R-Studio for Raid 5 recovery on 4x 2.0 TB WD Share Space

Discussions on using the professional data recovery program R-STUDIO for RAID re-construction, NAS recovery, and recovery of various disk and volume managers: Windows storage spaces, Apple volumes, and Linux Logical Volume Manager.
shong

R-Studio for Raid 5 recovery on 4x 2.0 TB WD Share Space

Post by shong » Thu Aug 20, 2009 2:44 pm

I'm pretty new to data recovery, however I was put in charge of purchasing a data recovery program for our 4x2.0 TB WD ShareSpace. We notice an error in HDD 1, which said that the drive failed. Afterwards we got a new drive from the mail and loaded it into the WD ShareSpace, right back into where it came from. It loaded, however when accessing the drive it said that the raid was "unassigned" and not Raid 5. I'm very worried as this is being used as a our main drive for logged calls. So what I was wondering is how easy is it to recover data from our HDD into the R-Studio. Please get back to me.

Alt
Site Moderator
Posts: 3129
Joined: Tue Nov 11, 2008 2:13 pm
Contact:

Re: R-Studio for Raid 5 recovery on 4x 2.0 TB WD Share Space

Post by Alt » Thu Aug 20, 2009 4:08 pm

What is good about R-Studio is the fact that you can try it before buy it. You may install R-Studio in the demo mode on your computer and test it. It will do all data recovery actions except actual data recovery. You will be able to create a virtual RAID5 from the disks, scan it (if necessary), search for the files, and preview them, if the files types are supported fro previewing. If everything is OK, you may buy R-Studio on-line, enter the registration key, and immediately recover the files.
You may find more information on:
Demo mode: http://www.data-recovery-software.net/D ... shtml#demo
On-line Help: http://www.unformat-unerase.com/Unforma ... index.html
Downloadable manual: http://www.data-recovery-software.net/d ... Manual.pdf

As I understand, the file system of this NAS is unmodified ext3fs, which R-Studio supports. That is good. But you will have to take the hard drives out of the NAS device and connect to a Windows computer where R-Studio is installed. R-Studio cannot be run on the device. If possible, create and save the images of the drives and work with them. That prevents accidental data damages, especially when one or several drives may fail.
Before you create a virtual RAID, you need to know its parameters, such as a drive order, offset, block size, and block order. You may get it either from a setup panel of the NAS device (I don't know if they are available for Share Space), or contact its technical support.
And good like in data recovery!

shong

Raid 5 Error with R-Studio

Post by shong » Mon Aug 24, 2009 8:59 am

After our NAS with 4 x 2.0 TB WD ShareSpace finished scanning the Raid 5 array, I attempted to open up the virtual HDD so I could access and view some of my files. However when opening I got an error that said:

