Apple MacBook Pro

Target Disk Mode is a special boot mode for Intel-based Macs (and an option in macOS Recovery on Macs with Apple silicon) that allows you to connect one Mac to another and use the first Mac as an external storage device.

This lets you quickly transfer large amounts of data between the two computers, which is particularly useful for migrating data to a new Mac, recovering data from an old Mac, or troubleshooting a Mac that won’t start up normally. 

An important note: If your Mac shows signs of media failure, do not attempt to read data in Target Disk mode or Share Disk mode. Signs of media failure include (but aren’t limited to) clicking sounds, file corruption, and extremely slow operation. Learn more about the signs of media failure. 

Below, we’ll explain how to enter Target Disk mode. We’ll also explain how to use a similar feature (“Share Disk” or “Mac Disk Sharing”) for Apple Silicone Macs (M1 and later). 

Using Target Disk Mode on Intel-Based Macs

1. Connect the Macs: Use a Thunderbolt or USB-C cable to connect the Intel Mac (the one you want to use as a disk) to the second Mac. Note that you must use a Thunderbolt cable if either computer has macOS or later installed. 
2. Start Target Disk Mode (if the Mac is off): Press and hold the T key, then press the power button to turn on the Mac. Keep holding T until you see the Thunderbolt icon.
3. Start Target Disk Mode (if the Mac is already on): Click the Apple icon > System Settings > General > Startup Disk > Restart in Target Disk Mode.
4. Access the Disk: The Intel Mac’s drive will appear as an external hard drive on the second Mac’s desktop. You can now copy files to or from it.
5. Exit Target Disk Mode: Eject the disk from the second Mac. Then, press and hold the power button on the Intel Mac to turn it off.

Using Share Disk Mode on Apple Silicon Macs

Due to new security features, Apple Silicon Macs (those with M1, M2, and later chips) don’t have a Target Disk Mode in the same way Intel-based Macs do. Instead, they use a feature called Share Disk within macOS Recovery. Here’s how to use it:  

1. Connect the Macs: Use a USB, USB-C, or Thunderbolt cable to connect the target Apple silicon Mac to the second Mac (the one you’ll be accessing the disk from).
2. Turn off the Target Mac: Make sure it’s fully shut down; the Touch Bar and keyboard should be completely off. 
3. Start up in macOS Recovery: Turn on the target Mac and keep holding the power button until you see the startup options window.
4. Continue to Recovery: Select Options, click Continue, and enter your password if asked.
5. Open Share Disk: In the macOS Utilities window, select Utilities > Share Disk from the menu bar.
6. Choose the disk or volume: Select the one you want to share from this Mac, then click Start Sharing.
7. Connect: The second Mac can now connect to the shared disk. Access the shared disk through the Network section in Finder.
8. Stop Sharing: When finished, click Stop Sharing in the Share Disk window.

Understanding the Limitations of Target Disk / Share Disk Mode

While Target Disk/Share Disk can be useful, it can’t fix physical issues with your storage media. If the drive you’re trying to access has errors or is failing, Target Disk Mode/Share Disk might not work reliably, and it could cause permanent data loss. 

Additionally, Target Disk and Share Disk may not provide the fastest possible transfer speeds; directly connecting the target drive may be advisable, particularly if the Macs are more than a few generations apart. 

If you’re experiencing data loss on a macOS device, we’re here to help. Datarecovery.com provides free media evaluations, and we support our services with a no data, no charge guarantee: If we’re unable to successfully recover important files from your macOS device, you don’t pay for the attempt. 

To learn more, call 1-800-237-4200 to speak with an expert or submit a case online.

The post How to Use Target Disk Mode and Share Mode on Mac Computers appeared first on Datarecovery.com.

This is less of a significant threat than on Windows machines for several reasons:

• By default, macOS doesn’t allow the installation of unverified third-party software. A scanning service called Notarization requires developers to submit their apps for scanning as a component of the distribution process.
• macOS has built-in malware tools. Gatekeeper, the primary security technology, verifies that executables haven’t been altered and prompts users before allowing them to run.
• The operating system also maintains a regularly updated, signature-based list of malware (XProtect). This enables macOS to remediate most malware that has been executed. 
• Generally, macOS is a poor target for ransomware. Windows computers represent a bigger share of the market. Malware creators want their software to spread, so they typically target Windows users — it makes less sense to target a smaller operating system with stronger security controls.

Essentially, Apple devices existed in a walled garden: Apple controls what software is allowed to run, and while users can disable security controls, most do not. 

How Malware Spreads on MacOS Machines

With that said, malware can infect macOS computers, particularly if users disable their security controls. That’s common when users are trying to pirate software: In 2020, the ThiefQuest/EvilQuest ransomware spread across macOS machines via an infected copy of pirated software that was available through torrent tracking websites.  

