Trying to recover Fasttrak 100 RAID 0+1 MBR Info

[StephenKovacsiss]

The system was working on Friday night, I did a normal shutdown without any errors as I do ever night.  On Saturday morning started the system and the Fasttrak 100 showed a problem with the RAID Array.  I entered the setup to view the array and it showed the two drives on Channel 1 (Primary and Slave) and did not show the two drives on Channel 2.  Here is an overview of the system:

• OS: Windows XP Pro SP3
• File-system: NTFS
• On-board Fasttrak 100 running a RAID 0+1 Array
• Drives: 4 Western Digital WD800JB
• No other internal hard drives

Detailed history leading up to today:

First I used the Fasttrak setup utility to investigate the problem.  I first disconnected the Channel 1 drives and then the Channel 2 drives were showing.  If I would connect just one of the Channel 1 drives, the Channel 2 drives would not be shown.  This lead me to believe that there was a hardware issue.  I came back to it after not being quite sure and found in the available drives, I could see the Channel 2 Drives while the Channel 1 drives were connected.  From here I knew that the MBR for the array was corrupted and it was corrupting the Fasttrak from knowing what was happening.  I decided to deleted the array and rebuild it.  This allowed me to get back to a point where Fasttrak was happy, but Windows was not.  It would not see the array and boot.

I thought that I would use Knoppix to see if it could see the drive.  Booting with Knoppix v5.1 proved to be successful.  I was able to mount the array, see what appeared to be the entire directory structure, and open files that were on the desktop.  I knew that I was really close and that the MBR must be the problem.

Before I found Disk Patch and DIY DataRecovery, I found how to repair the MBR from a Windows XP Recovery Console.  Now I know that was a bad idea, because this is where things went bad.  I was able to boot with the Windows XP SP3 CD and get to a Recovery Console.  The odd part is that it took me right to a C prompt without asking for an installation of Windows to connect to.  This is probably because it could not find it.  Trying to look at the C Drive returned an error, I do not have the exact error, but it could not read anything.  I tried to run the FIXMBR as had been shown and discussed online, but it would not work either.  It told me that there was some disk error also.  Knowing that CHKDSK was available I tried it to see what it returned.  It started and showed a lot of errors and attempted to fix them.  It failed part way in and said that the disk was not recoverable.  I tried the FIXMBR and it worked fine after that.  One of the two mentioned something about a FAT 32 structure and I knew that was not quite right either.  Tried to reboot without success.  I knew it was bad when Knoppix now could not see the file structures.

Last night I found Disk Patch and ran the demo to see what it would find.  When I first run it, it would find the array and show that the MBR was invalid.  I then ran the Repair Partitions tools to see what it would find.  The default would not show it, but if I selected to show illegal and FAT12, it would find a NTFS Partition the size of my original one.  It also showed the boot info backed up.  I thought that this was a good sign, so I decided to buy it and run the full repair.  It worked without a problem, but when I go back to Knoppix to verify, it now cannot even mount the array.

I decided to Undo the changes that were made and start back as far as I can easily go.  I ran a Support Analysis Logfile hoping that you can help me get this back up and running.  I am sure that everything is still there, just not sure how to get to it.

When creating the Support Analysis Log, I also received an error "The State File could not be saved".  Here is the Log Files related to the steps that I took.

Support Analysis Log - After Undo from Repair (Original State)