[Environment information]
Application: R-STUDIO v5.0 Build 129012
System: 2 x Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz, 2333 MHz, 2047 MB RAM
OS: Windows Server 2003 / Terminal Services Build 3790, Service Pack 1
[Memory usage information]
System physical memory: Used: 1952108KB, Total 2096348KB
System virtual memory: Used: 2349272KB, Total 4038560KB
Process virtual memory: Current 1537352KB, Maximum: 1686176KB
[Exception information]
Exception Code: 0xc0000005 (Access violation)
Exception Address: 0x005d15a6
Exception Operation: Read from address 0x00000004
[Thread context information, TID=3352]
Stack Base=014b0000 Stack Limit=014a8000
[Registers]
EAX=00000000 EBX=7739cfec ECX=7fd876d0 EDX=fffffffd ESI=7fd876d0 EDI=0294f7b4
EIP=005d15a6 ESP=014af174 EBP=0294f8f0 EFlags=00010202
CS=0000001b SS=00000023 DS=00000023 ES=00000023 FS=0000003b GS=00000000
[Bytes at CS:EIP]
005D1586 02 5E 59 C2 04 00 33 C0 5E 59 C2 04 00 CC CC CC ?^Y???3?^Y??????
005D1596 CC CC CC CC CC CC CC CC CC CC 51 56 8B F1 8B 06 ??????????QV????
005D15A6 F6 40 04 10 75 32 8B 4E 08 85 C9 75 04 33 C0 EB ?@??u2?N???u?3??
005D15B6 08 8B 46 0C 2B C1 C1 F8 02 8B 4E 18 85 C9 75 09 ??F?+?????N???u?
[Bytes at SS:ESP]
014AF174 10 75 D8 7F D0 76 D8 7F 71 E3 5C 00 10 75 D8 7F ?u???v??q?\??u??
014AF184 B0 F7 94 02 5F 0B 57 00 74 61 A4 34 3C F2 4A 01 ????_?W?ta?4<?J?
014AF194 FF FF FF FF 01 01 00 00 B0 F7 94 02 08 F9 94 02 ????????????????
014AF1A4 00 00 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 ????????????????
014AF1B4 00 00 00 00 C8 F2 4A 01 70 B7 77 00 01 00 00 00 ??????J?p?w?????
014AF1C4 B0 42 57 00 24 80 00 00 01 FF FF FF 01 01 00 00 ?BW?$???????????
014AF1D4 FC F1 4A 01 FF FF FF FF B0 F7 94 02 01 01 00 00 ??J?????????????
014AF1E4 24 80 00 00 C8 02 48 00 E0 03 74 00 24 80 00 00 $?????H???t?$???
014AF1F4 FF FF FF FF 01 01 00 00 3C F2 4A 01 00 00 00 00 ????????<?J?????
014AF204 AC F2 4A 01 60 08 5B 01 60 F2 4A 01 00 00 00 00 ??J?`?[?`?J?????
014AF214 E0 03 74 00 24 80 00 00 FF FF FF FF 01 01 00 00 ??t?$???????????
014AF224 00 00 00 00 00 00 00 00 00 00 00 00 24 00 00 00 ????????????$???
014AF234 01 00 00 00 E7 C3 39 77 B0 F7 94 02 00 00 00 00 ??????9w????????
014AF244 FF FF FF FF 01 01 00 00 60 08 5B 01 CD AB BA DC ????????`?[?????
014AF254 00 00 00 00 AC F2 4A 01 60 08 5B 01 D8 F2 4A 01 ??????J?`?[???J?
014AF264 B4 C4 39 77 60 08 5B 01 E0 03 74 00 24 80 00 00 ??9w`?[???t?$???
014AF274 FF FF FF FF 01 01 00 00 00 00 00 00 E0 03 74 00 ??????????????t?
014AF284 02 01 00 00 24 00 00 00 01 00 00 00 00 00 00 00 ????$???????????
014AF294 00 00 00 00 30 00 00 00 FF FF FF FF FF FF FF FF ????0???????????
014AF2A4 6A C4 39 77 00 00 00 00 00 00 00 00 4C F3 4A 01 j?9w????????L?J?
014AF2B4 00 00 00 00 00 00 00 00 00 00 00 00 7C F2 4A 01 ??????????????J?
014AF2C4 A0 ED 4A 01 24 F3 4A 01 27 39 3B 77 D0 C4 39 77 ??J?$?J?'9;w??9w
014AF2D4 00 00 00 00 34 F3 4A 01 98 CA 39 77 00 00 00 00 ????4?J???9w????
014AF2E4 60 08 5B 01 E0 03 74 00 24 80 00 00 FF FF FF FF `?[???t?$???????
014AF2F4 01 01 00 00 5C 85 DB 00 01 00 00 00 00 00 00 00 ????\???????????
014AF304 48 F4 4A 01 02 01 00 00 D0 03 74 00 78 F3 4A 01 H?J???????t?x?J?
014AF314 F8 C4 39 77 00 00 00 00 00 F3 4A 01 A0 ED 4A 01 ??9w??????J???J?
014AF324 6C F3 4A 01 27 39 3B 77 A8 CA 39 77 FF FF FF FF l?J?'9;w??9w????
014AF334 5C F3 4A 01 AA CE 39 77 48 85 DB 00 24 80 00 00 \?J???9wH???$???
014AF344 FF FF FF FF 01 01 00 00 60 08 5B 01 27 39 3B 77 ????????`?[?'9;w
