Aug 5, 2021
4
0
10
0
Hey guys,
I would like to acess my data, but cant acess the drives.
My situation:
I set up my RAID 0 with high-water allocation method with 5 drives, 2x2TB and 3x1TB
It was all just a normal PC with an unraid Boot Stick.
I filled it up with 3,3TB of important files, windows backups etc.
but I’m pretty sure that only 2 drives were really utilized
Some ransomeware virus named Djvu STOP moqs encrypted all my files on every machine in my network.
All files, but some essential windows files like .dll were encrypted
These files are not decryptable because of sha256.
Most of the files in the share/array on my NAS are encrypted
The USB drive, which hold the UNRAID OS and the NAS configuration is also encrypted
I have the paid version so I still habe the activation key
Is there any way to acces the data, which is still on the drives without the config stick?
Any help would be greatly appreciated. Gratitude in advance for any answer.
<Mod Edit - No monetary remuneration allowed>
 
Last edited by a moderator:

USAFRet

Titan
Moderator
Mar 16, 2013
146,052
9,014
175,340
22,747
The way to access the data from a failed RAID array is from the full backup of this RAID array.

A RAID 0?
How do you figure that only 2 drives out of 5 were used?

A RAID 0 with 2 + 2 + 1 + 1 + 1 = 5TB RAID 0 array.
3.3TB data on it is almost 3/4 full.

Ransomware?
Again, from your backup.
RAID is irrelevant, there is no coming back from that.
 
Aug 5, 2021
4
0
10
0
Thanks for your reply!

i stored the backups on the NAS.

In my RAID OS called: UNRAID OS, there you can choose some allocation methods, and i chosed the method: High-Water.
i did not know that it was doing, but i realized after some months, that only one drive was filled up and another one only a bit.
Maybe can i acess the filled up drive with linux or any special tool?
 

USAFRet

Titan
Moderator
Mar 16, 2013
146,052
9,014
175,340
22,747
Thanks for your reply!

i stored the backups on the NAS.

In my RAID OS called: UNRAID OS, there you can choose some allocation methods, and i chosed the method: High-Water.
i did not know that it was doing, but i realized after some months, that only one drive was filled up and another one only a bit.
Maybe can i acess the filled up drive with linux or any special tool?
So you have a full backup of this data?
 
Aug 5, 2021
4
0
10
0
Why not?
Please give us some more detail on this.
Some ransomeware virus named Djvu STOP moqs encrypted all my files on every machine in my network.
All files, but some essential windows files like .dll were encrypted
These files are not decryptable because of sha256.
Most of the files in the share/array on my NAS are encrypted
The USB drive, which hold the UNRAID OS and the NAS configuration is also encrypted
 

USAFRet

Titan
Moderator
Mar 16, 2013
146,052
9,014
175,340
22,747
Some ransomeware virus named Djvu STOP moqs encrypted all my files on every machine in my network.
All files, but some essential windows files like .dll were encrypted
These files are not decryptable because of sha256.
Most of the files in the share/array on my NAS are encrypted
The USB drive, which hold the UNRAID OS and the NAS configuration is also encrypted
So....

Your actual system was in this RAID 0. OS and everything. (said RAID 0 you didn't really know what you were doing)
Your 'backup' was on the NAS.

This is all now encrypted with this ransomware.

You are Out. Of. Luck.
 

ASK THE COMMUNITY