Hello,
If we were to work together, i'd like to understand the following.
* scope, how many devices has access to infected machine ( nas in your case)
* is this domain joined?
* Do you know the source of infection?
* Access permissions on the folder. ( which we can figure out)
Let me know the details and if you'd like me to investigate. I do this for hospitals in Canada, so most probably i should be able to tell you.
Most importantly, do not overwrite or delete any files, incase thereare shadow copies if you'd like t recover content from it, no gurantee though...
Anyways, let me know
thx
darshak.