014AF354 00 00 00 00 00 00 00 00 B4 F3 4A 01 AE EC 82 7C ??????????J?????
014AF364 74 F3 4A 01 18 00 00 00 70 FF 4A 01 60 EC 82 7C t?J?????p?J?`???
014AF374 48 85 DB 00 24 80 00 00 FF FF FF FF 01 01 00 00 H???$???????????
014AF384 60 08 5B 01 4D CA 39 77 F4 CB 39 77 29 CC 39 77 `?[?M?9w??9w)?9w
014AF394 48 F4 4A 01 00 00 00 00 00 00 00 00 00 00 00 00 H?J?????????????
014AF3A4 00 00 00 00 C0 63 DA 00 CC E6 FD 7F 00 00 00 00 ?????c??????????
014AF3B4 E0 F3 4A 01 6F CC 39 77 48 F4 4A 01 00 00 00 00 ??J?o?9wH?J?????
014AF3C4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ????????????????
014AF3D4 48 F4 4A 01 2C F4 4A 01 00 00 00 00 01 00 00 00 H?J?,?J?????????
014AF3E4 D3 99 45 00 48 F4 4A 01 00 00 00 00 00 00 00 00 ??E?H?J?????????
014AF3F4 00 00 00 00 00 00 00 00 00 00 00 00 C0 D2 20 01 ????????????????
014AF404 CD BC E6 77 00 00 00 00 E9 DF 45 00 F0 64 A4 34 ???w??????E??d?4
014AF414 00 00 00 00 A0 D0 20 01 B0 FF 4A 01 A0 D0 20 01 ??????????J?????
014AF424 00 F4 4A 01 2C F4 4A 01 50 3E 7A 00 60 F4 22 01 ??J?,?J?P>z?`?"?
014AF434 01 00 00 00 01 00 00 00 60 DD 20 01 01 00 00 00 ????????`???????
014AF444 01 00 00 00 D0 03 74 00 00 21 00 00 00 00 00 00 ??????t??!??????
014AF454 00 00 00 00 DF C5 8D 10 F0 01 00 00 A4 02 00 00 ????????????????
014AF464 EC 39 7A 00 88 01 02 00 64 F4 4A 01 18 0D 00 00 ?9z?????d?J?????
014AF474 00 00 00 00 D0 0F 5B 01 00 00 00 00 00 00 00 00 ??????[?????????
014AF484 61 66 39 77 AA 02 01 00 AC 02 01 00 AE 02 01 00 af9w????????????
014AF494 41 03 01 00 00 00 00 00 00 00 00 00 3C 00 00 00 A???????????<???
014AF4A4 B8 03 00 00 AA 02 00 00 00 00 00 00 00 00 00 00 ????????????????
014AF4B4 50 F9 20 01 08 00 00 00 0F 00 00 00 01 00 00 00 P???????????????
014AF4C4 37 00 00 00 AA 02 00 00 60 E2 20 01 00 00 00 00 7???????`???????
014AF4D4 3C 00 00 00 B8 03 00 00 AA 02 00 00 01 00 00 00 <???????????????
014AF4E4 00 00 00 00 F0 F8 20 01 08 00 00 00 0F 00 00 00 ????????????????
014AF4F4 01 00 00 00 FB FF FF FF B8 03 00 00 20 F9 20 01 ????????????????
014AF504 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ????????????????
014AF514 E4 39 7A 00 A4 39 7A 00 D8 D0 15 00 FF FF FF FF ?9z??9z?????????
014AF524 00 00 00 00 00 00 00 00 00 00 00 00 A0 0F 00 00 ????????????????
014AF534 00 00 00 00 80 D0 20 01 03 00 00 00 00 00 00 00 ????????????????
014AF544 00 00 00 00 9C 39 7A 00 D0 A4 22 01 01 00 00 00 ?????9z???"?????
014AF554 01 00 00 00 60 EA 20 01 68 50 1A 01 01 22 00 00 ????`???hP???"??
014AF564 60 EA 20 01 76 00 00 00 80 00 00 00 68 50 1A 01 `???v???????hP??
[Loaded modules]
0000000000400000 - 0000000000c71fff C:\Program Files\R-Studio\rs_un.bin
000000007c800000 - 000000007c8c1fff C:\WINDOWS\system32\ntdll.dll
0000000077e40000 - 0000000077f42fff C:\WINDOWS\system32\kernel32.dll
0000000071bd0000 - 0000000071be0fff C:\WINDOWS\system32\MPR.dll
0000000077f50000 - 0000000077febfff C:\WINDOWS\system32\ADVAPI32.dll
0000000077c50000 - 0000000077ceefff C:\WINDOWS\system32\RPCRT4.dll
0000000077380000 - 0000000077411fff C:\WINDOWS\system32\USER32.dll
0000000077c00000 - 0000000077c48fff C:\WINDOWS\system32\GDI32.dll
0000000076aa0000 - 0000000076accfff C:\WINDOWS\system32\WINMM.dll
00000000762b0000 - 00000000762f9fff C:\WINDOWS\system32\comdlg32.dll
0000000077420000 - 0000000077522fff C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.2778_x-ww_A8F04F11\COMCTL32.dll
0000000077ba0000 - 0000000077bf9fff C:\WINDOWS\system32\msvcrt.dll
0000000077da0000 - 0000000077df1fff C:\WINDOWS\system32\SHLWAPI.dll
