ASUSTOR NAS Data Recovery
ASUSTOR Lockerstor and Drivestor NAS data recovery for ADM firmware crashes, Deadbolt ransomware, degraded RAID arrays, and failed storage pools. ASUSTOR uses Linux mdadm software RAID with Btrfs or EXT4 filesystems. We image every member and reconstruct offline. Free evaluation. No data, no recovery fee.
Lockerstor and Drivestor Series
Lockerstor Series
- Models: AS6604T (4-bay), AS6704T (4-bay Gen 2).
- RAID: RAID 0, 1, 5, 6, 10, JBOD.
- Filesystem: Btrfs or EXT4 (user-selected during volume creation on ADM 3.3+).
Drivestor Series
- Models: AS1104T (4-bay), AS3304T (4-bay).
- RAID: RAID 0, 1, 5, 6, 10, JBOD. Same mdadm layer as Lockerstor.
- Filesystem: ASUSTOR's specifications list EXT4 as the internal disk file system for the AS1104T and the AS3304T.
What is inside an Asustor ADM 4.x volume?
Asustor Data Master (ADM) 4.x isn't a proprietary stack. It runs standard Linux mdadm software RAID with either ext4 or Btrfs.- mdadm software RAID: ADM groups the member drives into a Linux mdadm array. Recovery on a Linux workstation uses mdadm --assemble --readonly against the imaged members.
- ext4 or Btrfs on top: ADM 3.3 introduced Btrfs and Snapshot Center. ADM 4.0 kept both and made them more stable at the kernel level.
Btrfs adds checksums and copy-on-write snapshots used by Snapshot Center. You can't convert a volume formatted as ext4 to Btrfs.
Because the stack is standard Linux mdadm with ext4 or Btrfs, the imaged members reassemble on a Linux workstation without an Asustor unit.
How does ADM compare to Synology DSM and QNAP QTS?
ADM, Synology DSM, and QNAP QTS all use Linux mdadm for RAID. QNAP QuTS hero is the outlier: it uses ZFS.| NAS OS | RAID engine | Primary filesystem |
|---|---|---|
| Asustor ADM 4.x | Linux mdadm | Btrfs or ext4 |
| Synology DSM 7.x | Linux mdadm | Btrfs or ext4 |
| QNAP QTS 5.x | Linux mdadm | ext4 |
| QNAP QuTS hero | ZFS | ZFS |
Common ASUSTOR NAS Failure Modes
- Deadbolt Ransomware (February 2022): Deadbolt attacked ASUSTOR NAS devices, encrypting user files and giving them a .deadbolt extension. Recovery depends on whether you got a decryption key or whether pre-attack snapshots exist on the Btrfs volume.
- Storage Pool Degraded: One or more member drives have dropped out. ADM begins rebuilding the volume when it detects a replacement drive.
A rebuild puts every surviving member under sustained read load. If the data is irreplaceable and you don't have a verified backup, power down instead of rebuilding.
- Volume Inaccessible After Power Loss: Do not format the volume.
Do not reinitialize. Creating a new storage pool or formatting the drives overwrites the RAID superblocks and filesystem metadata needed for recovery. Power down, label drives, and contact us.
What happens when a second drive fails during an ADM array rebuild?
- mdadm resync: When a member drive fails, the array keeps running degraded on the survivors. Insert a replacement and ADM issues a standard mdadm resync that rebuilds the missing member block by block from parity or from the mirror. There is no proprietary Asustor rebuild engine. It is the Linux md driver doing the arithmetic on ordinary hardware.
- A second dropout during the resync fails a RAID 5 array: A RAID 5 array is already running with zero redundancy while it rebuilds. If a second drive drops out mid-resync, a marginal drive that fails under the sustained read load or an SMR drive that stalls past the Linux block-layer timeout, mdadm can no longer reconstruct the missing stripes and the array stops mid-write.
- Do not let ADM keep rebuilding: If the data is irreplaceable and you don't have a verified backup, power the unit down. That freezes the array in its current state so a lab can work from stable images.
Clone every member drive before any repair tool touches the array, then reassemble the mdadm array read-only on a Linux workstation. On Btrfs we use btrfs-find-root to locate a surviving older generation root and btrfs restore to extract data without writing to the array. On ext4 we replay or correct the journal against the clones. Never run mdadm --create, btrfs check --repair, or a writable recovery mount as a fix, because each one overwrites metadata the extraction depends on.
