My WD Cloud mirror have been affected with ransomware with extension oori files. When i access through with Lan Network like a drive all files with .oori and when i access through remotely with email address all files is safe bit unable to download
You may want to move your post (or start a new one) in the appropriate subforum for your device where users of your My Cloud Mirror generation model may be able to assist.
Gen 1 My Cloud Mirror (OS3):
https://community.wd.com/c/personal-cloud-storage/wd-my-cloud-mirror/110
Gen 2 My Cloud Mirror (OS5):
https://community.wd.com/c/os5/my-cloud-mirror/253
One may just want to securely delete all user data on the My Cloud drive if it has been infected by ransomware/malware by performing a My Cloud Dashboard > Settings > Utilities > Full Restore. From there one can, if they have been backing up their My Cloud, restore the user data from a clean backup that hasn’t been infected by the ransomware. There is no guarantee that a infected machine can be cleaned or the files unencrypted by available public decryption methods if any exist for the ransomware.
If one has a My Cloud device that cannot be updated to OS5 then one should immediately block all broadband/internet access to that device.
One should immediately reassess their network security in light of the ransomware/malware infection and implement new security measures immediately to reduce the possibility of being reinfected. This includes disabling non secure methods of local network access and My Cloud access. Prevent guests from accessing the My Cloud. Do not use guest WiFi or unsecure WiFi. Password protect all My Cloud Shares and the My Cloud Dashboard. Use strong passwords throughout the local network. If one’s My Cloud can be updated to OS5 then update it immediately.
