[RANSOMWARE] >>READ 1st Post<< Deadbolt

Introduce yourself to us and other members here, or share your own product reviews, suggestions, and tips and tricks of using QNAP products.
Post Reply
biblob
New here
Posts: 3
Joined: Wed Jul 27, 2016 6:20 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by biblob »

Hello,

Please Could someone have a look on my transaction below ?

https://www.blockchain.com/btc/address/ ... u62nevq6ga

And tell me if I’ve made a mistake.
I have no op_return from 2 days now.

Regards
User avatar
dolbyman
Guru
Posts: 35248
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

The criminals seem to work off the codes in batches, you have to give it more time

Last key was issued on the 22nd (as of now)
https://www.blockchain.com/btc/address/ ... 8ajvsmfjjl
User avatar
OneCD
Guru
Posts: 12141
Joined: Sun Aug 21, 2016 10:48 am
Location: "... there, behind that sofa!"

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by OneCD »

biblob wrote: Sat Nov 26, 2022 2:30 am Please Could someone have a look on my transaction below ?

https://www.blockchain.com/btc/address/ ... u62nevq6ga
Your decryption key is: d03eb2fbf5bf4b5a971c56c2f0f87af4

ImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImage
biblob
New here
Posts: 3
Joined: Wed Jul 27, 2016 6:20 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by biblob »

Thanks it works. Half a good day.
User avatar
dolbyman
Guru
Posts: 35248
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

Never expose your NAS to WAN again and always have backups, then the "half good day" will be more a "full good day"
brewhahasjk
New here
Posts: 3
Joined: Sat Apr 15, 2017 6:18 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by brewhahasjk »

Hi

Can someone help a novice, paid ransom to bc1qqp6xjrncg3lyhac0j9385atc9ayqmfvflplxgq three days ago but not clear on how to find decryption key.

Thanks
User avatar
OneCD
Guru
Posts: 12141
Joined: Sun Aug 21, 2016 10:48 am
Location: "... there, behind that sofa!"

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by OneCD »

brewhahasjk wrote: Sun Dec 04, 2022 3:04 am … paid ransom to bc1qqp6xjrncg3lyhac0j9385atc9ayqmfvflplxgq three days ago but not clear on how to find decryption key.
Your decryption key is: 4db6fa0cbbaef2bd0255138d2e20f1c4

ImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImage
huesen
First post
Posts: 1
Joined: Sun Dec 04, 2022 7:42 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by huesen »

Unfortunately since weeks no reply to bc1qytrg95pwefvac5462rryam7arzgrh6xnn3pp2r
User avatar
OneCD
Guru
Posts: 12141
Joined: Sun Aug 21, 2016 10:48 am
Location: "... there, behind that sofa!"

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by OneCD »

huesen wrote: Sun Dec 04, 2022 7:45 am Unfortunately since weeks no reply to bc1qytrg95pwefvac5462rryam7arzgrh6xnn3pp2r
Your decryption key is: ef06c3bf127f61f218765fbecd263772

It was posted 2½ days after your ransom payment was made. ;)

ImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImage
brewhahasjk
New here
Posts: 3
Joined: Sat Apr 15, 2017 6:18 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by brewhahasjk »

OneCD wrote: Sun Dec 04, 2022 3:11 am
brewhahasjk wrote: Sun Dec 04, 2022 3:04 am … paid ransom to bc1qqp6xjrncg3lyhac0j9385atc9ayqmfvflplxgq three days ago but not clear on how to find decryption key.
Your decryption key is: 4db6fa0cbbaef2bd0255138d2e20f1c4
Perfect, thank you!
ffxf1
New here
Posts: 3
Joined: Sun Dec 04, 2022 10:12 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by ffxf1 »

No response to payment to address https://www.blockchain.com/btc/address/ ... v97azx758s for more than 72 hours (unless I am blind). Are the criminals taking longer and longer or have they stopped to return encryption keys?

Thanks in advance to everyone taking a look!
ffxf1
New here
Posts: 3
Joined: Sun Dec 04, 2022 10:12 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by ffxf1 »

I was also testing the EMSISOFT decoder and it can't see the mounted QNAP share. It only gives me drives C: and D:. Does anyone know a trick how to make that work?
dilertmb
First post
Posts: 1
Joined: Sun Dec 04, 2022 10:22 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dilertmb »

Hello, friends!
My QNAP was also infected with this virus.
Probably have to pay a ransom. Maybe someone has a key? I need to pay the ransom address - bc1qll79jzs53t5cwymx2hv43l58j7mhf9kc6rfa7n
User avatar
dolbyman
Guru
Posts: 35248
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

ffxf1 wrote: Sun Dec 04, 2022 10:16 pm No response to payment to address https://www.blockchain.com/btc/address/ ... v97azx758s for more than 72 hours (unless I am blind). Are the criminals taking longer and longer or have they stopped to return encryption keys?

Thanks in advance to everyone taking a look!
Your key was posted in the 1st of December

key:
a8b10ae4d4031df7b303c1ab0d2e9d54
User avatar
dolbyman
Guru
Posts: 35248
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

dilertmb wrote: Sun Dec 04, 2022 10:32 pm Hello, friends!
My QNAP was also infected with this virus.
Probably have to pay a ransom. Maybe someone has a key? I need to pay the ransom address - bc1qll79jzs53t5cwymx2hv43l58j7mhf9kc6rfa7n
nobody but the criminals have the key...without payment, you wont see it
Post Reply

Return to “Users' Corner”