ozstar
Data Recovery Noob
Posts: 1
Joined: Mon May 03, 2021 2:01 am

QNAP NAS data recovery after ransomeware deletions

Mon May 03, 2021 2:13 am

Hi,

I have a TS451 Qnap NAS attached to my Win10x65 LAN.

I have been hacked by Ransomeware and they have encrypted my photos, video etc with 7z.
I will not pay their demand to get the pwd to un-encrypt.

After the encryption, they deleted the files and it is these files I wish to recover.

I have used PuTTY and PhotoRec and recovered 955,000 however they are not in any folder structure or have any filenames, just numbers. The files are file except for that.

I have taken the only drive out of the NAS and attached it to the PC using a USN adapter.

The drive does not have a Storage Pool, it is just a straight drive I had in it.

I have also tried with EuseUS however once again most of the files are numbered although some have the names.

Is it possible to get the filenames back with some other program ? Why would the names disappear and be replaced with numbers anyway?

Any help please?

oz

User avatar
Jared
Forum Admin
Posts: 3906
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

QNAP NAS data recovery after ransomeware deletions

Mon May 03, 2021 8:22 am

You need a data recovery program that knows how to work with a Linux file system. Try using UFS Explorer or Recovery Explorer to scan it. Those programs actually support the file system.

However, just know that files which have been encrypted by the ransomware are unlikely to be recoverable by any means.

Return to “RAID Data Recovery Forum”

Who is online

Users browsing this forum: No registered users and 0 guests