000000007c8d0000 - 000000007d0d3fff C:\WINDOWS\system32\SHELL32.dll
0000000077670000 - 00000000777a3fff C:\WINDOWS\system32\ole32.dll
0000000077d00000 - 0000000077d8bfff C:\WINDOWS\system32\OLEAUT32.dll
0000000071bb0000 - 0000000071bb8fff C:\WINDOWS\system32\WSOCK32.dll
0000000071c00000 - 0000000071c16fff C:\WINDOWS\system32\WS2_32.dll
0000000071bf0000 - 0000000071bf7fff C:\WINDOWS\system32\WS2HELP.dll
0000000073440000 - 0000000073444fff C:\WINDOWS\system32\RICHED32.DLL
0000000048ef0000 - 0000000048f60fff C:\WINDOWS\system32\RICHED20.dll
0000000076b70000 - 0000000076b7afff C:\WINDOWS\system32\psapi.dll
0000000071b70000 - 0000000071ba5fff C:\WINDOWS\system32\UxTheme.dll
0000000075e60000 - 0000000075e86fff C:\WINDOWS\system32\apphelp.dll
00000000777b0000 - 0000000077832fff C:\WINDOWS\system32\CLBCatQ.DLL
000000007c8d0000 - 000000007d0d3fff C:\WINDOWS\system32\SHELL32.dll
0000000000000000 - 0000000000871fff C:\Program Files\R-Studio\rs_un.bin
0000000000000000 - 0000000000871fff C:\Program Files\R-Studio\rs_un.bin
0000000077b70000 - 0000000077b83fff C:\WINDOWS\system32\MSACM32.dll
0000000077b60000 - 0000000077b66fff C:\WINDOWS\system32\midimap.dll
0000000072d40000 - 0000000072d46fff C:\WINDOWS\system32\msadp32.acm
0000000077980000 - 0000000077af4fff C:\WINDOWS\system32\shdocvw.dll
0000000075360000 - 00000000753defff C:\WINDOWS\system32\CRYPTUI.dll
0000000071c40000 - 0000000071c97fff C:\WINDOWS\system32\NETAPI32.dll
0000000076f10000 - 0000000076f3dfff C:\WINDOWS\system32\WLDAP32.dll
0000000077210000 - 00000000772b7fff C:\WINDOWS\system32\WININET.dll
0000000076f50000 - 0000000076f62fff C:\WINDOWS\system32\Secur32.dll
0000000075eb0000 - 0000000075faffff C:\WINDOWS\system32\browseui.dll
0000000076920000 - 00000000769e3fff C:\WINDOWS\system32\USERENV.dll
00000000768e0000 - 00000000768e8fff C:\WINDOWS\system32\LINKINFO.dll
00000000768f0000 - 0000000076914fff C:\WINDOWS\system32\ntshrui.dll
0000000033240000 - 0000000033504fff C:\WINDOWS\system32\xpsp2res.dll
[Thread context information, TID=3840]
[Thread context information, TID=3400]
[Thread context information, TID=2960]
Stack Base=01910000 Stack Limit=0190f000
[Registers]
EAX=c0000017 EBX=0190fdb0 ECX=0190fb64 EDX=7c82ed64 ESI=0190fdb8 EDI=7ffdd000
EIP=7c82ed64 ESP=0190fd64 EBP=0190fe0c EFlags=00000246
CS=0000001b SS=00000023 DS=00000023 ES=00000023 FS=0000003b GS=00000000
[Bytes at CS:EIP]
7C82ED44 00 54 E8 2C 00 00 00 8B 04 24 8B E5 5D C3 8D A4 ?T?,?????$??]???
7C82ED54 24 00 00 00 00 8D A4 24 00 00 00 00 8B D4 0F 34 $??????$???????4
7C82ED64 C3 8D A4 24 00 00 00 00 8D 64 24 00 8D 54 24 08 ???$?????d$??T$?
7C82ED74 CD 2E C3 55 8B EC 8D A4 24 30 FD FF FF 54 E8 B5 ?.?U????$0???T??
[Bytes at SS:ESP]
0190FD64 04 21 82 7C 6B 71 E6 77 03 00 00 00 B0 FD 90 01 ?!??kq?w????????
0190FD74 01 00 00 00 00 00 00 00 00 00 00 00 0C 00 00 00 ????????????????
0190FD84 20 DA 32 01 00 00 00 00 24 00 00 00 01 00 00 00 ??2?????$???????
0190FD94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ????????????????
0190FDA4 00 00 00 00 00 00 00 00 00 00 00 00 34 01 00 00 ????????????4???
0190FDB4 38 01 00 00 3C 01 00 00 30 FA 21 01 20 DA 32 01 8???<???0?!???2?
0190FDC4 0B DB 48 00 04 FE 90 01 34 6D 7E 34 0C 00 00 00 ??H?????4m?4????
0190FDD4 20 DA 32 01 00 D0 FD 7F 00 00 00 00 00 00 00 00 ??2?????????????
0190FDE4 B0 FD 90 01 01 00 00 00 01 00 00 00 03 00 00 00 ????????????????
0190FDF4 80 FD 90 01 20 DA 32 01 94 FE 90 01 F8 B7 E6 77 ??????2????????w
0190FE04 58 72 E6 77 00 00 00 00 28 FE 90 01 95 10 E6 77 Xr?w????(??????w