.../000:03/LOG> ### LOG START ###
.../000:03/LOG> DISKPATCH 3.5.300
.../000:03/LOG> (C) 2000-2009 DIY DataRecovery
.../000:03/LOG> Contact info: http://HTTP://www.DIYDataRecovery.nl
.../000:03/LOG> MemFree: 65Kb
.../000:03/LOG> CommandLineParms: /sup
.../000:03/LOG> LogDate: 02-28-2010
.../000:03/CFG> FilePath="A:DPFILES\"
.../000:03/CFG> ReadRetries="32"
.../000:03/CFG> WriteRetries="32"
.../000:03/CFG> MaxReadErrors="32"
.../000:03/CFG> MaxWriteErrors="1"
.../000:03/CFG> LogEachReadError="1"
.../000:03/CFG> ReadDelay="0"
.../000:03/CFG> VfyFixedBadSect="1"
.../000:03/CFG> CleanAfterDOD="1"
.../000:03/CFG> DiskReset="1"
.../000:03/CFG> SectorSkip="1024"
.../000:03/CFG> AutoSaveState="1"
.../000:03/CFG> DumpFoundSectors="0"
.../000:03/CFG> FixFats="1"
.../000:03/CFG> MaxFatScan="51200"
.../000:03/CFG> MaxDataColEntries="256"
.../000:03/CFG> IgnoreF8FF="0"
.../000:03/CFG> DownSizeExt="1"
.../000:03/CFG> ScanSignature="55AA"
.../000:03/CFG> Rebuild="00"
.../000:03/13H> Ext13H installed test requested
.../000:03/13H> Disk found at 128
.../000:03/13H> Ext13H version: 2.1 / EDD-1.1
.../000:03/13H> Ext13H Support: Extended disk access functions
.../000:03/13H> Drive Interface Info:
.../000:03/13H> Disk 128 X13H data : 19458/255/63 312592770/512
.../000:03/13H> Ext13H tested ok
.../000:03/FDL> DiskList requested
.../000:03/FDL> Disk found at 128
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB_|__GEO
128 | .312592770 | 255 | 63 | 149 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
.../000:04/IAS> AdmiSector on disk 0 (128) not free for DP use, dump follows;
.../000:04/LOG> SectorDump requested at 29 (0 0 30)
###
000   60 89 0D 90 85 46 00 C7 40 60 5E 57 40 00 E9 6E  |  `?.??F.?@`^W@.?n
016   F7 FF FF 8B FF 55 8B EC 81 EC 64 05 00 00 83 3D  |  ?..?.U????d...?=
032   50 6A 43 00 00 A1 BC 65 43 00 53 8B 5D 08 89 45  |  PjC..??eC.S?].?E
048   FC 74 07 33 C0 E9 F8 00 00 00 57 6A 29 53 E8 FD  |  ?t.3???...Wj)S??
064   9D 01 00 8B F8 85 FF 59 59 75 08 6A 0D 58 E9 DE  |  ?...YYu.j.X??
080   00 00 00 56 8B F7 2B F3 8D 46 01 50 8D 45 AC 53  |  ...V??+??F.P?E?S
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   6A 00 8D 45 AC 50 A1 70 60 43 00 C6 44 35 AD 00  |  j.?E?P?p`C.?D5?.
128   FF 50 5C 85 C0 0F 85 A5 00 00 00 8D 85 A4 FA FF  |  .P\??.??...?.
144   FF 50 6A 00 47 57 FF B5 A8 FA FF FF E8 BB F4 FF  |  .Pj.GW....
160   FF 8B F0 85 F6 74 0F FF B5 A8 FA FF FF E8 DD F0  |  .?t....
176   FF FF 8B C6 EB 7A A1 DC 66 43 00 8D B4 05 AB FA  |  ..???z??fC.??.??
192   FF FF 48 F7 D0 23 F0 8D 85 9C FA FF FF 50 68 00  |  ..H??#??..Ph.
208   04 00 00 56 FF B5 A4 FA FF FF E8 F7 F4 FF FF FF  |  ...V......
224   B5 A4 FA FF FF 8B F8 E8 FA F1 FF FF FF B5 A8 FA  |  ..??...
240   FF FF E8 98 F0 FF FF 85 FF 74 04 8B C7 EB 31 0F  |  ....?.t.???1.
256   B7 7E 10 0F B7 5E 02 8D 46 14 03 F8 85 DB 89 85  |  ?~..?^.?F..?
272   A0 FA FF FF 74 17 68 8C 17 43 00 57 E8 13 9C 01  |   ?..t.h?.C.W?.?.
288   00 85 C0 59 59 74 18 83 C7 28 4B 75 E9 6A 04 58  |  .??YYt.??(Ku?j.X
304   5E 5F 8B 4D FC 5B E8 46 B0 01 00 C9 C2 04 00 66  |  ^_?M?[?F?..??..f
320   81 3E F0 01 8B 47 0C A3 50 6A 43 00 8B 4F 14 89  |  ?>?.?G.?PjC.?O.?
336   0D 54 6A 43 00 75 0E 8B 8D A0 FA FF FF 03 41 1C  |  .TjC.u.?? ?...A.
352   A3 50 6A 43 00 33 C0 EB C7 8B FF 55 8B EC 8B 45  |  ?PjC.3???.U???E
368   08 0F B7 50 0C 85 D2 8D 48 10 76 03 8D 0C D1 0F  |  ..?P.??H.v.?.?.
384   B7 40 0E 33 D2 85 C0 56 76 14 8B 75 0C 39 31 74  |  ?@.3??Vv.?u.91t
400   14 83 FE FF 74 0F 83 C1 08 42 3B D0 72 EF 33 C0  |  .??.t.??.B;?r?3?
416   5E 5D C2 0C 00 8B 41 04 25 FF FF FF 7F 03 45 10  |  ^]?..?A.%....E.
432   EB EE 8B FF 55 8B EC FF 75 08 E8 9D 7C 01 00 85  |  .U??.u.??|..?
448   C0 75 08 6A 04 58 E9 9E 00 00 00 0F B7 48 14 53  |  ?u.j.X??....?H.S
464   0F B7 58 06 56 57 8D 7C 01 18 EB 15 68 8C 17 43  |  .?X.VW?|..?.h?.C
480   00 57 E8 4D 9B 01 00 85 C0 59 59 74 0A 4B 83 C7  |  .W?M?..??YYt.K??
496   28 85 DB 75 E7 EB 10 8B 77 14 03 75 08 85 DB 8B  |  (??u??.?w..u.??
###
.../000:04/WAS> AdmiSectors in use : 0-
.../000:04/KEY> DEMO/1
.../000:04/PFC> PQstuff signature not detected on disk 0 (128)
.../000:04/PFC> UDMA driver not loaded
.../000:05/PFC> Disk health 50-100
.../000:05/PFC> Disk Overlay or Bootmanager found on disk 0 (128), type is 55
.../000:05/PFC> Disk Overlay or Bootmanager found on disk 0 (128), type is 55
.../000:06/PFC> Partition State backup not found on disk 0 (128)
.../000:06/PFC> No Repair date found on disk 0 (128)
.../000:17/CSD> Start CheckDisk for disk 0 (128)
.../000:17/CSD> CheckDisk complete, ReadErrors 0
.../000:17/USD> Disk 0 (128) selected
.../000:17/GSC> AdmiSector not in use
.../000:17/GSC> AdmiSector not in use
128/000:17/USD> MBR for disk 0 (128)
128/000:17/LOG> SectorDump requested at 0 (0 0 1)
###
000   40 72 C3 5F 5E 5B C2 04 00 8B FF 55 8B EC 83 EC  |  @r?_^[?..?.U?
016   10 8B 45 0C 8B 40 60 8B 4D 14 53 56 8B 70 04 8D  |  .?E.?@`?M.SV?p.?
032   41 44 89 45 FC 8B 45 10 89 41 3C 8B 46 0C C1 E8  |  AD?E??E.?A<?F.??
048   07 24 01 88 45 F8 8B 46 10 33 DB 85 C0 76 3E 57  |  .$.?E??F.3??v>W
064   FF 75 F8 8B 7D FC 2B C3 83 C7 04 89 07 8B 46 18  |  .u??}?+Ã?.?.?F.
080   57 03 C3 50 FF 75 10 8B 45 0C FF 70 04 6A 00 E8  |  W.?P.u.?E..p.j.?
096   43 89 00 00 8B 4D FC 03 1F 83 45 FC 08 89 01 8B  |  C?..?M?..?E?.?.?
112   46 10 3B D8 89 55 F4 72 C7 8B 4D 14 5F 8B 46 14  |  F.;?U?r?M._?F.
128   FF 75 08 89 41 30 8B 45 0C 89 41 08 E8 A9 F4 FF  |  .u.?A0?E.?A..
144   FF 6A 03 58 5E 5B C9 C2 10 00 8B FF 55 8B EC 53  |  .j.X^[??..?.U??S
160   8B 5D 0C 8B 43 60 56 8B 70 04 8B 45 08 57 8B 78  |  ?].?C`V?p.?E.W?x
176   28 83 BF 84 00 00 00 00 74 39 83 7E 28 00 74 0E  |  (....t9?~(.t.
192   8B 87 90 00 00 00 3B 86 00 01 00 00 76 25 8D 87  |  ...;?....v%??
208   88 00 00 00 8B 08 89 4E 28 8B 8F 90 00 00 00 01  |  ?...?.?N(....
224   08 89 8E 00 01 00 00 8B 00 3B 47 7C 76 05 E8 59  |  .??....?.;G|v.?Y
240   B7 01 00 33 C0 8A 46 06 50 57 E8 D9 F5 FF FF F6  |  ?..3??F.PW???..?
256   46 0C C0 74 33 80 7F 65 00 74 2D 8B 4E 18 8B 56  |  F.?t3?e.t-?N.?V
272   10 81 E1 FF 0F 00 00 50 8D 8C 11 FF 0F 00 00 68  |  .??....P??.....h
288   49 21 40 00 C1 E9 0C 51 FF 75 08 89 48 40 FF 77  |  I!@.??.Q.u.?H@.w
304   08 E8 02 88 00 00 EB 11 8B 4E 14 FF 75 08 89 48  |  .?.?..?.?N..u.?H
320   30 89 58 08 E8 F1 F3 FF FF 5F 5E 5B 5D C2 08 00  |  0?X..._^[]?..
336   8B FF 55 8B EC 8B 45 0C 53 8B 58 28 F6 43 38 10  |  ?.U???E.S?X(?C8.
352   56 57 74 2B 8B 43 0C 8B 48 0C 8B 40 24 C1 E9 07  |  VWt+?C.?H.?@$??.
368   81 E1 01 FF FF FF 51 FF 73 14 FF 73 10 FF 73 04  |  ??....Q.s..s..s.
384   FF 70 04 FF 73 08 E8 84 8A 00 00 83 63 38 EF F6  |  .p..s.?..?c8??
400   43 38 20 0F 84 8F 00 00 00 8D 73 40 8B 06 8B 48  |  C8 .??...?s@?.?H
416   0C 8B 40 24 C1 E9 07 81 E1 01 FF FF FF 51 8D 4B  |  .?@$??.??....Q?K
432   48 51 FF 73 44 FF 73 04 FF 70 04 FF 73 08 E8 E4  |  HQ.sD.s..p..s.??
448   87 00 00 83 63 38 DF 80 4B 35 10 8D 7B 0C A5 A5  |  ?..?c8?K5.?{.??
464   A5 EB 55 8B 53 3C 8B 42 60 8B 70 04 33 C0 8A 46  |  ??U?S<?B`?p.3??F
480   06 89 55 10 50 53 E8 ED F4 FF FF 8B F8 85 FF 8B  |  .?U.PS???...?
496   42 60 8B 40 0C 89 43 3C 75 3B C7 42 18 01 00 00  |  B`?@.?C<u;?B....
###
128/000:19/VEC> Start Verify EPBR Chain for disk 0 (128)
128/000:19/VEC> Listing current partitions on disk:
128/000:19/VEC> No partitions found
128/000:19/VEC> Extended starts at 4294241768 (267304 47 48)
128/000:19/RDS> Read past EOD intercept for disk 128 at 4294241768 (267304 47 48)
128/000:19/VEC> Partition Table info for sector 0 (0 0 1)
128/000:19/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 .232 | ..00 | ..512.228...7 | ..312.131..35 | .894140639 | .209423632
..2 .165 | ..55 | ..747.165..37 | ..316.139..19 | 2338341515 | 3224568944
..3 .138 | ..55 | ..137..70...6 | ..339..16..16 | 4294241768 | 2247658495
..4 .255 | ..8B | ..352.139...2 | ..137..64..12 | .997538883 | ..18367175
128/000:20/VEC> 55AA sig not found
128/000:20/RDS> Read past EOD intercept for disk 128 at 4294241768 (267304 47 48)
128/000:20/VEC> Partition Table info for sector 4294241768 (267304 47 48)
128/000:20/LOG> PartListDump requested at 4294241768 (267304 47 48)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/000:20/VEC> 55AA sig not found
128/000:20/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
128/000:20/LOG> Boot sector dump requested at 997538883 (62093 235 34)
### BootSectorDump for BStype FAT32
...........Jump Code (hex): 000000
............OEM Name (txt): ........
....Bytes per Sector (dec): 0
.Sectors per Cluster (dec): 0
....Reserved Sectors (dec): 0
...........FAT count (dec): 0
....Root Entry Count (dec): 0
..Total Sectors (16) (dec): 0
....Media Descriptor (hex): 00
.......FAT Size (16) (dec): 0
...Sectors per Track (dec): 0
.....Heads per Track (dec): 0
......Hidden Sectors (dec): 0
..Total Sectors (32) (dec): 0
.......FAT Size (32) (dec): 0
......Extended Flags (hex): 0000
.............Version (hex): 0000
........Root Cluster (dec): 0
.............FS Info (dec): 0
...........Backup BS (dec): 0
............Reserved (hex): 000000000000000000000000
........Drive Number (hex): 00
............Reserved (hex): 00
......Boot Signature (hex): 00
...........Volume ID (hex): 00000000
........Volume Label (txt):
..Filesystem Type ID (txt):         
....Sector Signature (hex): 0000
128/000:20/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
1st FAT not found at      : 997538883 (62093 235 34)
128/000:20/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
2nd FAT not found at      : 997538883 (62093 235 34)
128/000:20/CF8> FAT sectors are equal
128/000:20/LOG> RootSector number not valid, no dump
128/000:20/RDS> Read past EOD intercept for disk 128 at 997538889 (62093 235 40)
128/000:20/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
128/000:20/VEC> BS and BBS equal
128/000:20/VEC> Verify EPBR Chain completed
128/000:21/USD> Select disk completed
128/000:21/SCN> DiskScan requested, ScanType is 3
128/000:21/SCN> from 0 (0 0 1) to 312592769 (19457 254 63), 312592770 sectors
128/000:21/SCN> Starting QuickScan (pre-vista) at 63 (0 1 1)
128/000:21/SCN> Next QuickScan location at 20802 (1 75 13)
128/000:22/SCN> Next QuickScan location at 0 (0 0 1)
128/000:22/SCN> QuickScan finished
128/000:22/SCN> Starting SmartScan (pre-vista) at 0 (0 0 1) (JMP=16065, RNG=63)
128/010:46/SCN> SmartScan finished
128/010:46/SCN> DiskScan completed
128/010:46/SCN> ReadErrors for disk 0 (128): 0
128/034:33/LOG> DataCollection items found: 3 / 1
### DATACOLLECTION.ARRAY, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 128 | ........63 | ..FAT12 | ..BS | ........63 | .....20739 | PRI | .
002 | 128 | ........63 | ..FAT12 | ..BS | ........63 | .....20739 | PRI | I
003 | 128 | .312592769 | ...NTFS | .BBS | ........63 | .312592707 | PRI | .
128/034:34/LOG> DataCollection items found: 3 / 1
### DATACOLLECTION.ARRAY, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 128 | ........63 | ..FAT12 | ..BS | ........63 | .....20739 | PRI
003 | 128 | .312592769 | ...NTFS | .BBS | ........63 | .312592707 | PRI
128/034:34/LOG> PartList items created: 2
### PARTLIST.ARRAY ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ..FAT12 | ... | ..1 | ..0 | ... | ..1 | ..1 | ..1 | 1 | ...
002 | ...NTFS | ... | ... | ..3 | ..0 | ..3 | ..3 | ..3 | 1 | ..B
### PARTLIST.ARRAY.INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ..FAT12 | ........63 | .....20739 | .....20801 | PRI | ... | ..X
002 | ...NTFS | ........63 | .312592707 | .312592769 | PRI | ..B | ..X
128/034:34/SST> SaveState requested for disk 0 (128)
128/034:34/SST> AdmiSector not in use for disk 0 (128), SaveState aborted
128/051:40/EXE> Analysis complete
128/051:42/LOG> RunTime: 051:42
128/051:42/LOG> ### CLOSE LOG ###


