A few people have reported using PhotoRec to recover deleted files form the Qlocker ransome virus on their Qnap NAS.
It has done what it says and recovered the files with new names and we understand this is normal.
A script was written to compare the saved PhotoRec files with the still named originals in the NAS. All files are still there but with a .7z ext.
The program has recovered 90% of the file names
the software search file with the
same extension,
then with the same size
and then the same crc32
But in there are many 'File Not Found' messages.
Code: Select all
14/05/2021 8:54:19 AM; open file; \\OzstarNAS\Download\LYRICS-SETLISTHELP\Back door Sally-Show1.pdf.7z
14/05/2021 8:54:20 AM; File not found; f:\Filestore\Download\LYRICS-SETLISTHELP\Back door Sally-Show1.pdf
What could be the reasons PR didn't recover the file/s?
It was corrupted? On a deeper layer?
Thank you