cgsecurity.org

I tried using expert mode in TestDisk to repair the $MFTMirr, it writes, then when I restart and check again, TestDisk goes back to displaying the message:

"Both MFT seems ok but they don't match, use chkdsk."

Repairing the $MFTMirr doesn't seem to stick. I also noticed TestDisk lists 2 physical ...

I ran chkdsk on the array. TestDisk showed the disks in the array as having mismatched $MFT so then I destroyed the array, then ran chkdsk on both disks.

All my chkdsks showed: "Windows has checked the file system and found no problems."

In TestDisk, I still get this message:

"Both MFT seems ok ...

I realized this is a little complicated for me as I am not very familiar with dd. I know it can be used to copy sectors. Now, I don't know what that command would look like. I also don't have the MFT size, but it appears I can extract it somehow.

I found this pdf: https://www.fbi.h-da.de/fileadmin ...

I'm thinking I should fix the MFT issue on both disks, then look into fixing the Boot Sector issue of the array. I'm looking for another tool aside from TestDisk or chkdsk to auto-repair the MFT, but so far not finding anything simple - it's looking very technical and highly involved. I'll make ...

Regarding the MFT: TestDisk, previously to re-creating my array, would show each drive as having an MFT and mirror that matches perfectly.

Now, for the array, it shows:

" Both MFT seems ok but they don't match, use chkdsk "

Even after chkdsk on the array, I continue to get this message. To me, it ...

I have a Biostar Motherboard with built-in RAID, so I use that. I know a backup would be great, but I have no 1TB backup, so I'll take the risks. After I re-created the array, I ran the sync and no inconsistencies were found. I had previously, individually, run chkdsk - with same results on each ...

Seems like I have successfully re-created my array, but TestDisk shows that the MFT "seems ok?" What's that about??? It still shows this even after I run "chkdsk C: /f" (C: now denoting the array).


Steps taken:

Firstly, I destroyed the RAID then re-created it using "Fast Initialization," after ...

Ok, due to the enormous amount of time spent and frustration, I tried again to simply copy/paste the boot sector (using dd). I've additionally fixed the backup boot sector. Now, both drives are mountable and showing my data.

Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121602 255 63
Partition Start ...

The one drive that appears to be working ok has 121575 cylinders. The other has 121601. If I mess around with Geomtry settings, in particular, the number of cylinders (using 121601 or 121575) will NOT show a partition on the bad disk. I would think having exactly the same Geomtry on each disk ...

I believe there is still a good backup bootsector on one of the disks. It will take several hours to do any scans.