Snapshot Center restore or offline reconstruction: which path applies?
- If the Btrfs snapshots are intact
- When snapshots taken before the damage are still present, Snapshot Center can restore the files to an earlier version.
- If the snapshots are corrupted, deleted, or scrubbed
- If the ransomware or a crash corrupted the snapshots and they are gone, offline read-only forensic recovery from cloned images is required. We image each member, use btrfs-find-root to locate a surviving older generation tree root, and run btrfs restore to extract data without writing to the array. This is the same clone-first discipline we apply to any RAID array reconstruction.
- Never treat btrfs check --repair as a safe fix
- Don't run btrfs check --repair as an in-place repair. Btrfs is copy-on-write, so it writes a changed tree block to a newly allocated block and updates the pointers to it. An in-place repair overwrites the older generation tree roots that forensic recovery depends on.
How We Recover Data from an ASUSTOR NAS
ASUSTOR uses Linux mdadm for RAID management. Recovery follows our standard image-first workflow.- Free evaluation: Document the ASUSTOR model, ADM version, RAID level, filesystem type, and failure symptoms. For Deadbolt cases, we assess encryption state and check for surviving snapshots.
- Member imaging: We image each member drive on PC-3000 or DeepSpar hardware. If a drive needs a head swap, we do it in our clean bench before imaging.
- RAID reconstruction: mdadm superblocks from the member images provide stripe size, parity rotation, and member order. Data Extractor Express RAID Edition assembles the virtual array from clones.
- Filesystem extraction: Btrfs subvolumes and snapshots or EXT4 journal replay and inode reconstruction. Files are extracted, verified, and copied to target media.
- Delivery: We ship the recovered data on your target drive.
What do ADM, Snapshot Center, and MyArchive mean?
- Asustor Data Master (ADM)
- The Linux-based NAS operating system on every Lockerstor and Drivestor. ADM is the graphical layer over the mdadm and Btrfs or ext4 stack. The on-disk format is standard Linux, not proprietary.
- Snapshot Center
- A GUI front-end for Btrfs subvolume snapshots. Snapshots are copy-on-write. They live on the same Btrfs filesystem as the source data and share blocks with the original until those blocks change.
- MyArchive
- MyArchive lets you use hard drives as removable storage archives. You can format a MyArchive drive as EXT4, Btrfs, exFAT, NTFS, or HFS+, and you can encrypt one that's EXT4 or Btrfs.
What does each Asustor LED state mean?
Front-panel LEDs are the first diagnostic before any drive comes out of the chassis.- Power LED: Steady means the chassis is on.
- System Status LED: Flashing green means the unit is booting. Steady green means the boot process is complete.
On AS33 and AS66 models, red means a malfunction. On AS11 models the system LED is green only, and a dim, intermittent flash means a malfunction. On AS66 models, orange means sleep. If the LED flashes green for more than ten minutes with no drives installed, ASUSTOR says to contact its technical support.
- Hard Disk LED, per bay: Steady green means the drive is ready. Flashing green means the drive is accessing data. Steady red means a hard drive malfunction.
ASUSTOR NAS Recovery Pricing
Two-tiered pricing: per-member imaging fee plus an array reconstruction fee. If we recover nothing, there is no recovery fee.Member Imaging
Logical/firmware per drive
$250–$900
Array Reconstruction
mdadm + Btrfs/EXT4 extraction
Quoted after evaluation
Mechanical Member
Clean-bench head swap per drive
$1,200–$1,500
ASUSTOR member-drive recovery is hard drive recovery. Each drive we pull from your Lockerstor or Drivestor is imaged & recovered at the standard per-drive hard drive tiers below, & those per-member figures roll into the imaging fee above. For how the per-drive imaging fee & the array reconstruction fee add up across a full array, see the NAS data recovery cost breakdown.
- Low complexity
Simple Copy
Your drive works, you just need the data moved off it
Functional drive; data transfer to new media
Rush available: +$100
$100
3-5 business days
- Low complexity
File System Recovery
Your drive isn't recognized by your computer, but it's not making unusual sounds
File system corruption. Accessible with professional recovery software but not by the OS
Starting price; final depends on complexity
From $250
2-4 weeks
- Medium complexity
Firmware Repair
Your drive is completely inaccessible. It may be detected but shows the wrong size or won't respond
Firmware corruption: ROM, modules, or translator tables corrupted; requires PC-3000 terminal access
CMR drive: $600. SMR drive: $900.
