Page 1 of 1

raid5 recovery - wrong sector found nfts boot

Posted: Mon Mar 02, 2015 7:50 am
by achille66
hallo there,
a win7 64 driver problem caused my raid 5 to degrade
im using r studio demo to investigate how to reclame my data
hardware is as follows
disk1 wd 1tb
disk2 wd 1td
disk3 st 1tb
all disks checked by the smart tool and they are OK
automatic detection of raid parameters does not lead to recovery since the best guess partition and 2 more are detected (probability 44%, 41%, 3%) but the resulting partition is not readable.
scanning the automatic best guess partition does not result in file data just segments.
thus i am challenging myself with manual recovery with hex tool.
I follow the instructions to the letter http://www.r-tt.com/Articles/Finding_RAID_parameters/ and i get the following results

disk 1 (id ending in 40e5) MBR sector not detected (thus not disk1 of raid5)
disk2 (id ending in ce1c) MBR sector at zero - sectors preceding partition 2048
disk3 (id ending in 8ef9) MBR sector at zero - sectors preceding partition 2048

divide 2048/(n-1)=2048/2=1024

now the trouble starts when i try to locate the ntfs boot sector
ask hex editor to find EB 52 90 4E 54 46 53 20 20 20 20 after sector 1024
takes a while but results are
bytes per sector 190
sectors per cluster 120
logical number cluster for the file $MTF 6124990635755565538

these numbers are obviously wrong

is there something that im missing?
thank you,
achilleas


thank you

Re: raid5 recovery - wrong sector found nfts boot

Posted: Mon Mar 02, 2015 8:05 am
by Corsari
Hello Achilleas
Where are you typing from?

Re: raid5 recovery - wrong sector found nfts boot

Posted: Mon Mar 02, 2015 9:01 am
by achille66
hallo corsari,
im in athens greece. how bout you?

Re: raid5 recovery - wrong sector found nfts boot

Posted: Mon Mar 02, 2015 10:13 am
by achille66
ok update
used reclaim free raid recovery to discover the array matrix and lo and behold it worked.
now im scanning disk with r studio and in about 7 hours the disk will be read.
sector boxes in scan information are mostly multicolored Oie green and red, blue and green, purple etc
hope that the files are intact, at least most of them...
will keep you posted
achilleas