TerraMaster Forum

I need to know what to fill here to keep the same access I have both form my own LAN (10.0.1.XX) and from my phone when I'm away from the LAN

Create
Incoming IP
• All
○ Single IP Address
________________________________________
○ Subnet Address
________________________________________
○ IP Address Range
________________________________________

Received an email from TM early this morning to update TOS to 4.2.30. they weren't specific in what they've done but they indicated that the update addresses the Deadbolt vulnerability.

I put one of my systems onto the Internet briefly to run the update which went smoothly. Ever since the industry NAS encryptions started, I keep my TOS units off the Internet except for occasional brief updates.

If you haven't received the email, update your email address with TM and update to 4.2.30 now.

I have dealt with Ransomware attacks on behalf of the my clients... and the only defense is prevention, prevention & prevention...

>>> Yes; should do a security checkup; as suggested...
(disable admin account); master account with insane password; stored securely (not on the system/browser); use a good (password-manager)... I use (RoboForm.com).... then use a (standard user account); for sharing over the network...

>>> Overlooked protection on Windows & NAS systems are (VSS-snapshots)....
Backup is good; if isolated; so that can't be deleted or encrypted... must lockout even yourself; allowing only a password; stored in a physical safe... Treat like launching nuke weapons... Store master passwords on paper; in a safe; at bank... Now back to (VSS-snapshots)...

(VSS-Snapshots) have been used in Windows for over 20-years, but often overlooked... and since NAS are often very large; often would need a second NAS to even consider a backup... A snapshot tracks changes to a volume; using only a tiny amount of storage... when a ransomware event happens; You can ROLLBACK to the prior state of volume; reversing the changes to a volume, even ransomware.... Ransomeware works quickly; only encrypts file headers; making files useless, but only small changes to volume... With (VSS-Snapshots) (enabled in advanced); you can undo changes to the volume in just minutes... In windows, store all data on a dedicated volume (DRIVE-D); and via "Disk Manager" enable "Shadow Copies"... when the volume is attacked by virus; ransomware; or deleted files; you simply restore the state of volume; to a time before the attack...
(TERRA-MASTER) has a "SNAPSHOT" app; that should work the same way....

Hooray I have all the data back. I have done the tutorial from @Bellcorp (Thanks).
I did the whole thing without an internet connection to be on the safe side!

1. I shut down the NAS
2. removed all 4 hard drives
3. booted up the Nas
4. searched the nas with TNAS PC.
5. did the standard setup and assigned an IP address.
6. shut down the nas
7. installed hard drives in the same order as they were removed.
For whatever reason there was no re-initialization or formatting of TOS because of the hard drives.
I was able to log into TOS immediately and configure the device.

I can access all data. However, the folder structure looks strange. And I still have problems with SMB access.

I had previously set up custom shares for my Nas users. Logically, these users have been deleted by the reset. Among other things, there was my user with sensitive and important data. I was able to access this data by creating the same user I had before. It does not seem to have been encrypted, although the deadbolt message popped up.

I hope this may help someone. I have had no data loss and just upgraded to the new TOS version 4.2.30.

I hope the spook is over now! But who knows what the future will bring.

Translated with www.DeepL.com/Translator (free version)

So I have now checked the data.

About 2 TB of movies and documentaries were encrypted.

Fortunately the backup is pretty up to date. I have 2 hard drives of these.One backs up all data every night and is connected directly to the nas, the 2nd hard drive is connected to my PC and syncs weekly. I can fortunately restore backup. Just takes time.

I did the TOS update 4.2.30 and everything is working so far. Good work TM team. Is there any good antivirus software for the nas devices?

Anyone know this company or this software? Has anyone tried it? I haven't been able to prove it yet
https://www.emsisoft.com/ransomware-dec ... s/deadbolt

Roccia7 wrote:
> Anyone know this company or this software? Has anyone tried it? I haven't
> been able to prove it yet
> https://www.emsisoft.com/ransomware-dec ... s/deadbolt

All this "decryptor" does is allow the user to implement the decryption key that was purchased to be used on the files. You still have to pay the ransom.

mapawluk wrote:
> Roccia7 wrote:
> > Anyone know this company or this software? Has anyone tried it? I haven't
> > been able to prove it yet
> > https://www.emsisoft.com/ransomware-dec ... s/deadbolt
>
> All this "decryptor" does is allow the user to implement the decryption key
> that was purchased to be used on the files. You still have to pay the ransom.
I didn't know, thanks

ChinChillaH wrote:
>
Have you seriously recovered the information? Photos, documents, audio, movies,..... everything?

if so i cant wait to get home to start

that titorial was sent to my email by terramaster so it's not mine, but if you say it worked for you it's a great relief

Can we talk about the accountability of TerraMaster!
It's nice to bring a new TOS fix, but what about the encrypted files!
The way they address this even in their text gives me the feeling that they don't take the responsibility for this! and that's not ok!