Log file After the Repair I attempted

.../000:03/LOG> ### LOG START ###
.../000:03/LOG> DISKPATCH 3.5.300
.../000:03/LOG> (C) 2000-2009 DIY DataRecovery
.../000:03/LOG> Contact info: http://HTTP://www.DIYDataRecovery.nl
.../000:03/LOG> MemFree: 65Kb
.../000:03/LOG> CommandLineParms:
.../000:03/LOG> LogDate: 02-28-2010
.../000:03/CFG> FilePath="A:DPFILES\"
.../000:03/CFG> ReadRetries="32"
.../000:03/CFG> WriteRetries="32"
.../000:03/CFG> MaxReadErrors="32"
.../000:03/CFG> MaxWriteErrors="1"
.../000:03/CFG> LogEachReadError="1"
.../000:03/CFG> ReadDelay="0"
.../000:03/CFG> VfyFixedBadSect="1"
.../000:03/CFG> CleanAfterDOD="1"
.../000:03/CFG> DiskReset="1"
.../000:03/CFG> SectorSkip="1024"
.../000:03/CFG> AutoSaveState="1"
.../000:03/CFG> DumpFoundSectors="0"
.../000:03/CFG> FixFats="1"
.../000:03/CFG> MaxFatScan="51200"
.../000:03/CFG> MaxDataColEntries="256"
.../000:03/CFG> IgnoreF8FF="0"
.../000:03/CFG> DownSizeExt="1"
.../000:03/CFG> ScanSignature="55AA"
.../000:03/CFG> Rebuild="00"
.../000:03/13H> Ext13H installed test requested
.../000:03/13H> Disk found at 128
.../000:03/13H> Ext13H version: 2.1 / EDD-1.1
.../000:03/13H> Ext13H Support: Extended disk access functions
.../000:03/13H> Drive Interface Info:
.../000:03/13H> Disk 128 X13H data : 19458/255/63 312592770/512
.../000:03/13H> Ext13H tested ok
.../000:03/FDL> DiskList requested
.../000:03/FDL> Disk found at 128
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB_|__GEO
128 | .312592770 | 255 | 63 | 149 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
.../000:03/IAS> AdmiSector on disk 0 (128) not free for DP use, dump follows;
.../000:03/LOG> SectorDump requested at 29 (0 0 30)
###
000   60 89 0D 90 85 46 00 C7 40 60 5E 57 40 00 E9 6E  |  `?.??F.?@`^W@.?n
016   F7 FF FF 8B FF 55 8B EC 81 EC 64 05 00 00 83 3D  |  ?..?.U????d...?=
032   50 6A 43 00 00 A1 BC 65 43 00 53 8B 5D 08 89 45  |  PjC..??eC.S?].?E
048   FC 74 07 33 C0 E9 F8 00 00 00 57 6A 29 53 E8 FD  |  ?t.3???...Wj)S??
064   9D 01 00 8B F8 85 FF 59 59 75 08 6A 0D 58 E9 DE  |  ?...YYu.j.X??
080   00 00 00 56 8B F7 2B F3 8D 46 01 50 8D 45 AC 53  |  ...V??+??F.P?E?S
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   6A 00 8D 45 AC 50 A1 70 60 43 00 C6 44 35 AD 00  |  j.?E?P?p`C.?D5?.
128   FF 50 5C 85 C0 0F 85 A5 00 00 00 8D 85 A4 FA FF  |  .P\??.??...?.
144   FF 50 6A 00 47 57 FF B5 A8 FA FF FF E8 BB F4 FF  |  .Pj.GW....
160   FF 8B F0 85 F6 74 0F FF B5 A8 FA FF FF E8 DD F0  |  .?t....
176   FF FF 8B C6 EB 7A A1 DC 66 43 00 8D B4 05 AB FA  |  ..???z??fC.??.??
192   FF FF 48 F7 D0 23 F0 8D 85 9C FA FF FF 50 68 00  |  ..H??#??..Ph.
208   04 00 00 56 FF B5 A4 FA FF FF E8 F7 F4 FF FF FF  |  ...V......
224   B5 A4 FA FF FF 8B F8 E8 FA F1 FF FF FF B5 A8 FA  |  ..??...
240   FF FF E8 98 F0 FF FF 85 FF 74 04 8B C7 EB 31 0F  |  ....?.t.???1.
256   B7 7E 10 0F B7 5E 02 8D 46 14 03 F8 85 DB 89 85  |  ?~..?^.?F..?
272   A0 FA FF FF 74 17 68 8C 17 43 00 57 E8 13 9C 01  |   ?..t.h?.C.W?.?.
288   00 85 C0 59 59 74 18 83 C7 28 4B 75 E9 6A 04 58  |  .??YYt.??(Ku?j.X
304   5E 5F 8B 4D FC 5B E8 46 B0 01 00 C9 C2 04 00 66  |  ^_?M?[?F?..??..f
320   81 3E F0 01 8B 47 0C A3 50 6A 43 00 8B 4F 14 89  |  ?>?.?G.?PjC.?O.?
336   0D 54 6A 43 00 75 0E 8B 8D A0 FA FF FF 03 41 1C  |  .TjC.u.?? ?...A.
352   A3 50 6A 43 00 33 C0 EB C7 8B FF 55 8B EC 8B 45  |  ?PjC.3???.U???E
368   08 0F B7 50 0C 85 D2 8D 48 10 76 03 8D 0C D1 0F  |  ..?P.??H.v.?.?.
384   B7 40 0E 33 D2 85 C0 56 76 14 8B 75 0C 39 31 74  |  ?@.3??Vv.?u.91t
400   14 83 FE FF 74 0F 83 C1 08 42 3B D0 72 EF 33 C0  |  .??.t.??.B;?r?3?
416   5E 5D C2 0C 00 8B 41 04 25 FF FF FF 7F 03 45 10  |  ^]?..?A.%....E.
432   EB EE 8B FF 55 8B EC FF 75 08 E8 9D 7C 01 00 85  |  .U??.u.??|..?
448   C0 75 08 6A 04 58 E9 9E 00 00 00 0F B7 48 14 53  |  ?u.j.X??....?H.S
464   0F B7 58 06 56 57 8D 7C 01 18 EB 15 68 8C 17 43  |  .?X.VW?|..?.h?.C
480   00 57 E8 4D 9B 01 00 85 C0 59 59 74 0A 4B 83 C7  |  .W?M?..??YYt.K??
496   28 85 DB 75 E7 EB 10 8B 77 14 03 75 08 85 DB 8B  |  (??u??.?w..u.??
###
.../000:04/WAS> AdmiSectors in use : 0-
.../000:28/WAS> AdmiSectors in use : 0-
.../000:29/KEY> 1812O9O191/4
.../000:29/PFC> PQstuff signature not detected on disk 0 (128)
.../000:29/PFC> UDMA driver not loaded
.../000:29/PFC> Disk health 50-100
.../000:30/PFC> Disk Overlay or Bootmanager found on disk 0 (128), type is 55
.../000:30/PFC> Disk Overlay or Bootmanager found on disk 0 (128), type is 55
.../000:32/PFC> Partition State backup not found on disk 0 (128)
.../000:32/PFC> No Repair date found on disk 0 (128)
.../000:36/MNU> - Main, Select Disk
.../000:39/CSD> Start CheckDisk for disk 0 (128)
.../000:40/CSD> CheckDisk complete, ReadErrors 0
.../000:40/USD> Disk 0 (128) selected
.../000:40/GSC> AdmiSector not in use
.../000:40/GSC> AdmiSector not in use
128/000:40/USD> MBR for disk 0 (128)
128/000:40/LOG> SectorDump requested at 0 (0 0 1)
###
000   40 72 C3 5F 5E 5B C2 04 00 8B FF 55 8B EC 83 EC  |  @r?_^[?..?.U?
016   10 8B 45 0C 8B 40 60 8B 4D 14 53 56 8B 70 04 8D  |  .?E.?@`?M.SV?p.?
032   41 44 89 45 FC 8B 45 10 89 41 3C 8B 46 0C C1 E8  |  AD?E??E.?A<?F.??
048   07 24 01 88 45 F8 8B 46 10 33 DB 85 C0 76 3E 57  |  .$.?E??F.3??v>W
064   FF 75 F8 8B 7D FC 2B C3 83 C7 04 89 07 8B 46 18  |  .u??}?+Ã?.?.?F.
080   57 03 C3 50 FF 75 10 8B 45 0C FF 70 04 6A 00 E8  |  W.?P.u.?E..p.j.?
096   43 89 00 00 8B 4D FC 03 1F 83 45 FC 08 89 01 8B  |  C?..?M?..?E?.?.?
112   46 10 3B D8 89 55 F4 72 C7 8B 4D 14 5F 8B 46 14  |  F.;?U?r?M._?F.
128   FF 75 08 89 41 30 8B 45 0C 89 41 08 E8 A9 F4 FF  |  .u.?A0?E.?A..
144   FF 6A 03 58 5E 5B C9 C2 10 00 8B FF 55 8B EC 53  |  .j.X^[??..?.U??S
160   8B 5D 0C 8B 43 60 56 8B 70 04 8B 45 08 57 8B 78  |  ?].?C`V?p.?E.W?x
176   28 83 BF 84 00 00 00 00 74 39 83 7E 28 00 74 0E  |  (....t9?~(.t.
192   8B 87 90 00 00 00 3B 86 00 01 00 00 76 25 8D 87  |  ...;?....v%??
208   88 00 00 00 8B 08 89 4E 28 8B 8F 90 00 00 00 01  |  ?...?.?N(....
224   08 89 8E 00 01 00 00 8B 00 3B 47 7C 76 05 E8 59  |  .??....?.;G|v.?Y
240   B7 01 00 33 C0 8A 46 06 50 57 E8 D9 F5 FF FF F6  |  ?..3??F.PW???..?
256   46 0C C0 74 33 80 7F 65 00 74 2D 8B 4E 18 8B 56  |  F.?t3?e.t-?N.?V
272   10 81 E1 FF 0F 00 00 50 8D 8C 11 FF 0F 00 00 68  |  .??....P??.....h
288   49 21 40 00 C1 E9 0C 51 FF 75 08 89 48 40 FF 77  |  I!@.??.Q.u.?H@.w
304   08 E8 02 88 00 00 EB 11 8B 4E 14 FF 75 08 89 48  |  .?.?..?.?N..u.?H
320   30 89 58 08 E8 F1 F3 FF FF 5F 5E 5B 5D C2 08 00  |  0?X..._^[]?..
336   8B FF 55 8B EC 8B 45 0C 53 8B 58 28 F6 43 38 10  |  ?.U???E.S?X(?C8.
352   56 57 74 2B 8B 43 0C 8B 48 0C 8B 40 24 C1 E9 07  |  VWt+?C.?H.?@$??.
368   81 E1 01 FF FF FF 51 FF 73 14 FF 73 10 FF 73 04  |  ??....Q.s..s..s.
384   FF 70 04 FF 73 08 E8 84 8A 00 00 83 63 38 EF F6  |  .p..s.?..?c8??
400   43 38 20 0F 84 8F 00 00 00 8D 73 40 8B 06 8B 48  |  C8 .??...?s@?.?H
416   0C 8B 40 24 C1 E9 07 81 E1 01 FF FF FF 51 8D 4B  |  .?@$??.??....Q?K