0190FE14 03 00 00 00 50 FE 90 01 00 00 00 00 FF FF FF FF ????P???????????
0190FE24 00 00 00 00 E2 6C 39 77 A0 EC 48 00 03 00 00 00 ?????l9w??H?????
0190FE34 50 FE 90 01 00 00 00 00 FF FF FF FF 00 00 00 00 P???????????????
0190FE44 98 DD 32 01 D0 FE 90 01 FE FF FF FF 34 01 00 00 ??2?????????4???
0190FE54 38 01 00 00 3C 01 00 00 CE 1C 5A 00 F0 DD 32 01 8???<?????Z???2?
0190FE64 00 00 00 00 88 6E 7E 34 04 20 83 7C 01 00 00 00 ?????n?4????????
0190FE74 01 00 00 00 98 FE 90 01 10 00 11 00 46 80 EC 77 ????????????F??w
0190FE84 00 00 00 00 44 FF 90 01 04 3B 83 7C 00 00 80 7C ????D????;??????
0190FE94 C0 FE 90 01 28 6B 78 00 FF FF FF FF C6 1D 5A 00 ????(kx???????Z?
0190FEA4 00 00 00 00 34 6E 7E 34 00 00 00 00 98 DD 32 01 ????4n?4??????2?
0190FEB4 FE FF FF FF A8 FE 90 01 D8 FC 15 00 F8 FE 90 01 ????????????????
0190FEC4 50 C8 74 00 14 7E 6E 35 00 00 00 00 08 FF 90 01 P?t???n5????????
0190FED4 6D 1E 5A 00 EC 6F 7E 34 00 00 00 00 98 DD 32 01 m?Z??o?4??????2?
0190FEE4 E0 B1 22 01 98 DD 32 01 00 00 00 00 D8 FE 90 01 ??"???2?????????
0190FEF4 74 65 72 00 30 FF 90 01 50 C8 74 00 F4 7F 6E 35 ter?0???P?t???n5
0190FF04 FE FF FF FF 40 FF 90 01 45 09 5A 00 A4 6F 7E 34 ????@???E?Z??o?4
0190FF14 00 00 00 00 E0 B1 22 01 E0 B1 22 01 88 32 4D E2 ??????"???"??2M?
0190FF24 98 DD 32 01 10 FF 90 01 B0 FE 90 01 68 FF 90 01 ??2?????????h???
0190FF34 50 C8 74 00 FC 7C 6E 35 00 00 00 00 78 FF 90 01 P?t???n5????x???
0190FF44 93 0B 5A 00 98 DD 32 01 9C 6F 7E 34 00 00 00 00 ??Z???2??o?4????
0190FF54 E0 B1 22 01 E0 B1 22 01 8C 7D 75 00 4C FF 90 01 ??"???"???u?L???
[Thread context information, TID=2892]
[Thread context information, TID=2184]
[Thread context information, TID=2188]
[Thread context information, TID=3588]
Stack Base=0a7d0000 Stack Limit=0a7cf000
[Registers]
EAX=0074d205 EBX=ffffffff ECX=00000000 EDX=00000000 ESI=00db8548 EDI=00008024
EIP=7c82ed64 ESP=0a7cfd34 EBP=0a7cfd6c EFlags=00000206
CS=0000001b SS=00000023 DS=00000023 ES=00000023 FS=0000003b GS=00000000
[Bytes at CS:EIP]
7C82ED44 00 54 E8 2C 00 00 00 8B 04 24 8B E5 5D C3 8D A4 ?T?,?????$??]???
7C82ED54 24 00 00 00 00 8D A4 24 00 00 00 00 8B D4 0F 34 $??????$???????4
7C82ED64 C3 8D A4 24 00 00 00 00 8D 64 24 00 8D 54 24 08 ???$?????d$??T$?
7C82ED74 CD 2E C3 55 8B EC 8D A4 24 30 FD FF FF 54 E8 B5 ?.?U????$0???T??
[Bytes at SS:ESP]
0A7CFD34 C5 CA 39 77 8B 5D 39 77 E0 03 74 00 24 80 00 00 ??9w?]9w??t?$???
0A7CFD44 FF FF FF FF 01 01 00 00 00 00 00 00 B0 02 00 00 ????????????????
0A7CFD54 00 00 00 00 D8 F9 94 02 24 80 00 00 FF FF FF FF ????????$???????
0A7CFD64 E0 03 74 00 80 2E 32 00 8C FD 7C 0A 35 D0 39 77 ??t??.2?????5?9w
0A7CFD74 48 85 DB 00 24 80 00 00 FF FF FF FF 01 01 00 00 H???$???????????
0A7CFD84 00 00 00 00 70 F6 94 02 01 00 00 00 2F D5 56 00 ????p???????/?V?
0A7CFD94 E0 03 74 00 24 80 00 00 FF FF FF FF 01 01 00 00 ??t?$???????????
0A7CFDA4 98 59 57 00 FF FF FF FF 01 00 00 00 01 00 00 00 ?YW?????????????
0A7CFDB4 B4 F9 94 02 34 FA 94 02 00 00 00 00 B0 F9 94 02 ????4???????????
0A7CFDC4 6F B9 58 00 FF FF FF FF D8 F9 94 02 01 00 00 00 o?X?????????????
0A7CFDD4 01 00 00 00 38 6D 92 3F D0 F8 94 02 70 F6 94 02 ????8m??????p???
0A7CFDE4 14 F3 82 7C 00 00 00 00 65 72 00 01 FF FF FF FF ????????er??????
0A7CFDF4 6F 69 6E 74 00 00 00 00 FD FF FF FF FF FF FF FF oint????????????
0A7CFE04 01 00 00 60 10 75 D8 7F 14 00 00 00 D8 4F 92 1D ???`?u???????O??
0A7CFE14 A0 65 71 C0 E8 E8 ED 81 35 3D 00 00 A4 FD 7C 0A ?eq?????5=??????
0A7CFE24 00 00 00 00 34 FF 7C 0A 70 F6 94 02 00 00 00 00 ????4???p???????
