Corrupted USB: make an image before you format

Sketch of a USB drive and recovery blocks

Article by

PC Scientist

PC Scientist is a professional IT support provider helping homeowners and small businesses across New South Wales. We specialise in computer repair, business IT support, networking, Wi-Fi optimisation, cybersecurity, email support, device setup and security camera solutions.

Our articles are written using practical, real-world experience to help Australians solve technology problems with clear, accurate and easy-to-follow advice. When an issue requires professional assistance, we're here to help with onsite and remote support.

Most files on a corrupted USB drive can be recovered if you stop using the drive right away and avoid writing anything new to it. A quick test on a different port or computer is fine, but formatting or reinstalling the drive is not. If the files genuinely matter, the safest move is to create an image of the drive before attempting any repair, then work only from that copy.

Key takeaways

  • On Windows, use Windows File Recovery's extensive mode for corrupted USB drives, and save recovered files to a separate drive.
  • On a Mac, run Disk Utility First Aid once; if it fails, stop, create a drive image, and avoid erasing or reformatting the original.
  • When files matter, make a sector by sector image before repairs, then recover from that copy with software in read only mode.
  • Call a recovery lab if the drive is undetected, makes clicking or buzzing sounds, or holds irreplaceable files; physical and firmware faults need specialist equipment.

The first 10 minutes: what to do and what to avoid

What you do in the first few minutes after noticing a problem matters more than almost anything that follows. Flash drives store deleted or "lost" data in sectors the directory no longer points to, and those sectors stay intact until something overwrites them.

  • Disconnect the drive as soon as you notice errors, missing files or odd behaviour.
  • Test it briefly on a different USB port or another computer before assuming the worst.
  • Do not format or initialise the drive if you need the files back.
  • Turn off cloud sync or automatic backup tools that might write to the drive in the background.
  • Write down the exact error message and what the drive was doing when it failed.

Pro Tip: Photograph the error message with your phone. It helps a technician diagnose the fault faster if you end up needing professional recovery.

Windows: step-by-step safe recovery path

Windows gives you a few built-in options before you need anything else. Work through them in order and stop the moment you're asked to format or reinitialise the drive.

  1. Plug the USB into a different port, and ideally a different PC, to rule out a port or driver issue.
  2. Right-click the drive in File Explorer, open Properties > Tools > Error checking, and run a scan. Avoid full CHKDSK repairs unless you've already backed up what you can, since repairs can move or delete flagged files.
  3. If the drive is still readable but files are missing, try Windows File Recovery. Its extensive mode is built for corrupted drives and non-NTFS file systems, which covers most USB sticks formatted in exFAT or FAT32.
  4. Always recover files to a separate destination drive, never back onto the USB itself.
  5. If none of this restores your files, stop. Image the drive before trying anything more invasive.

Windows File Recovery's extensive mode is specifically recommended for corrupted drives and cross-file-system recovery, and Microsoft warns against creating a new partition or writing to the drive after data loss, since that reduces your chances of getting anything back. The command-line tool can feel unfamiliar if you've never used it, but following Microsoft's own syntax examples step by step is safer than guessing.

macOS: step-by-step safe recovery path

Mac users have a gentler first option built into the operating system, but it's worth knowing when to back off from it.

  1. Open Disk Utility, select the USB drive, and run First Aid. This can repair some directory-structure and formatting errors without touching your files.
  2. If First Aid reports the disk was repaired, check your files immediately and copy anything important elsewhere.
  3. If First Aid fails or reports it cannot repair the disk, stop there. Apple's own guidance recommends backing up what you can, making an image, and restoring from a backup rather than reformatting blind.
  4. Avoid erasing or reformatting the drive before you've captured an image, even if macOS prompts you to.

APFS, HFS+ and exFAT all behave differently when corrupted, and a repair that works cleanly on one file system can be riskier on another. Disk Utility can sometimes move damaged files into a separate folder during repair, which is useful, but it's still safer to work from an image than the original drive whenever the files matter.

Imaging and recovery software: safe practices for everyday users

Imaging means making a sector-by-sector copy of the drive before you touch it further, as detailed in How to Fix a Corrupt USB Flash Drive and Recover Data. It matters because flash file systems can leave older directory versions sitting in other sectors even after a drive looks empty, and a format or repair attempt can quietly erase those remnants for good.

  • Always recover or repair from the image, never from the original drive.
  • Use another working PC with enough free space, a straightforward imaging tool, or ask a professional to image it for you if you're not confident.
  • Run any recovery software in read-only mode where that option exists, and filter by file type to speed up the scan.
  • Avoid quick format, full format or repartitioning the original drive at any stage before imaging.

Pro Tip: If a free recovery tool asks you to "repair" or "fix" the drive directly, decline. Repair actions write to the drive, and that's exactly what you're trying to avoid before imaging. One technical discussion of flash file systems, the FFRecovery research paper, explains how professional labs rely on these leftover directory versions, which is why protecting them with an image first gives you the best odds.

When to stop DIY and call a professional data recovery service

Some faults are beyond what software alone can fix, and pushing ahead risks losing data permanently rather than saving a repair bill.