432   48 51 FF 73 44 FF 73 04 FF 70 04 FF 73 08 E8 E4  |  HQ.sD.s..p..s.??
448   87 00 00 83 63 38 DF 80 4B 35 10 8D 7B 0C A5 A5  |  ?..?c8?K5.?{.??
464   A5 EB 55 8B 53 3C 8B 42 60 8B 70 04 33 C0 8A 46  |  ??U?S<?B`?p.3??F
480   06 89 55 10 50 53 E8 ED F4 FF FF 8B F8 85 FF 8B  |  .?U.PS???...?
496   42 60 8B 40 0C 89 43 3C 75 3B C7 42 18 01 00 00  |  B`?@.?C<u;?B....
###
128/000:40/VEC> Start Verify EPBR Chain for disk 0 (128)
128/000:40/VEC> Listing current partitions on disk:
128/000:41/VEC> No partitions found
128/000:41/VEC> Extended starts at 4294241768 (267304 47 48)
128/000:41/RDS> Read past EOD intercept for disk 128 at 4294241768 (267304 47 48)
128/000:41/VEC> Partition Table info for sector 0 (0 0 1)
128/000:41/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 .232 | ..00 | ..512.228...7 | ..312.131..35 | .894140639 | .209423632
..2 .165 | ..55 | ..747.165..37 | ..316.139..19 | 2338341515 | 3224568944
..3 .138 | ..55 | ..137..70...6 | ..339..16..16 | 4294241768 | 2247658495
..4 .255 | ..8B | ..352.139...2 | ..137..64..12 | .997538883 | ..18367175
128/000:41/VEC> 55AA sig not found
128/000:41/RDS> Read past EOD intercept for disk 128 at 4294241768 (267304 47 48)
128/000:41/VEC> Partition Table info for sector 4294241768 (267304 47 48)
128/000:41/LOG> PartListDump requested at 4294241768 (267304 47 48)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/000:41/VEC> 55AA sig not found
128/000:41/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
128/000:41/LOG> Boot sector dump requested at 997538883 (62093 235 34)
### BootSectorDump for BStype FAT32
...........Jump Code (hex): 000000
............OEM Name (txt): ........
....Bytes per Sector (dec): 0
.Sectors per Cluster (dec): 0
....Reserved Sectors (dec): 0
...........FAT count (dec): 0
....Root Entry Count (dec): 0
..Total Sectors (16) (dec): 0
....Media Descriptor (hex): 00
.......FAT Size (16) (dec): 0
...Sectors per Track (dec): 0
.....Heads per Track (dec): 0
......Hidden Sectors (dec): 0
..Total Sectors (32) (dec): 0
.......FAT Size (32) (dec): 0
......Extended Flags (hex): 0000
.............Version (hex): 0000
........Root Cluster (dec): 0
.............FS Info (dec): 0
...........Backup BS (dec): 0
............Reserved (hex): 000000000000000000000000
........Drive Number (hex): 00
............Reserved (hex): 00
......Boot Signature (hex): 00
...........Volume ID (hex): 00000000
........Volume Label (txt):
..Filesystem Type ID (txt):         
....Sector Signature (hex): 0000
128/000:41/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
1st FAT not found at      : 997538883 (62093 235 34)
128/000:41/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
2nd FAT not found at      : 997538883 (62093 235 34)
128/000:41/CF8> FAT sectors are equal
128/000:41/LOG> RootSector number not valid, no dump
128/000:41/RDS> Read past EOD intercept for disk 128 at 997538889 (62093 235 40)
128/000:41/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
128/000:41/VEC> BS and BBS equal
128/000:41/VEC> Verify EPBR Chain completed
128/000:42/USD> Select disk completed
128/000:52/MNU> - Main, Repairs
128/000:54/MNU> - Repair, Rebuild Partition Tables
128/000:55/SCN> DiskScan requested, ScanType is 1
128/000:55/SCN> from 0 (0 0 1) to 312592769 (19457 254 63), 312592770 sectors
128/000:55/SCN> Starting QuickScan (pre-vista) at 63 (0 1 1)
128/000:55/SCN> Next QuickScan location at 20802 (1 75 13)
128/000:56/SCN> Next QuickScan location at 0 (0 0 1)
128/000:56/SCN> QuickScan finished
128/000:56/SCN> DiskScan completed
128/000:56/SCN> ReadErrors for disk 0 (128): 0
128/000:57/LOG> DataCollection items found: 2 / 0
### DATACOLLECTION.ARRAY, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 128 | ........63 | ..FAT12 | ..BS | ........63 | .....20739 | PRI | .
002 | 128 | .312592769 | ...NTFS | .BBS | ........63 | .312592707 | PRI | .
128/000:58/LOG> DataCollection items found: 2 / 0
### DATACOLLECTION.ARRAY, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 128 | ........63 | ..FAT12 | ..BS | ........63 | .....20739 | PRI
002 | 128 | .312592769 | ...NTFS | .BBS | ........63 | .312592707 | PRI
128/000:58/LOG> PartList items created: 2
### PARTLIST.ARRAY ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ..FAT12 | ... | ..1 | ..0 | ... | ..1 | ..1 | ..1 | 1 | ...
002 | ...NTFS | ... | ... | ..2 | ..0 | ..2 | ..2 | ..2 | 1 | ..B
### PARTLIST.ARRAY.INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ..FAT12 | ........63 | .....20739 | .....20801 | PRI | ... | ..X
002 | ...NTFS | ........63 | .312592707 | .312592769 | PRI | ..B | ..X
128/000:58/EXE> Partially scanned disk, StateFile not saved
128/001:22/MRL> User select partition 2 for Repair
128/001:45/UND> New Undo archive created for disk 0 (128)
128/001:45/LOG> Undo settings: GL(+) DE(+) FAT(+)
128/001:45/PTR> MBR PTEs wiped (patch)
128/001:46/RSQ> Start Recreate Primary Partition Table Entries
128/001:47/CPE> PTE (MBR) created for PartList entry 2 at 0 (0 0 1)
128/001:47/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..07 | ....0...1...1 | .1023.254..63 | ........63 | .312592707
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/001:48/RSQ> Start Reconnecting Extended/Logicals Partitions
128/001:48/RCL> No logicals, PTE repair ends
128/001:49/RSQ> Start Sorting MBR Entries
128/001:49/CPE> MBR PTE sorting completed
128/001:49/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..07 | ....0...1...1 | .1023.254..63 | ........63 | .312592707
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/001:51/RSQ> Start Simple BS Repair
128/001:51/SBF> -BS/+BBS for NTFS PartList entry 2
128/001:53/SBF> BBS (312592769) restored to BS (63) for NTFS PartList entry 2
128/001:53/WAS> AdmiSectors in use : 0-
128/001:53/RSQ> RSQ completed
128/002:00/UND> Undo archive saved
128/002:01/EXE> VfyEpbrChain requested for Post-Repair Analysis
128/002:01/VEC> Start Verify EPBR Chain for disk 0 (128)
128/002:01/VEC> Listing current partitions on disk:
128/002:01/VEC>     NTFS (P)                       63   312592707     (149 Gb)
128/002:02/VEC> Partition Table info for sector 0 (0 0 1)
128/002:02/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..07 | ....0...1...1 | .1023.254..63 | ........63 | .312592707
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/002:02/VEC> 55AA sig Ok
128/002:02/LOG> Boot sector dump requested at 63 (0 1 1)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 63
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 312592706
........MFT Location (dec): 13024696
.MFT Mirror Location (dec): 19749803
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): AAB4EBEDB4EBB9C9
........Volume Label (txt):
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
128/002:02/VEC> BS and BBS equal
128/002:02/VEC> Verify EPBR Chain completed
128/002:08/MNU> - Main, MBR ops
128/003:46/MNU> - Main, Quit
128/003:46/LOG> RunTime: 003:46
128/003:46/LOG> ### CLOSE LOG ###


