bootless

My Synology NAS is affected too. I have no idea where the malware came from. I have now shut down my system to prevent future damage. My /home directory isn't affected. Where do I have to look for the binary? And how can I search the filesystem without to worry about the ransomware encrypting more files? Thank you in advance for future help.