[RANSOMWARE] >>READ 1st Post<< Deadbolt

Introduce yourself to us and other members here, or share your own product reviews, suggestions, and tips and tricks of using QNAP products.
Post Reply
FSC830
Experience counts
Posts: 2043
Joined: Thu Mar 03, 2016 1:11 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by FSC830 »

Gael82 wrote: Fri Nov 18, 2022 9:59 pm ...
bc1qy36nsljkr3c7r20zkcfwn4xm0vu9hwfsfvkpmvbc1qy36nsljkr3c7r20zkcfwn4xm0vu9hwfsfvkpmv
...
Is that a typo?
Address is doubled: bc1qy36nsljkr3c7r20zkcfwn4xm0vu9hwfsfvkpmv should be the address.
Dont think, its deactivated. Check for more typos.

Regards

Edit: There is currently no transaction for bc1qy36nsljkr3c7r20zkcfwn4xm0vu9hwfsfvkpmv !
dosborne
Experience counts
Posts: 1791
Joined: Tue May 29, 2018 3:02 am
Location: Ottawa, Ontario, Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dosborne »

Gael82 wrote: Fri Nov 18, 2022 9:59 pm I was about to transfer the ransom but Coinbase is telling me that the address is not valid:
bc1qy36nsljkr3c7r20zkcfwn4xm0vu9hwfsfvkpmvbc1qy36nsljkr3c7r20zkcfwn4xm0vu9hwfsfvkpmv
You have it pasted here twice, did you do the same on Coinbase?

Try bc1qy36nsljkr3c7r20zkcfwn4xm0vu9hwfsfvkpmv :) :)
QNAP TS-563-16G 5x10TB Seagate Ironwolf HDD Raid-5 NIC: 2x1GB 1x10GbE
QNAP TS-231P-US 2x18TB Seagate Exos HDD Raid-1
[Deadbolt and General Ransomware Detection, Prevention, Recovery & MORE]
Gael82
New here
Posts: 8
Joined: Sun Sep 18, 2022 4:53 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by Gael82 »

Hi all

Thanks for your help ! Indeed for some reason I pasted it twice.
Just made the transfer, fingers crossed! The whole thing will have taught me a good lesson, but the hard (and expensive) way !
FSC830
Experience counts
Posts: 2043
Joined: Thu Mar 03, 2016 1:11 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by FSC830 »

Gael82 wrote: Sat Nov 19, 2022 1:19 am Hi all

Thanks for your help ! Indeed for some reason I pasted it twice.
Just made the transfer, fingers crossed! The whole thing will have taught me a good lesson, but the hard (and expensive) way !
Your OP_RETURN is 66cd5ce6bebddc45ff6d00c1bc50eb77

Regards
Gael82
New here
Posts: 8
Joined: Sun Sep 18, 2022 4:53 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by Gael82 »

Thanks FSC830 - I got it as early as Saturday morning and already decrypted my files.
And everything is now saved on an external drive.
biblob
New here
Posts: 3
Joined: Wed Jul 27, 2016 6:20 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by biblob »

Hello

I paid the ransom 1 day ago and still no op_return
Seems hackers have stopped their activity ?

https://www.blockchain.com/btc/address/ ... u62nevq6ga

Regards all
FSC830
Experience counts
Posts: 2043
Joined: Thu Mar 03, 2016 1:11 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by FSC830 »

Its already several times posted: getting OP_RETURN will last between 24 to 48 hours (sometimes longer).

Regards
biblob
New here
Posts: 3
Joined: Wed Jul 27, 2016 6:20 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by biblob »

Hello,

Please Could someone have a look on my transaction below ?

https://www.blockchain.com/btc/address/ ... u62nevq6ga

And tell me if I’ve made a mistake.
I have no op_return from 2 days now.

Regards
User avatar
dolbyman
Guru
Posts: 35021
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

The criminals seem to work off the codes in batches, you have to give it more time

Last key was issued on the 22nd (as of now)
https://www.blockchain.com/btc/address/ ... 8ajvsmfjjl
User avatar
OneCD
Guru
Posts: 12037
Joined: Sun Aug 21, 2016 10:48 am
Location: "... there, behind that sofa!"

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by OneCD »

biblob wrote: Sat Nov 26, 2022 2:30 am Please Could someone have a look on my transaction below ?

https://www.blockchain.com/btc/address/ ... u62nevq6ga
Your decryption key is: d03eb2fbf5bf4b5a971c56c2f0f87af4

ImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImage
biblob
New here
Posts: 3
Joined: Wed Jul 27, 2016 6:20 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by biblob »

Thanks it works. Half a good day.
User avatar
dolbyman
Guru
Posts: 35021
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

Never expose your NAS to WAN again and always have backups, then the "half good day" will be more a "full good day"
brewhahasjk
New here
Posts: 3
Joined: Sat Apr 15, 2017 6:18 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by brewhahasjk »

Hi

Can someone help a novice, paid ransom to bc1qqp6xjrncg3lyhac0j9385atc9ayqmfvflplxgq three days ago but not clear on how to find decryption key.

Thanks
User avatar
OneCD
Guru
Posts: 12037
Joined: Sun Aug 21, 2016 10:48 am
Location: "... there, behind that sofa!"

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by OneCD »

brewhahasjk wrote: Sun Dec 04, 2022 3:04 am … paid ransom to bc1qqp6xjrncg3lyhac0j9385atc9ayqmfvflplxgq three days ago but not clear on how to find decryption key.
Your decryption key is: 4db6fa0cbbaef2bd0255138d2e20f1c4

ImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImageImage
huesen
First post
Posts: 1
Joined: Sun Dec 04, 2022 7:42 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by huesen »

Unfortunately since weeks no reply to bc1qytrg95pwefvac5462rryam7arzgrh6xnn3pp2r
Post Reply

Return to “Users' Corner”