$600–$900
3-6 weeks
- High complexity
Head Swap
Bench diagnosis found the read/write heads have to be replaced. Clicking can also come from firmware, the preamp, or the spindle
Head stack assembly failure. Transplanting heads from a matching donor drive on a clean bench
50% deposit required. CMR: $1,200-$1,500 + donor. SMR: $1,500 + donor.
50% deposit required
$1,200–$1,500
4-8 weeks
- High complexity
Surface / Platter Damage
Your drive was dropped, has visible damage, or a head crash scraped the platters
Platter scoring or contamination. Requires platter cleaning and head swap
50% deposit required. Donor parts are consumed in the repair. Most difficult recovery type.
50% deposit required
$2,000
4-8 weeks
Hardware Repair vs. Software Locks
Our "no data, no fee" policy applies to hardware recovery. We do not bill for unsuccessful physical repairs. If we replace a hard drive read/write head assembly or repair a liquid-damaged logic board to a bootable state, the hardware repair is complete and standard rates apply. If data remains inaccessible due to user-configured software locks, a forgotten passcode, or a remote wipe command, the physical repair is still billable. We cannot bypass user encryption or activation locks.
No data, no fee. Free evaluation and firm quote before any paid work. Full guarantee details. Head swap and surface damage require a 50% deposit because donor parts are consumed in the attempt.
- Rush fee
- +$100 rush fee to move to the front of the queue
- Donor drives
- Donor drives are matching drives used for parts. Typical donor cost: $50–$150 for common drives, $200–$400 for rare or high-capacity models. We source the cheapest compatible donor available.
- Target drive
- The destination drive we copy recovered data onto. You can supply your own, or we'll provide one. For larger capacities (8TB, 10TB, 16TB and above), target drives cost $400+ extra. All prices are plus applicable tax.
Sealed helium drives are on their own price list, $200–$5,000+. When a head swap or platter repair opens one, we refill it with helium. That adds $400–$800, and the donor has to be an exact match. Helium drive prices
No Data = No Recovery Fee. If we can't recover usable data from your ASUSTOR NAS, there's no recovery fee.
ASUSTOR NAS Recovery FAQ
Can you recover data after an ASUSTOR ADM firmware crash?
Can you recover data after Deadbolt ransomware on an ASUSTOR NAS?
Does my ASUSTOR NAS use Btrfs or EXT4?
Should I use ASUSTOR Snapshot Center to roll back, or send the drives for offline recovery?
Can I move ASUSTOR drives to another NAS after a failure?
Data Recovery Standards & Verification
Our Austin lab operates on a transparency-first model. We use industry-standard recovery tools, including PC-3000 and DeepSpar, combined with strict environmental controls to maintain drive integrity. This approach allows us to serve clients nationwide with consistent technical standards.
Localized Clean Zone
Open-drive work is performed in a 0.02 micron ULPA-filtered laminar clean bench.
Transparent History
Serving clients nationwide via mail-in service since 2008. Our lead engineer holds PC-3000 and HEX Akademia certifications for hard drive firmware repair and mechanical recovery.
Media Coverage
Our repair work has been covered by The Wall Street Journal and Business Insider, with CBC News reporting on our pricing transparency. Louis Rossmann has testified in Right to Repair hearings in multiple states and founded the Repair Preservation Group.
Aligned Incentives
Our "No Data, No Charge" policy means we assume the risk of the recovery attempt, not the client.
Technical Oversight
Louis Rossmann
Our engineers review all lab protocols to maintain technical accuracy and honest service. Since 2008, his focus has been on clear technical communication and accurate diagnostics rather than sales-driven explanations.
We believe in showing the bench rather than just describing it. Open-drive work runs on a 0.02 micron ULPA-filtered laminar clean bench, and we filmed it.
See the particle counter test at the benchSince 2008
Established
As Featured In
Related services
Related Recovery Services
All NAS brands: Synology, QNAP, Buffalo, WD My Cloud & more.
RAID 0, 1, 5, 6, 10 array reconstruction from failed members.
Head swaps, firmware rebuilds, & platter recovery for NAS member drives.
Dell, HP, & Supermicro rackmount server recovery.
LUKS, BitLocker, & hardware-encrypted NAS volumes.
ASUSTOR NAS down? Start a free evaluation.
Ship your drives or walk in at our Austin lab. No data, no recovery fee.