Tech3D | How to *POSSIBLY* recover data after Qlocker QNAP Ransomware attack @Neil3D | Uploaded April 2021 | Updated October 2024, 1 hour ago.
This won't work for everyone, and it won't be a perfect solution for everyone, but it's something.
It's more than QNAP are doing. PLEASE READ - You can only recover the 7z password if the attack is still happening, I mentioned the 2 routes in the video. THIS VIDEO IS FOR THOSE, INCLUDING ME, WHO CANNOT RETRIEVE THE PASSWORD AS THE ATTACK HAD STOPPED. I appreciate the messages but I was aware of this before filming, and this method I detail is for those who are unable to obtain the 7z log. Please kindly cease emailing me with advice on how to retrieve the 7z password, I appreciate it but I did cover that.
Original author of guide - bleepingcomputer.com/forums/t/749247/qlocker-qnap-nas-ransomware-encrypting-with-extension-7z-read-metxt/?p=5171398
Exact text dump of my code:
mkdir /mnt/rescue-share10
sudo mount -t cifs -o user=nasrecovery //RyzenVR/Share /mnt/rescue-share10
cd /mnt/rescue-share10
uname -a
(YouTube is shortening the web address below, the first part should be testdisk-7.2-WIP.linux26-x86_64.tar.bz2, the second testdisk-7.2-WIP.arm-none-linux-gnueabi.tar.bz2)
wget cgsecurity.org/testdisk-7.2-WIP.linux26-x86_64.tar.bz2 -O testdisk.tar.bz2
wget cgsecurity.org/testdisk-7.2-WIP.arm-none-linux-gnueabi.tar.bz2 -O testdisk.tar.bz2
tar -xvf testdisk.tar.bz2
cd testdisk*
chmod +x ./photorec_static
chmod +x ./photorec
sudo ./photorec_static
sudo ./photorec
If you're an Autodesk software customer check out these links for current promotions and special offers:
Tech3D Paid Autodesk Store Links!
Current Discount Promotions - bit.ly/AutodeskDiscounts
All Autodesk Products Page - bit.ly/AutodeskProducts
Tech3D Paid Autodesk Store Links! (Aus & NZ)
Current Discount Promotions - bit.ly/AutodeskDiscountsAUNZ
All Autodesk Products Page - bit.ly/AutodeskProductsAUNZ
————————————
Support the channel and support yourself, Pluralsight free trial here: pluralsight.pxf.io/c/1212769/424552/7490
————————————
FACEBOOK: facebook.com/TFICADTips
TWITTER: twitter.com/TFICADTips
————————————
————————————
Outro design by TGODdesigns: youtube.com/user/TGODdesigns
0:00 Important intro & disclaimer
2:35 Guide
#QNAP #Ransomware #Qlocker #Tech3D
This won't work for everyone, and it won't be a perfect solution for everyone, but it's something.
It's more than QNAP are doing. PLEASE READ - You can only recover the 7z password if the attack is still happening, I mentioned the 2 routes in the video. THIS VIDEO IS FOR THOSE, INCLUDING ME, WHO CANNOT RETRIEVE THE PASSWORD AS THE ATTACK HAD STOPPED. I appreciate the messages but I was aware of this before filming, and this method I detail is for those who are unable to obtain the 7z log. Please kindly cease emailing me with advice on how to retrieve the 7z password, I appreciate it but I did cover that.
Original author of guide - bleepingcomputer.com/forums/t/749247/qlocker-qnap-nas-ransomware-encrypting-with-extension-7z-read-metxt/?p=5171398
Exact text dump of my code:
mkdir /mnt/rescue-share10
sudo mount -t cifs -o user=nasrecovery //RyzenVR/Share /mnt/rescue-share10
cd /mnt/rescue-share10
uname -a
(YouTube is shortening the web address below, the first part should be testdisk-7.2-WIP.linux26-x86_64.tar.bz2, the second testdisk-7.2-WIP.arm-none-linux-gnueabi.tar.bz2)
wget cgsecurity.org/testdisk-7.2-WIP.linux26-x86_64.tar.bz2 -O testdisk.tar.bz2
wget cgsecurity.org/testdisk-7.2-WIP.arm-none-linux-gnueabi.tar.bz2 -O testdisk.tar.bz2
tar -xvf testdisk.tar.bz2
cd testdisk*
chmod +x ./photorec_static
chmod +x ./photorec
sudo ./photorec_static
sudo ./photorec
If you're an Autodesk software customer check out these links for current promotions and special offers:
Tech3D Paid Autodesk Store Links!
Current Discount Promotions - bit.ly/AutodeskDiscounts
All Autodesk Products Page - bit.ly/AutodeskProducts
Tech3D Paid Autodesk Store Links! (Aus & NZ)
Current Discount Promotions - bit.ly/AutodeskDiscountsAUNZ
All Autodesk Products Page - bit.ly/AutodeskProductsAUNZ
————————————
Support the channel and support yourself, Pluralsight free trial here: pluralsight.pxf.io/c/1212769/424552/7490
————————————
FACEBOOK: facebook.com/TFICADTips
TWITTER: twitter.com/TFICADTips
————————————
————————————
Outro design by TGODdesigns: youtube.com/user/TGODdesigns
0:00 Important intro & disclaimer
2:35 Guide
#QNAP #Ransomware #Qlocker #Tech3D
