NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
JanvdBrink
Nov 10, 2020Tutor
RN10200 – .mars malware infection: please help with suggestions…
Hi, yesterday i noticed that last Saturday the .mars malware had infected the data on my NAS. Unfortunately also the back-up files. I back-up to offline usb in the weekends :-( All my data was encryp...
StephenB
Nov 10, 2020Guru - Experienced User
My understanding is that the main vector of the malware is phishing email messages - so the first machine infected would likely be the one that you use to read email. If you allow remote access (say with ReadyCloud) then the PC might be one of the remote machines that you let access your NAS or home network.
Most of the removal guides I see on-line are focused on Windows (and occasionally MacOS). Are you using either operating system?
JanvdBrink
Nov 10, 2020Tutor
Thanks Stephen,
Mail is coming from the Ubuntu workstation and just backupped to the NAS. I will check the mail again, but till now I did not find any infected files.
I might scan my Ipad since in the past I used to copy files from it to the NAS as well.
I don't think I copied or moved any files from my (work) Windowslaptop to the NAS, but a check would do no harm.
I'll post the results.
Jan
- StephenBNov 10, 2020Guru - Experienced User
JanvdBrink wrote:
I don't think I copied or moved any files from my (work) Windowslaptop to the NAS, but a check would do no harm.
I'll post the results.
If the windows laptop has write access to the NAS then it might be the source of the infection (even though you didn't move files).
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!