Log file after the Undo was completed

.../000:03/LOG> ### LOG START ###
.../000:03/LOG> DISKPATCH 3.5.300
.../000:03/LOG> (C) 2000-2009 DIY DataRecovery
.../000:03/LOG> Contact info: http://HTTP://www.DIYDataRecovery.nl
.../000:03/LOG> MemFree: 65Kb
.../000:03/LOG> CommandLineParms: /sup
.../000:03/LOG> LogDate: 02-28-2010
.../000:03/CFG> FilePath="A:DPFILES\"
.../000:03/CFG> ReadRetries="32"
.../000:03/CFG> WriteRetries="32"
.../000:03/CFG> MaxReadErrors="32"
.../000:03/CFG> MaxWriteErrors="1"
.../000:03/CFG> LogEachReadError="1"
.../000:04/CFG> ReadDelay="0"
.../000:04/CFG> VfyFixedBadSect="1"
.../000:04/CFG> CleanAfterDOD="1"
.../000:04/CFG> DiskReset="1"
.../000:04/CFG> SectorSkip="1024"
.../000:04/CFG> AutoSaveState="1"
.../000:04/CFG> DumpFoundSectors="0"
.../000:04/CFG> FixFats="1"
.../000:04/CFG> MaxFatScan="51200"
.../000:04/CFG> MaxDataColEntries="256"
.../000:04/CFG> IgnoreF8FF="0"
.../000:04/CFG> DownSizeExt="1"
.../000:04/CFG> ScanSignature="55AA"
.../000:04/CFG> Rebuild="00"
.../000:04/13H> Ext13H installed test requested
.../000:04/13H> Disk found at 128
.../000:04/13H> Ext13H version: 2.1 / EDD-1.1
.../000:04/13H> Ext13H Support: Extended disk access functions
.../000:04/13H> Drive Interface Info:
.../000:04/13H> Disk 128 X13H data : 19458/255/63 312592770/512
.../000:04/13H> Ext13H tested ok
.../000:04/FDL> DiskList requested
.../000:04/FDL> Disk found at 128
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB_|__GEO
128 | .312592770 | 255 | 63 | 149 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
.../000:04/IAS> AdmiSector on disk 0 (128) not free for DP use, dump follows;
.../000:04/LOG> SectorDump requested at 29 (0 0 30)
###
000   60 89 0D 90 85 46 00 C7 40 60 5E 57 40 00 E9 6E  |  `?.??F.?@`^W@.?n
016   F7 FF FF 8B FF 55 8B EC 81 EC 64 05 00 00 83 3D  |  ?..?.U????d...?=
032   50 6A 43 00 00 A1 BC 65 43 00 53 8B 5D 08 89 45  |  PjC..??eC.S?].?E
048   FC 74 07 33 C0 E9 F8 00 00 00 57 6A 29 53 E8 FD  |  ?t.3???...Wj)S??
064   9D 01 00 8B F8 85 FF 59 59 75 08 6A 0D 58 E9 DE  |  ?...YYu.j.X??
080   00 00 00 56 8B F7 2B F3 8D 46 01 50 8D 45 AC 53  |  ...V??+??F.P?E?S
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   6A 00 8D 45 AC 50 A1 70 60 43 00 C6 44 35 AD 00  |  j.?E?P?p`C.?D5?.
128   FF 50 5C 85 C0 0F 85 A5 00 00 00 8D 85 A4 FA FF  |  .P\??.??...?.
144   FF 50 6A 00 47 57 FF B5 A8 FA FF FF E8 BB F4 FF  |  .Pj.GW....
160   FF 8B F0 85 F6 74 0F FF B5 A8 FA FF FF E8 DD F0  |  .?t....
176   FF FF 8B C6 EB 7A A1 DC 66 43 00 8D B4 05 AB FA  |  ..???z??fC.??.??
192   FF FF 48 F7 D0 23 F0 8D 85 9C FA FF FF 50 68 00  |  ..H??#??..Ph.
208   04 00 00 56 FF B5 A4 FA FF FF E8 F7 F4 FF FF FF  |  ...V......
224   B5 A4 FA FF FF 8B F8 E8 FA F1 FF FF FF B5 A8 FA  |  ..??...
240   FF FF E8 98 F0 FF FF 85 FF 74 04 8B C7 EB 31 0F  |  ....?.t.???1.
256   B7 7E 10 0F B7 5E 02 8D 46 14 03 F8 85 DB 89 85  |  ?~..?^.?F..?
272   A0 FA FF FF 74 17 68 8C 17 43 00 57 E8 13 9C 01  |   ?..t.h?.C.W?.?.
288   00 85 C0 59 59 74 18 83 C7 28 4B 75 E9 6A 04 58  |  .??YYt.??(Ku?j.X
304   5E 5F 8B 4D FC 5B E8 46 B0 01 00 C9 C2 04 00 66  |  ^_?M?[?F?..??..f
320   81 3E F0 01 8B 47 0C A3 50 6A 43 00 8B 4F 14 89  |  ?>?.?G.?PjC.?O.?
336   0D 54 6A 43 00 75 0E 8B 8D A0 FA FF FF 03 41 1C  |  .TjC.u.?? ?...A.
352   A3 50 6A 43 00 33 C0 EB C7 8B FF 55 8B EC 8B 45  |  ?PjC.3???.U???E
368   08 0F B7 50 0C 85 D2 8D 48 10 76 03 8D 0C D1 0F  |  ..?P.??H.v.?.?.
384   B7 40 0E 33 D2 85 C0 56 76 14 8B 75 0C 39 31 74  |  ?@.3??Vv.?u.91t
400   14 83 FE FF 74 0F 83 C1 08 42 3B D0 72 EF 33 C0  |  .??.t.??.B;?r?3?
416   5E 5D C2 0C 00 8B 41 04 25 FF FF FF 7F 03 45 10  |  ^]?..?A.%....E.
432   EB EE 8B FF 55 8B EC FF 75 08 E8 9D 7C 01 00 85  |  .U??.u.??|..?
448   C0 75 08 6A 04 58 E9 9E 00 00 00 0F B7 48 14 53  |  ?u.j.X??....?H.S
464   0F B7 58 06 56 57 8D 7C 01 18 EB 15 68 8C 17 43  |  .?X.VW?|..?.h?.C
480   00 57 E8 4D 9B 01 00 85 C0 59 59 74 0A 4B 83 C7  |  .W?M?..??YYt.K??
496   28 85 DB 75 E7 EB 10 8B 77 14 03 75 08 85 DB 8B  |  (??u??.?w..u.??
###
.../000:04/WAS> AdmiSectors in use : 0-
.../000:04/KEY> DEMO/1
.../000:04/PFC> PQstuff signature not detected on disk 0 (128)
.../000:04/PFC> UDMA driver not loaded
.../000:04/PFC> Disk health 50-100
.../000:05/PFC> Disk Overlay or Bootmanager found on disk 0 (128), type is 55
.../000:05/PFC> Disk Overlay or Bootmanager found on disk 0 (128), type is 55
.../000:06/PFC> Partition State backup not found on disk 0 (128)
.../000:06/PFC> No Repair date found on disk 0 (128)
.../000:34/CSD> Start CheckDisk for disk 0 (128)
.../000:34/CSD> CheckDisk complete, ReadErrors 0
.../000:34/USD> Disk 0 (128) selected
.../000:34/GSC> AdmiSector not in use
.../000:34/GSC> AdmiSector not in use
128/000:34/USD> MBR for disk 0 (128)
128/000:34/LOG> SectorDump requested at 0 (0 0 1)
###
000   40 72 C3 5F 5E 5B C2 04 00 8B FF 55 8B EC 83 EC  |  @r?_^[?..?.U?
016   10 8B 45 0C 8B 40 60 8B 4D 14 53 56 8B 70 04 8D  |  .?E.?@`?M.SV?p.?
032   41 44 89 45 FC 8B 45 10 89 41 3C 8B 46 0C C1 E8  |  AD?E??E.?A<?F.??
048   07 24 01 88 45 F8 8B 46 10 33 DB 85 C0 76 3E 57  |  .$.?E??F.3??v>W
064   FF 75 F8 8B 7D FC 2B C3 83 C7 04 89 07 8B 46 18  |  .u??}?+Ã?.?.?F.
080   57 03 C3 50 FF 75 10 8B 45 0C FF 70 04 6A 00 E8  |  W.?P.u.?E..p.j.?
096   43 89 00 00 8B 4D FC 03 1F 83 45 FC 08 89 01 8B  |  C?..?M?..?E?.?.?
112   46 10 3B D8 89 55 F4 72 C7 8B 4D 14 5F 8B 46 14  |  F.;?U?r?M._?F.
128   FF 75 08 89 41 30 8B 45 0C 89 41 08 E8 A9 F4 FF  |  .u.?A0?E.?A..
144   FF 6A 03 58 5E 5B C9 C2 10 00 8B FF 55 8B EC 53  |  .j.X^[??..?.U??S
160   8B 5D 0C 8B 43 60 56 8B 70 04 8B 45 08 57 8B 78  |  ?].?C`V?p.?E.W?x
176   28 83 BF 84 00 00 00 00 74 39 83 7E 28 00 74 0E  |  (....t9?~(.t.
192   8B 87 90 00 00 00 3B 86 00 01 00 00 76 25 8D 87  |  ...;?....v%??
208   88 00 00 00 8B 08 89 4E 28 8B 8F 90 00 00 00 01  |  ?...?.?N(....
224   08 89 8E 00 01 00 00 8B 00 3B 47 7C 76 05 E8 59  |  .??....?.;G|v.?Y
240   B7 01 00 33 C0 8A 46 06 50 57 E8 D9 F5 FF FF F6  |  ?..3??F.PW???..?
256   46 0C C0 74 33 80 7F 65 00 74 2D 8B 4E 18 8B 56  |  F.?t3?e.t-?N.?V
272   10 81 E1 FF 0F 00 00 50 8D 8C 11 FF 0F 00 00 68  |  .??....P??.....h
288   49 21 40 00 C1 E9 0C 51 FF 75 08 89 48 40 FF 77  |  I!@.??.Q.u.?H@.w
304   08 E8 02 88 00 00 EB 11 8B 4E 14 FF 75 08 89 48  |  .?.?..?.?N..u.?H
320   30 89 58 08 E8 F1 F3 FF FF 5F 5E 5B 5D C2 08 00  |  0?X..._^[]?..
336   8B FF 55 8B EC 8B 45 0C 53 8B 58 28 F6 43 38 10  |  ?.U???E.S?X(?C8.
352   56 57 74 2B 8B 43 0C 8B 48 0C 8B 40 24 C1 E9 07  |  VWt+?C.?H.?@$??.
368   81 E1 01 FF FF FF 51 FF 73 14 FF 73 10 FF 73 04  |  ??....Q.s..s..s.
384   FF 70 04 FF 73 08 E8 84 8A 00 00 83 63 38 EF F6  |  .p..s.?..?c8??
400   43 38 20 0F 84 8F 00 00 00 8D 73 40 8B 06 8B 48  |  C8 .??...?s@?.?H
416   0C 8B 40 24 C1 E9 07 81 E1 01 FF FF FF 51 8D 4B  |  .?@$??.??....Q?K
432   48 51 FF 73 44 FF 73 04 FF 70 04 FF 73 08 E8 E4  |  HQ.sD.s..p..s.??
448   87 00 00 83 63 38 DF 80 4B 35 10 8D 7B 0C A5 A5  |  ?..?c8?K5.?{.??
464   A5 EB 55 8B 53 3C 8B 42 60 8B 70 04 33 C0 8A 46  |  ??U?S<?B`?p.3??F
480   06 89 55 10 50 53 E8 ED F4 FF FF 8B F8 85 FF 8B  |  .?U.PS???...?
496   42 60 8B 40 0C 89 43 3C 75 3B C7 42 18 01 00 00  |  B`?@.?C<u;?B....
###
128/000:35/VEC> Start Verify EPBR Chain for disk 0 (128)
128/000:35/VEC> Listing current partitions on disk:
128/000:36/VEC> No partitions found
128/000:36/VEC> Extended starts at 4294241768 (267304 47 48)
128/000:36/RDS> Read past EOD intercept for disk 128 at 4294241768 (267304 47 48)
128/000:36/VEC> Partition Table info for sector 0 (0 0 1)
128/000:36/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 .232 | ..00 | ..512.228...7 | ..312.131..35 | .894140639 | .209423632
..2 .165 | ..55 | ..747.165..37 | ..316.139..19 | 2338341515 | 3224568944
..3 .138 | ..55 | ..137..70...6 | ..339..16..16 | 4294241768 | 2247658495
..4 .255 | ..8B | ..352.139...2 | ..137..64..12 | .997538883 | ..18367175
128/000:36/VEC> 55AA sig not found
128/000:36/RDS> Read past EOD intercept for disk 128 at 4294241768 (267304 47 48)
128/000:36/VEC> Partition Table info for sector 4294241768 (267304 47 48)
128/000:36/LOG> PartListDump requested at 4294241768 (267304 47 48)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/000:36/VEC> 55AA sig not found
128/000:36/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
128/000:36/LOG> Boot sector dump requested at 997538883 (62093 235 34)
### BootSectorDump for BStype FAT32
...........Jump Code (hex): 000000
............OEM Name (txt): ........
....Bytes per Sector (dec): 0
.Sectors per Cluster (dec): 0
....Reserved Sectors (dec): 0
...........FAT count (dec): 0
....Root Entry Count (dec): 0
..Total Sectors (16) (dec): 0
....Media Descriptor (hex): 00
.......FAT Size (16) (dec): 0
...Sectors per Track (dec): 0
.....Heads per Track (dec): 0
......Hidden Sectors (dec): 0
..Total Sectors (32) (dec): 0
.......FAT Size (32) (dec): 0
......Extended Flags (hex): 0000
.............Version (hex): 0000
........Root Cluster (dec): 0
.............FS Info (dec): 0
...........Backup BS (dec): 0
............Reserved (hex): 000000000000000000000000
........Drive Number (hex): 00
............Reserved (hex): 00
......Boot Signature (hex): 00
...........Volume ID (hex): 00000000
........Volume Label (txt):
..Filesystem Type ID (txt):         
....Sector Signature (hex): 0000
128/000:36/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
1st FAT not found at      : 997538883 (62093 235 34)
128/000:36/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
2nd FAT not found at      : 997538883 (62093 235 34)
128/000:36/CF8> FAT sectors are equal
128/000:36/LOG> RootSector number not valid, no dump
128/000:36/RDS> Read past EOD intercept for disk 128 at 997538889 (62093 235 40)
128/000:36/RDS> Read past EOD intercept for disk 128 at 997538883 (62093 235 34)
128/000:36/VEC> BS and BBS equal
128/000:36/VEC> Verify EPBR Chain completed
128/000:37/USD> Select disk completed
128/000:39/SCN> DiskScan requested, ScanType is 3
128/000:39/SCN> from 0 (0 0 1) to 312592769 (19457 254 63), 312592770 sectors
128/000:39/SCN> Starting QuickScan (pre-vista) at 63 (0 1 1)
128/000:40/SCN> Next QuickScan location at 20802 (1 75 13)
128/000:40/SCN> Next QuickScan location at 0 (0 0 1)
128/000:41/SCN> QuickScan finished
128/000:41/SCN> Starting SmartScan (pre-vista) at 0 (0 0 1) (JMP=16065, RNG=63)
128/011:10/SCN> SmartScan finished
128/011:10/SCN> DiskScan completed
128/011:10/SCN> ReadErrors for disk 0 (128): 0
128/015:35/LOG> DataCollection items found: 3 / 1
### DATACOLLECTION.ARRAY, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 128 | ........63 | ..FAT12 | ..BS | ........63 | .....20739 | PRI | .
002 | 128 | ........63 | ..FAT12 | ..BS | ........63 | .....20739 | PRI | I
003 | 128 | .312592769 | ...NTFS | .BBS | ........63 | .312592707 | PRI | .
128/015:36/LOG> DataCollection items found: 3 / 1
### DATACOLLECTION.ARRAY, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 128 | ........63 | ..FAT12 | ..BS | ........63 | .....20739 | PRI
003 | 128 | .312592769 | ...NTFS | .BBS | ........63 | .312592707 | PRI
128/015:36/LOG> PartList items created: 2
### PARTLIST.ARRAY ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ..FAT12 | ... | ..1 | ..0 | ... | ..1 | ..1 | ..1 | 1 | ...
002 | ...NTFS | ... | ... | ..3 | ..0 | ..3 | ..3 | ..3 | 1 | ..B
### PARTLIST.ARRAY.INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ..FAT12 | ........63 | .....20739 | .....20801 | PRI | ... | ..X
002 | ...NTFS | ........63 | .312592707 | .312592769 | PRI | ..B | ..X
128/015:36/SST> SaveState requested for disk 0 (128)
128/015:36/SST> AdmiSector not in use for disk 0 (128), SaveState aborted
128/015:39/EXE> Analysis complete
128/015:41/LOG> RunTime: 015:41
128/015:41/LOG> ### CLOSE LOG ###


