News:

Buffalo provides Data Recovery services. Read about it here.

Main Menu

TS5400D Renamed Folders

Started by awitbeck, June 27, 2022, 10:24:06 AM

Previous topic - Next topic

awitbeck

Over the weekend, 641 of 882 folders in a SMB File Sharing folder were renamed to strings with the format "xxxxxx~x" where "x" is a numeral or uppercase letter.

These folders contain images and were named with our production job number for reference purposes, which now has been rendered useless.

If these filenames can be decoded, I'd appreciate the method to do so.

If this issue has a remedy that will prevent it from ever happening again, I would appreciate that solution as well.

davo

Sounds like the unit may have been hit with malware or ransomware?
PM me for TFTP / Boot Images / Recovery files  LSRecovery.exe file.
Having network issues? Drop me an email: info@interwebsireland.com and we will get it fixed!

Have i helped you? Buy me a coffee as a thanks!
https://buymeacoffee.com/buffalodavo

JoeAsheville

Quote from: davo on June 28, 2022, 08:46:10 AM
Sounds like the unit may have been hit with malware or ransomware?

Sure sounds like ransomware. Why people continue to insist on using the Server Message Block protocol is beyond me. It's subject to numerous exploits.

Browser ID: smf (is_webkit)
Templates: 4: index (default), Display (default), GenericControls (default), GenericControls (default).
Sub templates: 6: init, html_above, body_above, main, body_below, html_below.
Language files: 5: index+Modifications.english (default), Post.english (default), Editor.english (default), Drafts.english (default), StopForumSpam.english (default).
Style sheets: 4: index.css, attachments.css, jquery.sceditor.css, responsive.css.
Hooks called: 168 (show)
Files included: 35 - 1354KB. (show)
Memory used: 999KB.
Tokens: post-login.
Queries used: 19.

[Show Queries]