0A7CFE34 94 FE 7C 0A F8 DA 77 00 00 00 00 00 E0 60 57 00 ??????w??????`W?
0A7CFE44 00 00 00 00 60 70 D8 7F D0 FE 7C 0A E0 8D 7D 63 ????`p?????????c
0A7CFE54 C3 63 57 00 00 00 00 00 CE 1C 5A 00 98 70 D8 7F ?cW???????Z??p??
0A7CFE64 00 00 00 00 88 6E 92 3F 04 20 83 7C 01 00 00 00 ?????n??????????
0A7CFE74 01 00 00 00 98 FE 7C 0A 10 00 11 00 46 80 EC 77 ????????????F??w
0A7CFE84 00 00 00 00 44 FF 7C 0A 04 3B 83 7C 00 00 80 7C ????D????;??????
0A7CFE94 C0 FE 7C 0A 28 6B 78 00 FF FF FF FF 46 1D 5A 00 ????(kx?????F?Z?
0A7CFEA4 00 00 00 00 34 6E 92 3F 00 00 00 00 60 70 D8 7F ????4n??????`p??
0A7CFEB4 E0 8D 7D 63 A8 FE 7C 0A C0 29 01 23 F8 FE 7C 0A ???c?????)?#????
0A7CFEC4 50 C8 74 00 34 7E 6E 35 00 00 00 00 08 FF 7C 0A P?t?4?n5????????
0A7CFED4 2D 1E 5A 00 EC 6F 92 3F 00 00 00 00 60 70 D8 7F -?Z??o??????`p??
0A7CFEE4 E0 8D 7D 63 60 70 D8 7F 63 6F 64 65 D8 FE 7C 0A ???c`p??code????
0A7CFEF4 74 65 72 00 30 FF 7C 0A 50 C8 74 00 F4 7F 6E 35 ter?0???P?t???n5
0A7CFF04 FE FF FF FF 40 FF 7C 0A 45 09 5A 00 A4 6F 92 3F ????@???E?Z??o??
0A7CFF14 00 00 00 00 E0 8D 7D 63 E0 8D 7D 63 6E 07 03 B9 ???????c???cn???
0A7CFF24 60 70 D8 7F 10 FF 7C 0A B0 FE 7C 0A 68 FF 7C 0A `p??????????h???
[Heap references]
[Heap@000000000015d0d8]
0015D0D8 00 00 00 00 1C F5 4A 01 98 DE 15 00 98 C9 15 00 ??????J?????????
0015D0E8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ????????????????
[Heap@000000000015de98]
0015DE98 C0 DE 15 00 E0 D0 15 00 00 00 00 00 00 00 00 00 ????????????????
0015DEA8 00 00 00 00 00 00 00 00 ????????
[Heap@000000000015dec0]
0015DEC0 50 DF 15 00 98 DE 15 00 00 00 00 00 00 00 00 00 P???????????????
0015DED0 00 00 00 00 00 00 00 00 ????????
[Heap@000000000015c998]
0015C998 E0 D0 15 00 70 C9 15 00 00 00 00 00 00 00 00 00 ????p???????????
0015C9A8 00 00 00 00 00 00 00 00 ????????
[Heap@000000000015c970]
0015C970 98 C9 15 00 48 C9 15 00 00 00 00 00 00 00 00 00 ????H???????????
0015C980 00 00 00 00 00 00 00 00 ????????
[Heap@000000000015fcd8]
0015FCD8 20 C7 10 03 C0 14 17 00 00 00 28 76 60 10 28 76 ??????????(v`?(v
0015FCE8 00 50 00 00 3E 00 40 00 80 FC 15 00 16 00 18 00 ?P??>?@?????????
0015FCF8 A8 FC 15 00 04 40 0C 80 01 00 00 00 44 62 0F 03 ?????@??????Db??
0015FD08 CC 37 15 00 9F 24 80 3E 00 00 00 00 00 00 00 00 ?7???$?>????????
[Heap@00000000001714c0]
001714C0 D8 FC 15 00 C0 FF 16 00 00 00 0E 77 D6 15 0E 77 ???????????w???w
001714D0 00 A0 10 00 40 00 42 00 60 14 17 00 18 00 1A 00 ????@?B?`???????
001714E0 88 14 17 00 04 40 08 80 01 00 00 00 5C 3B D0 1B ?????@??????\;??
001714F0 0C 39 15 00 D1 77 43 42 00 00 00 00 00 00 00 00 ?9???wCB????????
[Heap@000000000016ffc0]
0016FFC0 C0 14 17 00 A8 00 17 00 00 00 B0 77 00 18 B0 77 ???????????w???w
0016FFD0 00 40 05 00 3A 00 3C 00 68 FF 16 00 12 00 14 00 ?@??:?<?h???????
0016FFE0 90 FF 16 00 04 40 0C 80 01 00 00 00 D4 00 17 00 ?????@??????????
0016FFF0 94 37 16 00 06 78 43 42 00 00 00 00 00 00 00 00 ?7???xCB????????
[Heap@0000000000171460]
00171460 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 C?:?\?W?I?N?D?O?
00171470 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 W?S?\?s?y?s?t?e?
00171480 6D 00 33 00 32 00 5C 00 53 00 45 00 54 00 55 00 m?3?2?\?S?E?T?U?
00171490 50 00 41 00 50 00 49 00 2E 00 64 00 6C 00 6C 00 P?A?P?I?.?d?l?l?
001714A0 00 00 ??
[Heap@00000000001a0018]
001A0018 24 00 49 00 6E 00 6F 00 64 00 65 00 32 00 32 00 $?I?n?o?d?e?2?2?
001A0028 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6???????????????
[Heap@000000000015390c]
