I've been in IT for about 15 years, supporting small business networks and individuals. I've done lots of virus/malware cleanup in my time.
If the given file name is right, there are a couple decryptors that MAY decrypt the files. They will only work if the infection on the QNAP files is a variant supported by the tool. If the malware has been modified and the encryption algorithm changed, then the files will NOT be able to decrypted.
As far as the cleanup, the virus is on a computer that has access to the QNAP, not on the QNAP itself.
This bid's scope is defined by the milestones. Additional computers will be billed at $25 each.