raid5 recovery - wrong sector found nfts boot
Posted: Mon Mar 02, 2015 7:50 am
hallo there,
a win7 64 driver problem caused my raid 5 to degrade
im using r studio demo to investigate how to reclame my data
hardware is as follows
disk1 wd 1tb
disk2 wd 1td
disk3 st 1tb
all disks checked by the smart tool and they are OK
automatic detection of raid parameters does not lead to recovery since the best guess partition and 2 more are detected (probability 44%, 41%, 3%) but the resulting partition is not readable.
scanning the automatic best guess partition does not result in file data just segments.
thus i am challenging myself with manual recovery with hex tool.
I follow the instructions to the letter http://www.r-tt.com/Articles/Finding_RAID_parameters/ and i get the following results
disk 1 (id ending in 40e5) MBR sector not detected (thus not disk1 of raid5)
disk2 (id ending in ce1c) MBR sector at zero - sectors preceding partition 2048
disk3 (id ending in 8ef9) MBR sector at zero - sectors preceding partition 2048
divide 2048/(n-1)=2048/2=1024
now the trouble starts when i try to locate the ntfs boot sector
ask hex editor to find EB 52 90 4E 54 46 53 20 20 20 20 after sector 1024
takes a while but results are
bytes per sector 190
sectors per cluster 120
logical number cluster for the file $MTF 6124990635755565538
these numbers are obviously wrong
is there something that im missing?
thank you,
achilleas
thank you
a win7 64 driver problem caused my raid 5 to degrade
im using r studio demo to investigate how to reclame my data
hardware is as follows
disk1 wd 1tb
disk2 wd 1td
disk3 st 1tb
all disks checked by the smart tool and they are OK
automatic detection of raid parameters does not lead to recovery since the best guess partition and 2 more are detected (probability 44%, 41%, 3%) but the resulting partition is not readable.
scanning the automatic best guess partition does not result in file data just segments.
thus i am challenging myself with manual recovery with hex tool.
I follow the instructions to the letter http://www.r-tt.com/Articles/Finding_RAID_parameters/ and i get the following results
disk 1 (id ending in 40e5) MBR sector not detected (thus not disk1 of raid5)
disk2 (id ending in ce1c) MBR sector at zero - sectors preceding partition 2048
disk3 (id ending in 8ef9) MBR sector at zero - sectors preceding partition 2048
divide 2048/(n-1)=2048/2=1024
now the trouble starts when i try to locate the ntfs boot sector
ask hex editor to find EB 52 90 4E 54 46 53 20 20 20 20 after sector 1024
takes a while but results are
bytes per sector 190
sectors per cluster 120
logical number cluster for the file $MTF 6124990635755565538
these numbers are obviously wrong
is there something that im missing?
thank you,
achilleas
thank you