0015390C EC 14 17 00 6C 38 15 00 F3 21 58 48 00 00 00 00 ????l8???!XH????
0015391C 00 00 00 00 ????
[Heap@000000000015fc80]
0015FC80 43 00 3A 00 5C 00 57 00 49 00 4E 00 44 00 4F 00 C?:?\?W?I?N?D?O?
0015FC90 57 00 53 00 5C 00 73 00 79 00 73 00 74 00 65 00 W?S?\?s?y?s?t?e?
0015FCA0 6D 00 33 00 32 00 5C 00 4D 00 73 00 69 00 6D 00 m?3?2?\?M?s?i?m?
0015FCB0 67 00 33 00 32 00 2E 00 64 00 6C 00 6C 00 00 00 g?3?2?.?d?l?l???
[Heap@0000000000180016]
00180016 00 00 18 FF 17 00 01 00 00 00 10 00 00 00 01 00 ????????????????
00180026 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ????????????????
00180036 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ????????????????
00180046 00 00 ??
[Heap@00000000001537cc]
001537CC 04 FD 15 00 5C 2F 15 00 5E 78 43 42 00 00 00 00 ????\/??^xCB????
001537DC 00 00 00 00 ????
[Heap@0000000000152f5c]
00152F5C CC 37 15 00 A0 BE 88 7C BE 24 80 3E 00 00 00 00 ?7???????$?>????
00152F6C 00 00 00 00 ????
[Execution information]
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(637DA8AC,4A,0)
TID3352: CFileManager::OpenDrive 0(637DA8AC,4A,0)
TID3352: CFileManagerTabData::ShowDriveFiles(637DA8AC,4A,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(2A5856CC,2E,0)
TID3352: CFileManager::OpenDrive 0(2A5856CC,2E,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(2A5874CC,2E,0)
TID3352: CFileManager::OpenDrive 0(2A5874CC,2E,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(2D62EA4C,2E,0)
TID3352: CFileManager::OpenDrive 0(2D62EA4C,2E,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(2A67FCAC,2E,0)
TID3352: CFileManager::OpenDrive 0(2A67FCAC,2E,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(2A8871BC,2E,0)
TID3352: CFileManager::OpenDrive 0(2A8871BC,2E,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(15BA5BFC,2E,0)
TID3352: CFileManager::OpenDrive 0(15BA5BFC,2E,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(1)
TID3352: CDeviceView::OpenDrive 0(1)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(15BA841C,2E,0)
TID3352: CFileManager::OpenDrive 0(15BA841C,2E,0)
TID3352: CFileManagerTabData::ShowDriveFiles(15BA841C,2E,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CFileManager::OpenDrive 1(1ABD024,2A,0)
TID3352: CFileManager::OpenDrive 0(1ABD024,2A,0)
TID3352: CFileManager::OpenDrive 1(138D13C,2C,0)
TID3352: CFileManager::OpenDrive 0(138D13C,2C,0)
TID3352: CFileManager::OpenDrive 1(1A32764,2B,0)
TID3352: CFileManager::OpenDrive 0(1A32764,2B,0)
TID3352: CFileManager::OpenDrive 1(1ABD024,2A,0)
TID3352: CFileManager::OpenDrive 0(1ABD024,2A,0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(85B15EC,2D,0)
TID3352: CFileManager::OpenDrive 0(85B15EC,2D,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(1AA1864,2C,0)
TID3352: CFileManager::OpenDrive 0(1AA1864,2C,0)
TID3352: CFileManagerTabData::ShowDriveFiles(1AA1864,2C,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(123C44C,2D,0)
TID3352: CFileManager::OpenDrive 0(123C44C,2D,0)
TID3352: CFileManagerTabData::ShowDriveFiles(123C44C,2D,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(25F8024,2A,0)
TID3352: CFileManager::OpenDrive 0(25F8024,2A,0)
TID3352: CFileManagerTabData::ShowDriveFiles(25F8024,2A,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CFileManager::OpenDrive 1(1394024,2B,0)
TID3352: CFileManager::OpenDrive 0(1394024,2B,0)
TID3352: CFileManagerTabData::ShowDriveFiles(1394024,2B,0)
TID3352: CDeviceView::OpenDrive 0(0)
TID3352: CDeviceView::OpenDrive 1(0)
TID3352: CDeviceView::OpenDrive 0(0)

