Unable to fix Qlocker attack

Don't miss a thing. Post your questions and discussion about other uncategorized NAS features here.
Post Reply
ALFBREIZH2
First post
Posts: 1
Joined: Sun Jan 23, 2022 11:00 pm

Unable to fix Qlocker attack

Post by ALFBREIZH2 »

Hi all,

I have been attacked with Qlocker. At first I was confident with all helps and Qrescue tool to fix it, however I am facing the following issues:
_Impossible to install Qrescue, installation process fails to look for update at its end and causes the installation process to stop
_Impossible to establish an ssh connection, socket is closed

I try to repair the update access issue by following the QNAP procedure described hereafter but I end-up by no improvement
https://www.qnap.com/en/how-to/faq/arti ... ifications

I try to reset the ssh service by desactivate/reactivate the service (also switching port) with no success (same for telnet). I have verified the activation of the binding service for ssh. By using Qpro from my computer (instead of putty) the software offers to activate the ssh service even if the box with the service is ticked.
By using nmap, the ssh is not found on my QNAP.

I haven't reboot my QNAP since the attack, it is a QNAP-253A with QTS5.0.

If someone has an idea to help me I will greatly appreciate.
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Unable to fix Qlocker attack

Post by dolbyman »

check the qlocker thread

viewtopic.php?f=45&t=160849&start=765

next time..never expose your NAS again and always have external backups
Post Reply

Return to “Miscellaneous”