  • The drive doesn't power up, isn't detected at all, or makes clicking or buzzing sounds.
  • You've already tried formatting, repartitioning or running repair tools before reading this far.
  • The data is irreplaceable: tax records, family photos, business files with no other copy.
  • You need the drive back working quickly for an urgent deadline.

Professional labs can go further than any consumer tool, using clean-room handling, chip-level recovery and firmware repair that reconstruct directories even when a drive looks physically dead. These methods are invasive and require specialist equipment, which is why they cost more than software and take longer to turn around, generally longer for physical or firmware faults than for straightforward logical corruption. Before contacting anyone, gather the drive, any image you've already made, a note of the error messages, and how urgent the recovery is.

Prevention: backups, malware checks and simple habits to reduce future risk

A little routine now saves a lot of stress later. The National Archives of Australia recommends periodic fixity checks, using checksums to confirm a file hasn't quietly degraded, alongside backups kept in more than one location.

  • Keep at least two backups, with one stored offline or disconnected from any network.
  • Scan removable media for malware before and after use, and disconnect backup drives when they're not actively syncing, since a backup left connected to an infected device can be infected too.
  • Open important files occasionally to confirm they still work, rather than assuming a backup is fine because it exists.
  • Always use Safely Remove Hardware before unplugging, and avoid unknown USB sticks, chargers or cables from untrusted sources.

Pro Tip: Set a calendar reminder every few months to plug in and spot-check your backup drive. A backup you've never opened is a guess, not a safety net.

PC Scientist perspective: honest limits of DIY recovery

DIY steps genuinely work for logical corruption, a scrambled directory or a bad format, far more often than people expect. Physical damage or firmware faults are a different story and usually need a lab. We treat every device that comes to us with strict privacy and chain of custody to protect your files. If you've already written to the drive, stop there: your odds have just dropped, and professional help is the better next move.

- PC Scientist

How we can help with USB file recovery

We get it: a corrupted USB with irreplaceable photos or client files feels a lot bigger than "just a tech problem" once you realise what's at stake. That's exactly where our Data Recovery Scientist service comes in, starting with a remote triage call to work out whether imaging on-site is realistic or whether the case needs a specialist lab referral.

PC Scientist

Before you get in touch, it helps to have a few things ready:

  • The drive itself, untouched since the fault appeared if possible.
  • Any image you've already made, plus notes on what you tried.
  • The exact error messages and roughly when the problem started.

Get in touch through our Data Recovery Scientist page and we'll talk you through the next step in plain language, no jargon required.

Sources

Help centre

Frequently Asked Questions

Straight answers about Don't Format: Image First to Recover a Corrupted USB for Home Users - without jargon or pressure. Call 0493 563 381 for advice, or get help below.

Want the quickest answer? 0493 563 381 for free advice.

Yes, in many cases, particularly when the corruption is logical rather than physical, such as a damaged directory or file system error. The key is stopping use of the drive immediately and avoiding formatting, since flash drives often keep older directory versions intact on other sectors until something overwrites them.

Start with built-in tools: Windows users can try Error checking or Windows File Recovery in extensive mode, while Mac users should run Disk Utility's First Aid. If these don't resolve it, image the drive before trying anything further rather than reformatting it.

Image the drive first, a full sector-by-sector copy, so any repair or recovery attempt works on the copy rather than the original. This protects the remnants of your file system that recovery software or a professional lab relies on to reconstruct lost files.

Costs vary widely depending on whether the fault is logical or physical, with straightforward logical recovery generally cheaper and quicker than cases needing clean-room or chip-level work. Our Data Recovery Scientist service doesn't publish a flat price online, so get in touch directly for an assessment based on your drive and situation.

Data recovery across NSW

If files have gone missing, that is okay. Get data recovery help in your area and we will take it from here.

Data recovery statewide

Start here

Get data recovery help

Optional Need a Sydney city or region?

Choose a side of Sydney

These are Sydney cities and regions, such as the Northern Beaches or Inner West. First tap a side of Sydney. Then open the city or region that covers you.

C Sydney City / Inner 3 areas
N Northern Sydney 6 areas
NW North-West / Central Sydney 3 areas
W Western Sydney 1 area
SW South-West Sydney 3 areas
S Southern Sydney 2 areas
Optional Find your suburb

Type a suburb from our listed coverage. This opens the matching city or region page for this topic. Listed suburb pages are general technology services, not this specialist page.

If your suburb is not listed, use the city or region list above, or call 0493 563 381.

    Need help with your setup? Call or text PC Scientist on 0493 563 381 for initial advice, request a callback at a suitable time, get a quote or book online to receive the advertised online-booking discount where applicable.

    Disclaimer

    The information in this article is provided for general educational and informational purposes only. While PC Scientist strives to keep all content accurate and up to date, technology issues can vary depending on your device, software, network configuration, and individual circumstances. Always back up important data before attempting repairs or system changes. If you are unsure or the issue cannot be resolved safely, contact PC Scientist today for professional onsite or remote IT support. PC Scientist is not liable for any loss of data, damage, or other issues resulting from the use of the information provided in this article.

    When you are ready

    Tell us what is happening

    Book online Save 10% Call for free advice 0493 563 381