Help would be appreciated. Thanks.

Alt
Site Moderator
Posts: 3129
Joined: Tue Nov 11, 2008 2:13 pm
Contact:

Re: R-Studio for Raid 5 recovery on 4x 2.0 TB WD Share Space

Post by Alt » Mon Aug 24, 2009 10:11 am

Please, contact our tech support. They will request some more information and help you to resolve the problem. Please, provide a reference to this topic.

shong

What does this mean?

Post by shong » Tue Aug 25, 2009 8:33 am

I get this error when opening putting my RAID5 together. It is setup with 1 missing disk and 3 HDD with 2.0 TB, left asynchronous (continuous) with 0 offset and a block size of 64 KB.

Error Parition 8/25/2009 8:13:30AM Virtual Block RAID 1Partition at 2923830 extends beyond disk bounds.

Thanks.

Alt
Site Moderator
Posts: 3129
Joined: Tue Nov 11, 2008 2:13 pm
Contact:

Re: What does this mean?

Post by Alt » Wed Aug 26, 2009 5:41 am

shong wrote:I get this error when opening putting my RAID5 together. It is setup with 1 missing disk and 3 HDD with 2.0 TB, left asynchronous (continuous) with 0 offset and a block size of 64 KB.

Error Parition 8/25/2009 8:13:30AM Virtual Block RAID 1Partition at 2923830 extends beyond disk bounds.

Thanks.
This means that either your created the virtual block RAID with incorrect parameters or the boot sector of your RAID is damaged.
I can't say more without a more deep look into your RAID configuration, data on the disks, etc.

shong

Anyway to find out offsets in LINUX?

Post by shong » Wed Aug 26, 2009 2:49 pm

I was finally able to get more info about the NAS ShareSpace. Turns out that the OS it is made on is LINUX, which makes things harder when trying to find the MBR. However all this work is not going without any fruit.

I am finally able to get some coherent speech coming out of my wav files. However the wav files seem to be skipping from file to file. For example I'd have a file that is on a specific call however about 10 seconds into it, the voices clearly change to what seems like another call that was taking place. Certain pictures are also still broken.

Here is what I was able to find out about some of the parameters:

Raid Type : Raid 5
Disk Order
Block Size : 512K
Block Order : Left Asynchronous

....

The last piece of the puzzle lies in finding the offset of the Raid. If you have any answers or possible ways of finding this out, I'd appreciate it. Thanks for all the support so far.

Alt
Site Moderator
Posts: 3129
Joined: Tue Nov 11, 2008 2:13 pm
Contact:

Re: R-Studio for Raid 5 recovery on 4x 2.0 TB WD Share Space

Post by Alt » Thu Aug 27, 2009 10:07 am

From what you describes it seems that the problem is not in the offset.
Did you check the files that were on one of the recognized partitions or among known file types (Extra Found Files)?
If it is possible, please either post the broken pictures here or send it to my mail.

Alt
Site Moderator
Posts: 3129
Joined: Tue Nov 11, 2008 2:13 pm
Contact:

Re: R-Studio for Raid 5 recovery on 4x 2.0 TB WD Share Space

Post by Alt » Fri Aug 28, 2009 7:42 am

Well, and you need to find z a 16bit value identifying the file system as Ext2/ext3fs. The value is currently fixed to EXT2_SUPER_MAGIC of value 0xEF53.

jazeejeff
Posts: 2
Joined: Wed Sep 29, 2010 5:44 pm

Re: Anyway to find out offsets in LINUX?

Post by jazeejeff » Wed Sep 29, 2010 5:53 pm

shong wrote:I was finally able to get more info about the NAS ShareSpace. Turns out that the OS it is made on is LINUX, which makes things harder when trying to find the MBR. However all this work is not going without any fruit.

I am finally able to get some coherent speech coming out of my wav files. However the wav files seem to be skipping from file to file. For example I'd have a file that is on a specific call however about 10 seconds into it, the voices clearly change to what seems like another call that was taking place. Certain pictures are also still broken.

Here is what I was able to find out about some of the parameters:

Raid Type : Raid 5
Disk Order
Block Size : 512K
Block Order : Left Asynchronous

....

The last piece of the puzzle lies in finding the offset of the Raid. If you have any answers or possible ways of finding this out, I'd appreciate it. Thanks for all the support so far.
Hi shong,

I tried to use the parameters you mentioned but still the files are unrecognised. I suspect I might have ordered the disk wrongly. I have ordered them according to their marking indication on the sharespace box. How did you order your disk when you created the virtual raid5?

I have used the default offset which is 0. Is this correct?

Hope to hear soon, I have been trying this for 2 weeks and still no luck.

The closest I came was recovering text files, word and excel files where unrecognizable when opening them in MS Office.

Post Reply