Thank you in advanced for any help that you can provide.

Best regards,
Stephen Kovacsiss

[Tom]

First, it has to be said, Fixboot and Fixmbr are repair tools from Hell. They create more misery than they have ever "fixed" and we state this in just about every bit of support text we have. Chkdsk isn't much better but has it's uses.

Now, it seems you are indeed close. You only forgot to refresh the MBR after the repair had been completed. This is usually not needed but the MBR here contains garbage, and is therefore missing some important bytes. The MBR refresh writes these bytes, among other things.
So, redo the repair and this time finish with a MBR refresh. Then use your preferred method of seeing if the volume can be accessed.

At the moment the RAID seems to be intact. I'm not sure what happened there, but (according to your description) things do point in the direction of hardware problems. It may be wise to keep an eye on this.

The fact that chkdsk has run (and we can't really tell on which part of the disk) is bad news, but you'll just have see how that has affected things. Just make sure chkdsk doesn't run again during the recovery.

When creating the Support Analysis Log, I also received an error "The State File could not be saved".

That isn't an error, it's a warning. It simply means that DP couldn't use its administrative sector for bookkeeping, so state file saving is not possible. The log shows that the admi sector (at address 29) contains garbage, so DP leaves it alone just to be safe (it might contain data that is needed by the array). Usually sector 29 is of no use to anyone, which is why we use it.

