Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
May 25th, 2009, 13:01
Hello people
Another hard case, an storage from a IBM Server, wich was bad rebuilded, originally the disks , was
1,2,3,4,5,6,7 8kb, Windows 2003 Server
tech support tried to rebuild it using DISK 2 & 7 , they access but without data, then call to us, we were working on there, and we got the original log from the server to check the order, stripe, 8 KB, etc, so we tried to rebuild it using that info, using rstudio get folders but corrupt data, using winhex we got the partition using a configuration like Forward parity, i tried the most combinations , backward parity, backward dinamy, forward, forward dinamyc, etc, and only by backward parity we got the partition but without data using winhex, tried raid reconstructor, nothing, so analyzing the start boot sector should be MFT at , cluster 4, secter per cluster 8, so should be start on sector 32 and the MFT doesnt start here start on sector 95, like i told before the only way were we fnd some data its by RAW, but the client it doesnt usefull, so the problem and my question its to did the bad rebuild they did
DISK 2 XOR DISK 7 = DISK NEW ( 2 & 7 Data)
The original sectors from DISK 2 a& 7 could be modified on this process right? and the new disk has the XOR data, so could be possible apply a reverse algorithm to tried to get the original data meanx:
a XOR between 1 0 result its 1 but if u applied an XNOR between 1 0 u get 0 ,the reverse of a XOR its an XNOR, its possible to applied this algorithm like this to tried to get the original data if was modified?
Regard
Alberto
May 25th, 2009, 15:08
Data extractor RAID would help you

You just need a little thing...beta version
May 25th, 2009, 18:59
you have it ?
is really good ?
May 26th, 2009, 6:16
Some question:
1) DISK 2 & 7 was hot spare?
2) You almost sure about 8kb (16 sectors) size block? (rare configuration)
3) Before they did rebuild, how many drives was used?
Trouble may happen when one of drives is not working a few times and it is involve in rebuilds.
To recovery this Raid you need find right block-size, right rotation parity and when you will reconstruct raid ( for example in WinHex) you may skip bad disc.