Jump to content

maace

Members
  • Posts

    1
  • Joined

  • Last visited

Reputation

0 Neutral
  1. My first time seeking community help. Think I'm following the rules, but apologies in advance and thanks for your patience if I need some correction. CURRENT STATUS I keep most of my data on a Ready NAS array. Recently, I noticed a duplicate data folder on the NAS, plus extra characters eg: -- | - MYstuff | - MYstuff~QRXWAC I read that making a duplicate folder is one step in the method of some ransomware. MY ACTIONS _ I renamed the duplicate folder (on the off chance a renaming might stop or slow down the malware) _ I successfully made copies of SOME folders _ I disconnected and powered down the NAS, reasoning that I wasn't confident betting that I'd be able to copy faster than the malware could do its damage I'd be smarter to get expert help asap BACKSTORY and other details _ 1-2 days prior, a Chrome session on a networked Win8.1 laptop (that HAS access to the NAS using ReadyNAS's RAIDar app) said Chrome hadn't shutdown properly and gave me the option to "Restore" I've chosen "Restore" in the past, and it always seemed to work, but this time, the page displayed "Hallo." and the URL pointed to a start.html file in a Temp folder _ on the NAS there are definitely some files I'm not permitted to access _ further attempts to copy while in Win7 do nothing _ on my homebuilt machine, (dual boot, Windows 7 Pro and Ubuntu 14.04 LTS) I noticed that there was an "ubuntu" username among the Windows usernames _ I'm hoping I can restore everything, because although many files are backed up, (both locally and remotely), some oft-updated files are not _ I've kept offline BOTH the Win7/Ubuntu 14.04LST desktop the Win8.1 laptop Caveat: I've booted both from Ubuntu MRT Live CD, now, but realized I'm floundering and need help _ I have a number of machines on the network, and believe the Linux machine I'm using for these log entries should be sterile Ready to follow community advice and thank you so much, in advance.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.