[RANSOMWARE] >>READ 1st Post<< Deadbolt

Introduce yourself to us and other members here, or share your own product reviews, suggestions, and tips and tricks of using QNAP products.
Post Reply
coronadilione
New here
Posts: 3
Joined: Fri Jan 20, 2023 5:49 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by coronadilione »

I made payment to this address

bc1qs5swte4v68a9kxs7pr70lgezu7j0rx4hqt9qu3

Leonardo
FSC830
Experience counts
Posts: 2043
Joined: Thu Mar 03, 2016 1:11 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by FSC830 »

coronadilione wrote: Fri Jan 20, 2023 8:06 pm ...
OP_RETURN is e6a1be45a860dde76bec27c033de11c1

Regards
FSC830
Experience counts
Posts: 2043
Joined: Thu Mar 03, 2016 1:11 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by FSC830 »

mlzsmg wrote: Fri Jan 20, 2023 3:43 am I paid to bc1qdzylfqnezqme4xtkx8un8s7eg49c82fhwlfhnt 6 days ago, 0.03BTC exactly. This was what was requested via the page once restored. As yet I've only had my 1 transaction recorded. I paid via coinbase. Have I screwed this up? Has anyone else had success after a week of waiting?
Thanks in advance
OP_RETURN is 6a2a9c90d775640031df6b36f1c10a3f

Regards
Last edited by FSC830 on Fri Jan 20, 2023 8:18 pm, edited 1 time in total.
FSC830
Experience counts
Posts: 2043
Joined: Thu Mar 03, 2016 1:11 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by FSC830 »

moizfr wrote: Thu Jan 19, 2023 8:30 pm Hi,

Can you help me. I made the payment now 5 days ago.
bc1q5g60g9fxqz0j7w8tn4aujeqjzlpp5zqrjm7e4f
OP_Return is b99ad307cf26f0557c8a330dcc4b4d90

Regards

Seems, that next queue was processed... 8)
moizfr
New here
Posts: 4
Joined: Sun Jan 15, 2023 5:46 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by moizfr »

FSC830 wrote: Fri Jan 20, 2023 8:17 pm
moizfr wrote: Thu Jan 19, 2023 8:30 pm Hi,

Can you help me. I made the payment now 5 days ago.
bc1q5g60g9fxqz0j7w8tn4aujeqjzlpp5zqrjm7e4f
OP_Return is b99ad307cf26f0557c8a330dcc4b4d90

Regards

Seems, that next queue was processed... 8)
Hi,

Thgen what do i need to decrypt the files as software ? Do y ourecommend Emisoft Decryptor or another one please ?
FSC830
Experience counts
Posts: 2043
Joined: Thu Mar 03, 2016 1:11 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by FSC830 »

I am not affected by Deadbolt and I did not any deep investigating in "how to decrypt the data".
What I have read in the forum is, if the origin Deadbolt page can not be recovered for entering the code, a 3rd party decryptor like Emisoft needs to be used.

Read the links from my signature, there you will find more information.

Regards
lostmyNas
New here
Posts: 6
Joined: Fri Dec 30, 2022 12:23 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by lostmyNas »

https://www.blockchain.com/explorer/add ... mYjvSwuxLx

can you please help me with the key ? i paid 0.0175 BCH
User avatar
dolbyman
Guru
Posts: 35223
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

that is a bitcoin cash address...this ransomware deals in btc only

unclear what you did

but you have been told before

viewtopic.php?f=45&t=164797&p=836181#p836184
coronadilione
New here
Posts: 3
Joined: Fri Jan 20, 2023 5:49 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by coronadilione »

FSC830 wrote: Fri Jan 20, 2023 8:12 pm
coronadilione wrote: Fri Jan 20, 2023 8:06 pm ...
OP_RETURN is e6a1be45a860dde76bec27c033de11c1

Regards
Thank you very much

You saved my LiFe and my FiLe

leonardo (ITALY)
mlzsmg
New here
Posts: 5
Joined: Sat Jul 11, 2015 9:22 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by mlzsmg »

FSC830 wrote: Fri Jan 20, 2023 8:16 pm
mlzsmg wrote: Fri Jan 20, 2023 3:43 am I paid to bc1qdzylfqnezqme4xtkx8un8s7eg49c82fhwlfhnt 6 days ago, 0.03BTC exactly. This was what was requested via the page once restored. As yet I've only had my 1 transaction recorded. I paid via coinbase. Have I screwed this up? Has anyone else had success after a week of waiting?
Thanks in advance
OP_RETURN is 6a2a9c90d775640031df6b36f1c10a3f

Regards
Thanks everyone. The OP_RETURN indeed came through on Friday and everything I needed is now recovered.
lostmyNas
New here
Posts: 6
Joined: Fri Dec 30, 2022 12:23 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by lostmyNas »

Hi Dolbyman,

i revisited the link and i see transactions there, can you please help me identify the key ? i have also got the below instructions and have no idea how to use them in my Nas, Can i use this decrypter to go into windows command prompt of my files in Nas to do something ? also i paid through the cash app page set by the ransomware people. and it is showing as paid. but i am unable to get the key from the transactions.

Status: Paid
Instruction

After download unpack archive and upload decryptor_linux* file to your NAS.
After upload run command in terminal: chmod +x ./decryptor_linux && ./decryptor_linux
Or copy crypted files to another device and start decryptor program with start directory paramether.
Example in linux: chmod +x ./decryptor_linux* && ./decryptor_linux* -s /destination/dir
Example in windows(command line): decryptor_windows.exe -s C:\destination\dir
Star symbol replace to your processor architecture. Before decrypting make sure you have at least 1-2 gigabytes of free space.
FSC830
Experience counts
Posts: 2043
Joined: Thu Mar 03, 2016 1:11 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by FSC830 »

lostmyNas wrote: Mon Jan 23, 2023 8:23 pm ...also i paid through the cash app page set by the ransomware people. and it is showing as paid. but i am unable to get the key from the transactions.

Status: Paid
Instruction
...
Please provide the hash key you used for the payment. It starts with bc1 (b-c-one) and is your individual key for the ransom.

Regards

Edit: This was already told you on Dec. 30th, 2022!
Without the hash - no OP_Return.
macscrap
New here
Posts: 2
Joined: Thu Jan 26, 2023 6:33 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by macscrap »

i tried to find the output with op_return but can't. my transaction id 83a39d8b7ce13d54061340cde7bef2c021c25b1956cf8491043b1e45b818a920 paid for hash bc1qc0s086cgqjp4m3v7dsym7pyeqwzw6vvfj0gv5a
who can i get the decryption key?
User avatar
dolbyman
Guru
Posts: 35223
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

op return can be found here

https://explorer.viawallet.com/btc/tx/6 ... d05d27fd61

key is ac3ab1fd17456b98496ab5f25bed2629
macscrap
New here
Posts: 2
Joined: Thu Jan 26, 2023 6:33 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by macscrap »

thanks a lot
Post Reply

Return to “Users' Corner”