMace

Diamond Member
Apr 20, 2013
4,307
450
126
I think it's funny that you think there's a difference. I've dealt with no shortage of manufacturer "refurbished" items that were either DOA or clearly not properly "refurbished".
 

BarkingGhostar

Diamond Member
Nov 20, 2009
8,410
1,617
136
What were the files and could they have been put there as part of the reseller refurb process?
 

Ketchup

Elite Member
Sep 1, 2002
14,559
248
106
I didn't go far enough to see what they were. It's none of my business and I didn't waste the time. But if they weren't dilligent enough to remove partitions, I doubt files that were found were merely something WD (or whoever) put on the drive.
 

tcsenter

Lifer
Sep 7, 2001
18,893
546
126
I didn't go far enough to see what they were. It's none of my business and I didn't waste the time. But if they weren't dilligent enough to remove partitions, I doubt files that were found were merely something WD (or whoever) put on the drive.
Using DeepScan Recuva will 'find' at least 21 "files" used for/by NTFS file system; $MFT and mirror, $Badclus, $Logfile, $Attrdef, $Bitmap, $Secure, etc. Your scan indicates 23 files found, I'm betting those are it.
 

VirtualLarry

No Lifer
Aug 25, 2001
56,572
10,208
126
Another possibility - some "secure erase/delete/wipe" software, may write a "destruction certificate" to the HDD in question, to authenticate that it was wiped successfully.
 

Ketchup

Elite Member
Sep 1, 2002
14,559
248
106
Using DeepScan Recuva will 'find' at least 21 "files" used for/by NTFS file system; $MFT and mirror, $Badclus, $Logfile, $Attrdef, $Bitmap, $Secure, etc. Your scan indicates 23 files found, I'm betting those are it.

That's assuming the remaining two thirds of the disk it hadn't searched yet contained zero files. I'm not saying you're wrong, I am just saying probability isn't in favor of your "bet".
 

tcsenter

Lifer
Sep 7, 2001
18,893
546
126
Recuva DeepScan finds those NTFS files fairly quick, then could spend an additional 30 minutes finding nothing else. Your scan progress indicates it has already searched a quarter of the drive and those are the only files it found thus far. Based on this there is no reason to suspect those files are anything but the NTFS housekeeping stuff.
 
Last edited: