wingchun222

Due to the amount of times that I have to cause trips during development, my wife has now threatened me with divorce if I do any development on this plugin while she's still awake In the webGUI, go to shares, Disk Shares, click on each disk in turn and change the settings to whatever they were (or you think they were). If you don't remember ever changing them in the first place, then they were probably set to public (RP sets them to secure if they were previously public). Also delete the comment line so that its easy to see when RP changes it I've set everything back to public as I had never changed them from their original defaults. How do I delete the comment line? I figured it out!!

Due to the amount of times that I have to cause trips during development, my wife has now threatened me with divorce if I do any development on this plugin while she's still awake In the webGUI, go to shares, Disk Shares, click on each disk in turn and change the settings to whatever they were (or you think they were). If you don't remember ever changing them in the first place, then they were probably set to public (RP sets them to secure if they were previously public). Also delete the comment line so that its easy to see when RP changes it I've set everything back to public as I had never changed them from their original defaults. How do I delete the comment line?

There is no attack history present. Did you delete the attack log? Did you uninstall and reinstall the plugin hoping that would fix it? Also post a screen shot of the shares tab I think I uninstalled it with that hope then thought it over and decided it might be a plugin that is better to have installed than not so I reinstalled it and set it to put bait fiales only in root which seems to be working fine so far other than my boo boo from the initial install and setting it to put squid files in all directories without realizing what I was doing. Thank you very much for your help by the way!! The uninstall thing is something that I spent some time go over in my head about what to do. Did I want to restore normal permissions or leave it in the tripped state. I ultimately decided that due to the nature of the plugin to leave it in the tripped state so that someone wouldn't merely uninstall the plugin in case of a legitimate attack and didn't understand what was going on. Unfortunately, what that means is that in the case of a reinstall without first fixing those share settings is that the plugin assumes that what is set is what its supposed to be. I'll change the uninstall routine to restore the permissions. That makes complete sense in the event of a real attack and this is totally my fault for being an idiot obviously lol. I dont mind restoring the share permissions for each disk but I am unsure how to go about doing so. I am a linux newb and always flying by the seat of my pants when it comes to these unraid bugs that I cause myself which forces to learn some new linux

There is no attack history present. Did you delete the attack log? Did you uninstall and reinstall the plugin hoping that would fix it? Also post a screen shot of the shares tab I think I uninstalled it with that hope then thought it over and decided it might be a plugin that is better to have installed than not so I reinstalled it and set it to put bait fiales only in root which seems to be working fine so far other than my boo boo from the initial install and setting it to put squid files in all directories without realizing what I was doing. Thank you very much for your help by the way!!

I tried running this via ssh but it doesnt seem to help.

Well, i uninstalled the Ransomware plugin after the initial trip and clicking of restore permissions, then re insalled the plugin. Here is a screenshot of my shares tab

Is that what you are after my good person?

As in the laptop I use to connect toe the unraid box? If so then yes. This has been going on for a week or two now, I just now have some time to sit and try to get it sorted out.

As in stop and restart the plugin? Yes, I have rebooted the Unraid box a few times and the problem persists. Right now it is as if it has never been tripped. I can click the lock to set everything to read only, then click to restore permissions but it continues to stay read only seemingly only in /appdata/downloads

I had done that but unfortunately the problem still persists and it constitutes to say my shares are read only even after I clicked restore smb permissions on the popup.

So lets say I installed this, configured everything then I did what it told me not to and deleted a file which tripped the protection so inadvertently I tested it on my system lol. Now I have the Ransomware plugin set up properly but after the initial trip my /appdata/dowloads/ folder share on my ssd drive wont allow me to delete anything via windows (my downloads folder where i do a lot of renaming, deleting etc) but deleting things in MC works fine and none of my dockers are having any issues moving or renaming files. Also, when I go to my shares tab in Unraid under disk shares it says they are all "read only mode. restore normal settings via Ransomware protection settings". I am not sure how to un-do what I have done.

I just came across this awesome plugin so I installed it and gave it a shot. One thing I immediately noticed is that when I delete a movie from my share (of which I do quite often) it triggered the alert and turned off the smb share as it should and alerted me and I chose the appropriate response. If I am deleting files quite often will this just be what I have to get used to dealing with? How serious is this threat? I have never had any ransomware virus or anything remotely like that. I just don't get duped by clicking on stupid links etc. That being said there is a 12 year old in the house and I have no doubt he would accidentally click on some dumb shi% and get that kind of virus. I never even really though about any of this affecting my unraid box until I came across this plugin.