R-Studio Overview R-Studio is a family of powerful and cost-effective undelete and data recovery software for experienced data recovery professionals. Empowered by the new unique data recovery technologies, R-STUDIO is the most comprehensive data recovery solution for recovery files from NTFS, NTFS5, ReFS, FAT12/16/32, exFAT, HFS/HFS+ (Macintosh), Little and Big Endian variants of UFS1/UFS2 (FreeBSD/OpenBSD/NetBSD/Solaris) and Ext2/Ext3/Ext4 FS (Linux) partitions. R-Studio also uses raw file recovery (scan for known file types) for heavily damaged or unknown file systems. It functions on local and network disks, even if such partitions are formatted, damaged or deleted. Flexible parameter settings give you absolute control over data recovery. R-Studio functions on local and network disks, even if such partitions are formatted, damaged or deleted. Flexible parameter settings give you absolute control over data recovery. The R-Studio data recovery software was originally developed for use by data recovery experts, system administrators, IT professionals, and advanced and experienced computer users. Some of R-Studio’s features were even designed exclusively for computer forensic experts, and most R-Studio users don’t need every single feature of the software. Features of R-Studio Standard Windows Explorer – style interface. Host OS: Windows 2000, XP, 2003 Server, Vista, 2008 Server, Windows 7, Windows 8, Windows 10, Windows Server 2012. Data recovery over the Network. Files can be recovered on network computers running Win2000/XP/2003/Vista/2008/Windows 7/Windows 8/Windows Server 2012, Macintosh, Linux, and UNIX. Supported file systems: FAT12, FAT16, FAT32, exFAT, NTFS, NTFS5, ReFS (a new file system introduced in Windows 2012 Server), HFS/HFS+ (Macintosh), Little and Big Endian variants of UFS1/UFS2 (FreeBSD/OpenBSD/NetBSD/Solaris) and Ext2/Ext3/Ext4 FS (Linux). Scan for Known File Types (raw file recovery): if the disk file system is heavily damaged or unsupported, R-Studio searches for specific data patterns (“file signatures”) typical for certain file types (Microsoft Office documents, jpgs, etc.). Such known file types can be custom-defined. Recognition and parsing Dynamic (Windows), Basic(MBR) and BSD (UNIX) partitions layout schema and Apple partition map. Dynamic partitions over GPT are supported as well as dynamic partitions over MBR. Damaged RAID recovery. If the OS cannot recognize your RAID, you can create a virtual RAID from its components. Such virtual RAID can be processed like a real one. Creates IMAGE FILES for an entire Hard Disk, Partition or its part. Such image files can be compressed and split into several files to put it on CD/DVD/flash or FAT16/FAT32/exFAT. Then the image files can be processed like regular disks. Data recovery on damaged or deleted partitions, encrypted files (NTFS 5), alternative data streams (NTFS, NTFS 5). Recovering data if FDISK or other disk utilities have been run; VIRUS has invaded; FAT is damaged; MBR is destroyed. Recognizes localized names. Recovered files can be saved on any (including network) disks accessible by the host operating system. VirusTotal Results: Setup: https://www.virustotal.com/gui/file/2d3f7bb05009dd62cb3d8cf317890d7740f701ec11d2c2c708d4d30f3ad5b991 https://www.virustotal.com/gui/file/5e58cca97705b08299b6503a1666f9d7befa3f7c6b18d11384a4c2c505101615 Patch: https://www.virustotal.com/gui/file/adef706f6791fa2f48f130a9c0d09e0419589bd069de04a6410398cf55e05d6d