Not 100% sure this is an Unraid problem but it is affecting the server as well so I'm starting here. ALL the files (MP4,MKV,MP3,JPEG ect) on both the unraid server and my PC and an external HDD on the PC have been rendered down to 0 byte size. If I change to be able to view hidden files on any of the places mentioned, I find a 'sister' file for everything but with a weird file type extension. eg. W35IQJ0 File (.w35iqj0) If I try to open a video file of this type (VLC Player) it plays fine and dandy. I had been watching some content on Plex and had gone away for half hour or so and then nothing would play and the only thing that MAY have happened in that time was a weird little file that showed up the my "completed downloads" folder as a shortcut so I deleted it before I realised any of this other had happened so I'm wondering if I may have picked up a maleware bug of some sort but I've scanned it a few times and can't find anything. Like I said earlier, I have a feeling this may be an issue with the PC. but I dont know where to start fixing the 16 odd TB of files on the server. Any help would be greatly appreciated

Are you sharing any folders on your PC?    If you are not, the problem is on your PC!  I would set your shares on your Unraid server for all users to be read-only. 

 

Then google about the issue assuming that the problem is on your PC.  You may have to be creative is how you search by using different search terms.  (Google isn't that smart when answering queries that are complex!  It does a good job when you ask a simple question that many people already know the answer--- Who was the first president of the United Sates.  Or is a common current topic--- Where was vance born?)  I would start with a query like----  "Windows 10, zero bite files, files with random characters for extensions". 

Thanks, I'll give it a try. If I try to rebuild the drives from the parity, will that get them back like they were or just rebuild them like they are now?

 

Parity is realtime, not a backup. What's there now is what will be rebuilt if a drive is replaced.

 

Sounds like you have some flavor of ransomware working its way through your system.

Yeah  was afraid of that. I have separate back ups for most of it so its not a complete loss. It seemed to go thru almost instantly. Even excel, word ect files were changed. Thanks guys

1 minute ago, Nathan Knight said:

It seemed to go thru almost instantly.

The rename is pretty much instant, the encryption to finish the "ransomware" bit happens in the background, limited by the performance of the infected pc.

That would make sense. Looks like I've got some transferring of back up files to do. Thanks for your insight mate