Mac OS computers may be targets for malware infection.

And in March 2023, a trojan horse known as MacStealer spread through a compromised .DMG file. MacStealer targeted user data in KeyChain databases and other types of files, potentially stealing iCloud passwords, credit card numbers, and other sensitive data. 

macOS malware can also spread through phishing. Users are tricked into clicking a link on a website or in an email. They may be prompted to enter private credentials or download an executable file. 

Adware and spyware can also be an issue, though these programs may not meet strict definitions of “malware.” Users may willingly download a program that slows down their computer by tracking behavior and showing ads. Generally, these programs don’t make it through the Notarization process.

Recovering Data from a MacOS Malware Infection

The good news: Apple releases regular security patches to address known threats. If you keep your computer up to date — and don’t routinely install pirated software — you probably don’t need to worry much about malware. 

You certainly don’t need a third-party virus scanner: macOS’s built in security controls are sufficient for the typical user. 

However, malware is a potential threat for every computer, including Linux, Unix, and macOS machines. If you believe that your computer has been infected by ransomware or any other type of malware, take these steps:

1. Keep your computer disconnected from the internet. Some malware may actively transfer data (including passwords and other sensitive information) to bad actors.
2. If the malware has compromised important data, make a list of important files. If you have a backup, use it for disaster recovery — but don’t plug external hard drives or other devices into the affected machine. 
3. Document any activities that may have enabled the infection. For example, if you recently downloaded software from a torrent website or clicked on an email link from an unknown source, that information could be helpful for identifying and resolving the infection. 

If you don’t have a backup, you’ll need to contact a professional data recovery provider. Malware can corrupt key files and render the machine unusable, and manufacturer warranties generally don’t cover data recovery services. 

However, an experienced data recovery firm should be able to handle the project — even “successful” macOS ransomware variants rarely encrypt all data, and reversing the damage should be fairly straightforward.

At Datarecovery.com, we provide free evaluations and support our services with a no data, no charge guarantee: If we’re unable to successfully recover important files from your macOS device, you don’t pay for the attempt. 

To learn more, call 1-800-237-4200 to speak with an expert or submit a case online.

The post Can a MacOS Computer Get a Virus? appeared first on Datarecovery.com.

Apple, Inc. recently announced the new file system to developers, although APFS wasn’t the direct focus of the company’s WWDC 2016 keynote address.

Since APFS draws from the successful features of Apple’s HFS+ while incorporating features from other next-generation file systems such as ZFS, Datarecovery.com’s engineers already have an established set of viable data recovery tools.

“Some of the new features of APFS have been around for a while, so we’ve already developed resources that we could reliably use in a data recovery case,” said Ben Carmitchel, President of Datarecovery.com. “Obviously, we need to build new recovery utilities for the file system efficiently, but our research engineers are already hard at work.”

“We’re completely confident that we could handle an APFS case with our current technology,” Carmitchel added. “Now, we’re working at making that process more efficient.”

APFS will support clones, writable copies of storage blocks that track changes and allow those changes to be rolled back. This is largely seen as preferable to the copies used in HFS+, because clones are writable (not just readable). Mac users will be able to use the new features to back up their systems reliably.

“APFS is exciting, and it should make data backup even easier for Mac OS users,” said Carmitchel. “That means fewer instances of data loss. However, until the file system has been in popular use for several months, we strongly recommend keeping full, offsite backups of any APFS volumes to protect important data.”

Other features of the operating system include improved atomicity, adaptable filesystem-level encryption and TRIM support. Datarecovery.com’s engineers will perform simulated recoveries of APFS from various media, including solid-state drives and servers, to establish a streamlined process for APFS data recovery.

“From what we’ve seen so far, APFS improves on HFS+ in just about every conceivable way,” said Carmitchel. “However, it’s important not to confuse functionality with redundancy. Data loss will still be a problem with this file system, so proper backup procedures are absolutely important.”

“If a drive fails, or a file becomes corrupted without a back up, we’ll be ready to help.”

Datarecovery.com is a worldwide leader in data loss prevention, computer forensics and data recovery services. With four locations in California, Illinois, Arizona, and Toronto, the company provides a variety of services to thousands of clients each year. Visit https://datarecovery.com for more information.

The post Datarecovery.com Announces Support for APFS File System appeared first on Datarecovery.com.

In most circumstances, our engineers can focus data recovery efforts on a failed RAID array, allowing for seamless re-integration when the data is restored. A case study is included below. For more information or to get a quote for Xsan data recovery, call 1.800.237.4200 today and ask to speak with a RAID expert.

