Hello people

Another hard case, an storage from a IBM Server, wich was bad rebuilded, originally the disks , was

1,2,3,4,5,6,7 8kb, Windows 2003 Server

tech support tried to rebuild it using DISK 2 & 7 , they access but without data, then call to us, we were working on there, and we got the original log from the server to check the order, stripe, 8 KB, etc, so we tried to rebuild it using that info, using rstudio get folders but corrupt data, using winhex we got the partition using a configuration like Forward parity, i tried the most combinations , backward parity, backward dinamy, forward, forward dinamyc, etc, and only by backward parity we got the partition but without data using winhex, tried raid reconstructor, nothing, so analyzing the start boot sector should be MFT at , cluster 4, secter per cluster 8, so should be start on sector 32 and the MFT doesnt start here start on sector 95, like i told before the only way were we fnd some data its by RAW, but the client it doesnt usefull, so the problem and my question its to did the bad rebuild they did

DISK 2 XOR DISK 7 = DISK NEW ( 2 & 7 Data)

The original sectors from DISK 2 a& 7 could be modified on this process right? and the new disk has the XOR data, so could be possible apply a reverse algorithm to tried to get the original data meanx:

a XOR between 1 0 result its 1 but if u applied an XNOR between 1 0 u get 0 ,the reverse of a XOR its an XNOR, its possible to applied this algorithm like this to tried to get the original data if was modified?

Regard

Alberto

-

_________________
This user was found to be affiliated with Ace Lab/PC-3000. See this topic for details.

Data extractor RAID would help you
You just need a little thing...beta version

_________________
This user was found to be affiliated with Ace Lab/PC-3000. See this topic for details.

you have it ?

is really good ?

_________________
ZeBong
" что случилось в России - останется в России "
" Россия еще раз"

I am not sure this.

Some question:

1) DISK 2 & 7 was hot spare?
2) You almost sure about 8kb (16 sectors) size block? (rare configuration)
3) Before they did rebuild, how many drives was used?

Trouble may happen when one of drives is not working a few times and it is involve in rebuilds.

To recovery this Raid you need find right block-size, right rotation parity and when you will reconstruct raid ( for example in WinHex) you may skip bad disc.