[StephenKovacsiss]

So, redo the repair and this time finish with a MBR refresh.

Tom, Thank you for your quick response.  My question is, when you say MBR Refresh, do you mean the MBR Refresh boot code function?  I wanted to be sure since the term boot code was in there and you just say MBR Refresh.

After doing the above items, I get the same results mentioned before.  Here the exact message that Knoppix shows when I try to mount the array:

Could not mount device
The reported error was:
Failed to open ntfs attribute: No such file or directory
Failed to load $MFT: No such file or directory
Failed to startup volume: No such file or directory
Failed to mount '/dev/mapper/fdc_fccdched1': No such file or directory


Hopefully you have some ideas of where to go from here.

[Tom]

Hopefully you have some ideas of where to go from here.

Seems there's only one way left...

Yes, MBR refresh is good/the same as boot code refresh, sorry for the abbreviations there.
If this didn't work we may assume the damage to the volumes is worse than we expected. This may have something to do with the fact that chkdsk has run; chkdsk attempts to change lots of things on the disk and when it doesn't work out it just throws stuff away. Then after stopping chkdsk you're left with a lot less data and no normal way to get to it.

Please post a fresh support analysis log for the fixed volumes.

I'd say you're left with one option at this point, which is file recovery. Use a tool like iRecover to copy data from the damaged volumes. We'll have look at the fresh log but it seems that's the only way to go from here.

It's not nice of me to say this but your Fixmbr/Fixboot/chkdsk actions caused the bad situation to get worse. Something to remember for the future.

[StephenKovacsiss]

Please post a fresh support analysis log for the fixed volumes.

Here is the fresh Support Analysis Log:

.../000:03/LOG> ### LOG START ###
.../000:03/LOG> DISKPATCH 3.5.300
.../000:03/LOG> (C) 2000-2009 DIY DataRecovery
.../000:03/LOG> Contact info: http://HTTP://www.DIYDataRecovery.nl
.../000:03/LOG> MemFree: 65Kb
.../000:03/LOG> CommandLineParms:
.../000:03/LOG> LogDate: 03-01-2010
.../000:03/CFG> FilePath="A:DPFILES\"
.../000:03/CFG> ReadRetries="32"
.../000:03/CFG> WriteRetries="32"
.../000:03/CFG> MaxReadErrors="32"
.../000:03/CFG> MaxWriteErrors="1"
.../000:03/CFG> LogEachReadError="1"
.../000:04/CFG> ReadDelay="0"
.../000:04/CFG> VfyFixedBadSect="1"
.../000:04/CFG> CleanAfterDOD="1"
.../000:04/CFG> DiskReset="1"
.../000:04/CFG> SectorSkip="1024"
.../000:04/CFG> AutoSaveState="1"
.../000:04/CFG> DumpFoundSectors="0"
.../000:04/CFG> FixFats="1"
.../000:04/CFG> MaxFatScan="51200"
.../000:04/CFG> MaxDataColEntries="256"
.../000:04/CFG> IgnoreF8FF="0"
.../000:04/CFG> DownSizeExt="1"
.../000:04/CFG> ScanSignature="55AA"
.../000:04/CFG> Rebuild="00"
.../000:04/13H> Ext13H installed test requested
.../000:04/13H> Disk found at 128
.../000:04/13H> Ext13H version: 2.1 / EDD-1.1
.../000:04/13H> Ext13H Support: Extended disk access functions
.../000:04/13H> Drive Interface Info:
.../000:04/13H> Disk 128 X13H data : 19458/255/63 312592770/512
.../000:04/13H> Ext13H tested ok
.../000:04/FDL> DiskList requested
.../000:04/FDL> Disk found at 128
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB_|__GEO
128 | .312592770 | 255 | 63 | 149 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
.../000:04/IAS> AdmiSector on disk 0 (128) not free for DP use, dump follows;
.../000:04/LOG> SectorDump requested at 29 (0 0 30)
###
000   60 89 0D 90 85 46 00 C7 40 60 5E 57 40 00 E9 6E  |  `?.??F.?@`^W@.?n
016   F7 FF FF 8B FF 55 8B EC 81 EC 64 05 00 00 83 3D  |  ?..?.U????d...?=
032   50 6A 43 00 00 A1 BC 65 43 00 53 8B 5D 08 89 45  |  PjC..??eC.S?].?E
048   FC 74 07 33 C0 E9 F8 00 00 00 57 6A 29 53 E8 FD  |  ?t.3???...Wj)S??
064   9D 01 00 8B F8 85 FF 59 59 75 08 6A 0D 58 E9 DE  |  ?...YYu.j.X??
080   00 00 00 56 8B F7 2B F3 8D 46 01 50 8D 45 AC 53  |  ...V??+??F.P?E?S
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   6A 00 8D 45 AC 50 A1 70 60 43 00 C6 44 35 AD 00  |  j.?E?P?p`C.?D5?.
128   FF 50 5C 85 C0 0F 85 A5 00 00 00 8D 85 A4 FA FF  |  .P\??.??...?.
144   FF 50 6A 00 47 57 FF B5 A8 FA FF FF E8 BB F4 FF  |  .Pj.GW....
160   FF 8B F0 85 F6 74 0F FF B5 A8 FA FF FF E8 DD F0  |  .?t....
176   FF FF 8B C6 EB 7A A1 DC 66 43 00 8D B4 05 AB FA  |  ..???z??fC.??.??
192   FF FF 48 F7 D0 23 F0 8D 85 9C FA FF FF 50 68 00  |  ..H??#??..Ph.
208   04 00 00 56 FF B5 A4 FA FF FF E8 F7 F4 FF FF FF  |  ...V......
224   B5 A4 FA FF FF 8B F8 E8 FA F1 FF FF FF B5 A8 FA  |  ..??...
240   FF FF E8 98 F0 FF FF 85 FF 74 04 8B C7 EB 31 0F  |  ....?.t.???1.
256   B7 7E 10 0F B7 5E 02 8D 46 14 03 F8 85 DB 89 85  |  ?~..?^.?F..?
272   A0 FA FF FF 74 17 68 8C 17 43 00 57 E8 13 9C 01  |   ?..t.h?.C.W?.?.
288   00 85 C0 59 59 74 18 83 C7 28 4B 75 E9 6A 04 58  |  .??YYt.??(Ku?j.X
304   5E 5F 8B 4D FC 5B E8 46 B0 01 00 C9 C2 04 00 66  |  ^_?M?[?F?..??..f
320   81 3E F0 01 8B 47 0C A3 50 6A 43 00 8B 4F 14 89  |  ?>?.?G.?PjC.?O.?
336   0D 54 6A 43 00 75 0E 8B 8D A0 FA FF FF 03 41 1C  |  .TjC.u.?? ?...A.
352   A3 50 6A 43 00 33 C0 EB C7 8B FF 55 8B EC 8B 45  |  ?PjC.3???.U???E
368   08 0F B7 50 0C 85 D2 8D 48 10 76 03 8D 0C D1 0F  |  ..?P.??H.v.?.?.
384   B7 40 0E 33 D2 85 C0 56 76 14 8B 75 0C 39 31 74  |  ?@.3??Vv.?u.91t
400   14 83 FE FF 74 0F 83 C1 08 42 3B D0 72 EF 33 C0  |  .??.t.??.B;?r?3?
416   5E 5D C2 0C 00 8B 41 04 25 FF FF FF 7F 03 45 10  |  ^]?..?A.%....E.
432   EB EE 8B FF 55 8B EC FF 75 08 E8 9D 7C 01 00 85  |  .U??.u.??|..?
448   C0 75 08 6A 04 58 E9 9E 00 00 00 0F B7 48 14 53  |  ?u.j.X??....?H.S
464   0F B7 58 06 56 57 8D 7C 01 18 EB 15 68 8C 17 43  |  .?X.VW?|..?.h?.C
480   00 57 E8 4D 9B 01 00 85 C0 59 59 74 0A 4B 83 C7  |  .W?M?..??YYt.K??
496   28 85 DB 75 E7 EB 10 8B 77 14 03 75 08 85 DB 8B  |  (??u??.?w..u.??
###
.../000:05/WAS> AdmiSectors in use : 0-
.../000:08/KEY> 1812O9O191/4
.../000:08/PFC> PQstuff signature not detected on disk 0 (128)
.../000:08/PFC> UDMA driver not loaded
.../000:08/PFC> Disk health 50-100
.../000:10/PFC> Partition State backup not found on disk 0 (128)
.../000:10/PFC> No Repair date found on disk 0 (128)
.../000:33/MNU> - Main, Select Disk
.../000:36/CSD> Start CheckDisk for disk 0 (128)
.../000:37/CSD> CheckDisk complete, ReadErrors 0
.../000:37/USD> Disk 0 (128) selected
.../000:37/GSC> AdmiSector not in use
.../000:37/GSC> AdmiSector not in use
128/000:37/USD> MBR for disk 0 (128)
128/000:37/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C FB 50 07 50 1F FC BE 1B 7C  |  3???.|?P.P.??.|
016   BF 1B 06 50 57 B9 E5 01 F3 A4 CB BD BE 07 B1 04  |  ?..PW??.?.?.
032   38 6E 00 7C 09 75 13 83 C5 10 E2 F4 CD 18 8B F5  |  8n.|.u.??..??
048   83 C6 10 49 74 19 38 2C 74 F6 A0 B5 07 B4 07 8B  |  ??.It.8,t? ?.?.?
064   F0 AC 3C 00 74 FC BB 07 00 B4 0E CD 10 EB F2 88  |  ??<.t??..?.?.
080   4E 10 E8 46 00 73 2A FE 46 10 80 7E 04 0B 74 0B  |  N.?F.s*?F.?~..t.
096   80 7E 04 0C 74 05 A0 B6 07 75 D2 80 46 02 06 83  |  ?~..t. ?.u?F..?
112   46 08 06 83 56 0A 00 E8 21 00 73 05 A0 B6 07 EB  |  F..?V..?!.s. ?.?
128   BC 81 3E FE 7D 55 AA 74 0B 80 7E 10 00 74 C8 A0  |  ??>?}U?t.?~..t? 
144   B7 07 EB A9 8B FC 1E 57 8B F5 CB BF 05 00 8A 56  |  ?.??.W???..?V
160   00 B4 08 CD 13 72 23 8A C1 24 3F 98 8A DE 8A FC  |  .?.?.r#??$??
176   43 F7 E3 8B D1 86 D6 B1 06 D2 EE 42 F7 E2 39 56  |  C??.??B??9V
192   0A 77 23 72 05 39 46 08 73 1C B8 01 02 BB 00 7C  |  .w#r.9F.s.?..?.|
208   8B 4E 02 8B 56 00 CD 13 73 51 4F 74 4E 32 E4 8A  |  ?N.?V.?.sQOtN2??
224   56 00 CD 13 EB E4 8A 56 00 60 BB AA 55 B4 41 CD  |  V.?.???V.`??U?A?
240   13 72 36 81 FB 55 AA 75 30 F6 C1 01 74 2B 61 60  |  .r6??U?u0??.t+a`
256   6A 00 6A 00 FF 76 0A FF 76 08 6A 00 68 00 7C 6A  |  j.j..v..v.j.h.|j
272   01 6A 10 B4 42 8B F4 CD 13 61 61 73 0E 4F 74 0B  |  .j.?B???.aas.Ot.
288   32 E4 8A 56 00 CD 13 EB D6 61 F9 C3 49 6E 76 61  |  2??V.?.??a??Inva
304   6C 69 64 20 50 61 72 74 69 74 69 6F 6E 20 74 61  |  lid Partition ta
320   62 6C 65 00 45 72 72 6F 72 20 6C 6F 61 64 69 6E  |  ble.Error loadin
336   67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74  |  g operating syst
352   65 6D 00 4D 69 73 73 69 6E 67 20 6F 70 65 72 61  |  em.Missing opera
368   74 69 6E 67 20 73 79 73 74 65 6D 00 00 00 00 00  |  ting system.....
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 2C 44 63 FF 70 04 FF 73 08 00 01  |  .....,Dc.p..s...
448   01 00 07 FE FF FF 3F 00 00 00 43 C9 A1 12 00 00  |  ...?..?...C?...
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............U?
###
128/000:37/VEC> Start Verify EPBR Chain for disk 0 (128)
128/000:37/VEC> Listing current partitions on disk:
128/000:37/VEC>     NTFS (P)                       63   312592707     (149 Gb)
128/000:37/VEC> Partition Table info for sector 0 (0 0 1)
128/000:37/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..07 | ....0...1...1 | .1023.254..63 | ........63 | .312592707
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/000:38/VEC> 55AA sig Ok
128/000:38/LOG> Boot sector dump requested at 63 (0 1 1)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 63
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 312592706
........MFT Location (dec): 13024696
.MFT Mirror Location (dec): 19749803
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): AAB4EBEDB4EBB9C9
........Volume Label (txt):
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
128/000:38/VEC> BS and BBS equal
128/000:38/VEC> Verify EPBR Chain completed
128/000:38/USD> Select disk completed
128/000:41/MNU> - Support, Analyze Disk (no repair, create log)
128/000:42/SCN> DiskScan requested, ScanType is 3
128/000:42/SCN> from 0 (0 0 1) to 312592769 (19457 254 63), 312592770 sectors
128/000:42/SCN> Starting QuickScan (pre-vista) at 63 (0 1 1)
128/000:43/SCN> Next QuickScan location at 0 (0 0 1)
128/000:43/SCN> QuickScan finished
128/000:43/SCN> Starting SmartScan (pre-vista) at 0 (0 0 1) (JMP=16065, RNG=63)
128/011:08/SCN> SmartScan finished
128/011:08/SCN> DiskScan completed
128/011:08/SCN> ReadErrors for disk 0 (128): 0
128/011:14/LOG> DataCollection items found: 4 / 1
### DATACOLLECTION.ARRAY, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 128 | ........63 | ...NTFS | ..BS | ........63 | .312592707 | PRI | .
002 | 128 | .........0 | ...NTFS | PTE1 | ........63 | .312592707 | PRI | .
003 | 128 | ........63 | ...NTFS | ..BS | ........63 | .312592707 | PRI | I
004 | 128 | .312592769 | ...NTFS | .BBS | ........63 | .312592707 | PRI | .
128/011:15/LOG> DataCollection items found: 4 / 1
### DATACOLLECTION.ARRAY, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 128 | ........63 | ...NTFS | ..BS | ........63 | .312592707 | PRI
002 | 128 | .........0 | ...NTFS | PTE1 | ........63 | .312592707 | PRI
004 | 128 | .312592769 | ...NTFS | .BBS | ........63 | .312592707 | PRI
128/011:15/LOG> PartList items created: 1
### PARTLIST.ARRAY ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ...NTFS | ..2 | ..1 | ..4 | ..0 | ..2 | ..2 | ..2 | 3 | ..A
### PARTLIST.ARRAY.INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ...NTFS | ........63 | .312592707 | .312592769 | PRI | ..A | ..X
128/011:16/SST> SaveState requested for disk 0 (128)
128/011:16/SST> AdmiSector not in use for disk 0 (128), SaveState aborted
128/011:16/EXE> Analysis complete
128/011:21/MNU> - Main, Quit
128/011:21/LOG> RunTime: 011:21
128/011:21/LOG> ### CLOSE LOG ###

