(08) 6180 6959 [email protected]

 

raid system data recovery

raid 5 data recovery

The Problem

It is not often that I am asked to go on site to perform a recovery. But in this case a large mining and exploration company had suffered a power outage and one of their HP dedicated servers was now not booting and they wanted me to come in and recover data in house.

They of course had a dedicated Server room but their office building was subject to frequent power drops both scheduled and intermittent. This has caused them to move the bulk of their IT infrastructure to a Data Center and thus alleviate their power outage problems.

 

data recovery from raid server

Raid Server data recovery

However they were still running a legacy server running Windows 2012 and Hypervisor with various server images. For those that don’t know 2012 with hypervisor allows the running of multiple Servers or virtual machines of many flavour , eg Linux , on the one machine.

The first problem that came to my mind is was the actual raid configuration damaged. Their server still booted to Windows 2012 however none of their Virtual Machines would load. Obviously the RAID config on which the operating system was located was still intact however the volume or volumes where the virtual machines were located was on a separate 13 TB RAID 5.

Data Recovery raid level 5

Image of Raid Level 5 for data recovery

Raid 5 config requires a least 3 drives and data is distributed acrsos these drives in blocks.

Three possibilities existed

  • 2 or more of the hard drives in the RAID config had failed which usually means some data loss.
  • The drives were still healthy but the raid configuration data on the drives had become corrupted.
  • The drives and the RAID were healthy but that crucial volume information ( the partition table) and/or Master File Table had become corrupted.

If any of the first 2 conditions existed it would be impossible to do the recovery on site as reconstruction of the raid would need to occur and this would need to be done with recovery tools having direct access to the drives and the drives not being connected to a RAID Controller. Recovering failed RAIDS is time consuming and complex and a greater cost.

Fortunately after much discussion with myself ant the organisations IT staff it was determined that there was good likelihood the RAID was intact and the third failure scenario was most likely.

On Site

Once on site I was able to use Windows Disk Management console to see that a 13 terabayte RAW volume existed so at the very least the partition information for the drive was missing.

I installed my favourite recovery Data Recovery tool on the Windows 2012 volume which is R-Studio see https://www.r-studio.com/data-recovery-software/.

R-Studio data recovery software

R-Studio Data Recovery Software

R-Studio Initial Screen

Although the above image is not from the failed RAID if we look at the second 1tb Western Digital drive in the above image we know it has 4 separate volumes. Our failed RAID was devoid of any volume info so we know the partition table of the drive was corrupted by the power failure.

In my experience when this happens it is more than likely we are going to find a corrupt MFT or Master File Table. The MFT contains the info Windows Operating Systems Require to locate files on a hard drive or RAID.

We can consider the drive or RAID as a contiguous set of blocks ( 0 – 9999999999) and a file will occupy a number of these blocks and they are recorded in the MFT. Without this info the operating system has no idea where these files are located.

So it was more than likely we were not going to recover the Virtual Machines via the file system. R-Studio does it work by scanning the whole drive or RAID volume from block 0 to the last block and tries to rebuild the file system information.

Raw Recovery

What R-Studio can also do while scanning the any volume is try to recover individual files such as jpgs or word documents by signatures within those files and it can also discover virtual machines such as those used by Hypervisor. They are called Hyper-V virtual disks and have a vhdx file extension.

So I configures R-Studio to try and find these files while it was scanning the 13 TB RAID and started it on it’s scan which took approx 24 hours.

Upon arriving at the organisation the next day it was clear that the MFT had been corrupted as R-Studio reported back it had discovered nearly 10 different 5 terabyte volumes.

It had however found 3 1tb or so VHDX files which corresponded to the the files we were looking so I made a decision to recover those first. When you recover data form a failed drive it’s important to write the data back to a different drive and unfortunately the legacy server only had USB 2 connections so it took nearly 3 days to recover the images which fortunately turned out to be in pristine condition and contained the required data.

For more info on our Raid data Recovery service

 

Some of our Reviews

Rob Pennefather
Rob Pennefather
2023-12-22
Lost coverage of my Samsung 3g phone when vodafone chopped the 3g network coverage . Data Recovery Perth with their amazing knowledge and tech skills reconnected my phone to the 4g network saving me from buying or upgrading a new phone ! Highly recommend Data Recovery Perth for all your computer phone and IT issues !!!
Virginie Chetty
Virginie Chetty
2023-11-16
Digby completely saved my business by recovering important files from my failed laptop
Ian Brodie
Ian Brodie
2023-11-16
Lost data on a failed hard drive. It seemed to be gone for good but after a weeks work Digby recovered it all. Excellent work. Recommended.
Rose Reilly
Rose Reilly
2023-07-29
Great service from Digby . Very knowledgeable and helpful in fixing my IT issues
Vaughan
Vaughan
2023-07-14
I've used Data Recovery Perth to recover some files that I was told by another business were irrecoverable. I not only had these files fully recovered but was very happy with the cost to perform this. Speedy recovery and excellent service, definitely recommend.
plumboss
plumboss
2023-07-12
Hi Digby, I would like to thank you for retrieving files from my hardrive. The files are very important to my work. I\'m taking your advise and investing in a new hardrive. Thank you John Abrahams
Bill E
Bill E
2023-07-08
Data Recovery Perth recovered some critical data from a failed laptop that I thought was totally lost, great job.
Nathan Davis
Nathan Davis
2023-06-23
I had a old Raid 10 computer that failed and which had photos and videos on it that I didn't want to loose. I searched for data recovery services and all the places I found charged exorbitant prices. Came across Digby and found his price was very reasonable and he got all my data back! So I would say to anyone needing data recovery use Digby's services and not the other places as he gets the job done for a fair price.
Milan Adrijasevic
Milan Adrijasevic
2023-06-15
Recently I had a hard drive die on one of my work computers . Data Recovery Perth got all my data back and had me working in no time.
Stuart
Stuart
2022-12-10
I recently used Digby's data recovery service and was impressed by his intelligence and helpfulness. He was able to recover data from my network HDD that I thought was lost forever, and did so with a level of expertise and attention to detail that was truly impressive. I am so grateful for his help, and would highly recommend him to anyone in need of data recovery. Thank you, Digby!

REQUEST A QUOTE

Address

126 Whatley Crescent Maylands

call:(08) 6180 6959

126 Whatley Crescent

}

6 Days a week from 8:00am – 5:00pm