Case Study: Xsan RAID Failure During Firmware Upgrade

In July of 2008, Datarecovery.com received a call from a company with six Xserve RAID boxes (12 separate RAIDs altogether including a mirror for metadata). The company utilized this SAN for large graphic files, and it was under heavy use.

For performance reasons, the company’s technicians upgraded the firmware on all of the Xserve RAIDs. While the upgrade did not negatively affect data on most of the arrays, the final Xserve RAID encountered a serious error. The disk configuration was lost, and all of the RAID members registered as hot spares.

Any sort of reconfiguration of the RAID would result in a complete initialization of the data, which would render all of the graphic files permanently inaccessible. Unfortunately, the timing couldn’t have been worse – the company’s backups had recently failed, and they were unable to restore the data on their own.

Datarecovery.com’s lead SAN and RAID engineer spoke directly with the technicians at the company in order to create a plan that would minimize downtime. By sending a team of engineers to the company’s headquarters, Datarecovery.com was able to clone every drive in the SAN (40 drives total) within a day.

After completing this process, Datarecovery.com’s RAID team was able to analyze the cloned media from the failed Xserve RAID array. We utilized our firmware repair equipment to create a fix, then created a replacement set of Xserve RAID modules to replace the modules in the failed RAID array. The Xsan software recognized the “new” array, and the SAN was online.

The entire process took less than 48 hours and saved the company hundreds of thousands of dollars in lost revenue. We kept the costs of our services below $50,000, including the costs of our onsite engineering team, and we remained in contact with the client to verify that the data was fully intact.

Data Recovery for Xsan Software Systems

Xsan is an extremely useful software technology that allows multiple users to access a large amount of striped data across multiple Xserve RAID boxes or Promise VTrak E-Class RAID Subsystems. However, while it has numerous advantages from a technical standpoint, it is by no means perfect.

Data recovery issues occur when one of the subsystems fails, causing the entire SAN to go down (there is no redundancy built into the Xsan software, although redundant configurations are certainly possible). Datarecovery.com’s team of experienced RAID & Apple data recovery engineers will ensure optimal recovery results at a cost that fits your budget.

If your SAN requires data recovery or if a volume is inaccessible, we strongly advise seeking immediate assistance. Datarecovery.com can provide a fast quote along with detailed advice from the world’s leading Xsan data recovery experts. Call us today at 1.800.237.4200 to speak with a RAID specialist.

The post Xsan Data Recovery appeared first on Datarecovery.com.

Apple’s Xserve utilizes a wide variety of RAID levels, and Datarecovery.com offers services for every configuration.

The most common configuration is a standard stripe set with parity ( RAID 5). The default RAID stripe size is 64k (128 sectors), and data is striped across all of the disks with a parity block that rotates between the drives; this parity block uses the XOR algorithm.

If one disk fails in a standard RAID 5, the RAID controller card can default to degraded mode and the server can continue to operate without interruption. Data recovery may be necessary if there is corruption within essential parity blocks or if a second drive fails while the array is operating in a degraded state. Additional data loss issues include failed firmware upgrades, RAID controller card failures, and natural disasters.

Xserve also supports hardware RAID levels 0, 1, 3, and 0+1. RAID levels 10, 30, and 50 are available, but these levels must be supported supported using host-based software RAID. Our engineers have experience with every configuration, including options not supported by Xserve hardware, and each of our laboratories is completely outfitted for Xserve data recovery.

If you have an Apple Xserve and you need to recover key files after a failure, contact us right away at 1.800.237.4200 to discuss options.

Real Laboratories for Xserve RAID Data Recovery

To keep your downtime to a minimum, we will work closely with your IT staff to create a case-appropriate recovery and reintegration plan. In some circumstances, this can include on-site recovery at your location or remote data recovery. We recognize that Xserve systems play a critical role in your business’s operation, and our experience with various Xserve models allows for a RAID recovery success rate of 95 percent (dependent on scenario, RAID level, and other factors).

Datarecovery.com operates fully outfitted laboratories – unlike our competitors, we do not receive your media and immediately outsource it to another facility.  With locations throughout the United States and Canada, we can quickly gain access to your RAID media and begin working on your case. We create full clones of every drive in the array before performing data recovery, and our Apple specialists can create software on-the-fly to address your server’s specific needs.

Datarecovery.com’s Xserve technology is unparalleled, and we’re always available to provide a free consultation. Call us now at 1.800.237.4200 and ask to speak with an Xserve expert.

Apple Xserve RAID
*Xserve is a registered trademark of Apple Computer, Inc. Datarecovery.com, Inc. is not affiliated with Apple Computer, Inc. All images herein are property of Apple Computer, Inc.

The post Apple Xserve RAID Data Recovery appeared first on Datarecovery.com.