It's not nice of me to say this but your Fixmbr/Fixboot/chkdsk actions caused the bad situation to get worse. Something to remember for the future.

It may not be nice, but it is the truth.  If I can get the files with iRecover, then I will still be happy.  I do know for the future to contact you guys first.  It seems that you know what you are doing when it comes to this stuff.

I have not looked in detail yet, but I am guessing that there is a tutorial on how to create a boot CD with iRecover and use a USB drive to copy to.

[Tom]

The log shows what we expected: stuff that can be repaired by DiskPatch is now fine, so DiskPatch can't do anything else. This means that the damage is inside the volume, for reasons stated earlier. So it seems the previous conclusion was correct (if at this point you can not access the volume); you'll need file recovery to copy the files from the damaged volume.

About that tutorial, yes. It's included in the iRecover distribution (the one that is dubbed the Windows BartPE version, link follows). The USB key as a target should be easy enough; USB devices are normally accessible from a running Windows PE.

http://www.diydatarecovery.nl/irecoverpe.htm

Check our refund policy first. I'm mentioning this because in this case it might be a good move to purchase right away and build that PE cd, so you won't have to do that again if the demo tells you that you actually can recover the files. If things don't work out we'll refund that purchase anyway, so save yourself the time and get started with the full version.
Also, according to the refund policy, if DiskPatch hasn't been able to help you at all, a refund can be requested. Now, it's not that I'm a big refund fan, but I do feel I should mention it.

Finally, there's a discount for buying both DiskPatch and iRecover, but only if you buy them at the same time. So if you're interested in that, drop me a mail (tom@diydatarecovery.nl) and I'll explain how we can make that happen.

One more thing: you won't need the RAID version of iRecover, because your RAID setup seems intact. The recovery will take place from the disk space that the RAID presents. The RAID version of iRecover is needed if the RAID is broken and all disks are accessible individually; iRecover can then rebuild the RAID data in memory. Just a heads up.

[StephenKovacsiss]

Hi Tom, So I have I bought iRecover and built a boot CD with BartPE.  Here is what I am seeing now:

I have run iRecover in both Quick Scan Mode and not.  I also selected the force filesystem to NTFS the second time.  What happens each time is that it finds a lot of the files and a lot of the directories, there are many "Lost Fragments" and similar directorys, and the weird part is the same filename is shown in each directory 2 times for 2 different items.  I tried to recover some and many of the files are saved and some are good and some are bad.  For example, JPG pictures: some are fine and some look like a mixture of multiple pictures and some return an invalid file.  With the filenames, the 2 same ones are different pictures.  It seems that something is not fully lined up with the array or something.

Should I post this in the iRecover section and capture some details to explain in more detail?  I would like to see what you think I should do next.

Thanks again,
Stephen

[Joep]

Hello,

If iRecover by itself already determined the file system to be NTFS, then forcing it to NTFS has no added value. If the quick scan identifies a file system then the full scan will find the same file system. Disabling the quick scan or forcing NTFS only makes sense when quickscan does not bring results at all and forcing NTFS only makes sense when iRecover identifies a file system as FAT32 while it is known to be NTFS. The latter can happen if a previously formatted FAT32 file system was later formatted NTFS.

All valid NTFS MFT entries are listed in the directory tree window. iRecover has no way of telling if one version of 'file.doc' is more valid then a second copy of that file if it finds two or more entries for that filename. The same goes for directories.

If you didn't run with default options, specially the include/exclude deleted files setting, then you can try:

- run with setting 'only recover currect files' or option 2:
- run with setting 'skip current files'

This way, if for a file a current and a deleted version exists iRecover will only show current or deleted files, depending on the setting.

In the end, the only way to determine if a file has been recovered intact and uncorrupted is by trying to open a file. Often all files are good, if we are recovering files from a 'nice clean' and yet corrupt  file system. If there is a mix of valid and corrupt files then the best advise is to recover the lot. Then you have no other option than to shift through the files. Even after that it may be wise to keep all recovered files in a safe place so you can go through them again in the future if needed.