[RANSOMWARE] >>READ 1st Post<< Deadbolt

Introduce yourself to us and other members here, or share your own product reviews, suggestions, and tips and tricks of using QNAP products.
Post Reply
whfjoshua2
New here
Posts: 2
Joined: Sat Mar 11, 2023 12:57 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by whfjoshua2 »

Hi all, I'm new here to the forum. Unfortunately, My NAS get attacked. Just paid last night and I have no idea how to retrieve the code in the blockchain.

Could someone help me with an OP_Return for my transaction?
bc1q5vgesanferaydywcppsdxqa8a37azspcuw30un
User avatar
dolbyman
Guru
Posts: 35248
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

Only one transaction so far

https://www.blockchain.com/explorer/add ... zspcuw30un

When/if they post the OP_return, look at one of the plenty of posts above on how to read the untouched OP_return from the transaction ID (e.g viawallet website)
FSC830
Experience counts
Posts: 2043
Joined: Thu Mar 03, 2016 1:11 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by FSC830 »

whfjoshua2 wrote: Sat Mar 11, 2023 1:01 am Hi all, I'm new here to the forum. Unfortunately, My NAS get attacked. Just paid last night and I have no idea how to retrieve the code in the blockchain.

Could someone help me with an OP_Return for my transaction?
bc1q5vgesanferaydywcppsdxqa8a37azspcuw30un
OP_Return is 1622870c68adf3c64731d4d3396e1d73

Regards
whfjoshua2
New here
Posts: 2
Joined: Sat Mar 11, 2023 12:57 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by whfjoshua2 »

Thank you FSC830 & dolbyman

The OP_return key works well and I retrieve all my data with 13 hours of decryption.

This is the guide I follow
https://www.qnap.com/en/how-to/faq/arti ... hould-i-do

For the last part who don't understand well can follow the SSH command I use via Putty
[~] # ./[Find 1 or 2 files named as 5 numbers] -d [DecryptKey from op_return] /.
pedda1983
New here
Posts: 2
Joined: Tue Apr 12, 2016 4:13 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by pedda1983 »

Hello all,

can someone help me with Transaction bc1qg9ll7z3afxgp62uy5ughs2up9ulgktwc9v37lv?

Thanks a lot.
User avatar
dolbyman
Guru
Posts: 35248
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

no activity on that address ..

https://www.blockchain.com/explorer/add ... ktwc9v37lv

What help is needed ?
omerk
First post
Posts: 1
Joined: Sat Mar 18, 2023 11:45 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by omerk »

Hi I am completely new at this. I am infected with deadbolt, due to the qnap update I was not able to pay and I do not have the ransome page with the link. What are the steps to take to get this ransome page again to be able to pay? Thanks a lot if anyone will help me!
User avatar
dolbyman
Guru
Posts: 35248
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

Please read the first page (as the title says)
pedda1983
New here
Posts: 2
Joined: Tue Apr 12, 2016 4:13 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by pedda1983 »

Hello Dolbyman,

thanks for quick response.
If there is no activity, then I can't make anything.

Thnaks for your help.
User avatar
dolbyman
Guru
Posts: 35248
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

pedda1983 wrote: Sun Mar 19, 2023 6:11 pm If there is no activity, then I can't make anything.
You need to pay the criminals, without payment you will not get a key from them .. sad but true
Laxdave
New here
Posts: 4
Joined: Mon Mar 27, 2023 7:16 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by Laxdave »

Paid ransom to bc1qwffnc4edakz0amanpn7y4x74907sdk0gsaa0fv.. can some one help me with the op_return decryption code?
User avatar
dolbyman
Guru
Posts: 35248
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

as so many times before

currently only one transaction on this address
https://www.blockchain.com/explorer/add ... dk0gsaa0fv
Laxdave
New here
Posts: 4
Joined: Mon Mar 27, 2023 7:16 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by Laxdave »

Ok I now have 2 transaction to this address bc1qwffnc4edakz0amanpn7y4x74907sdk0gsaa0fv

Can you help me with the op_return decryption key?
User avatar
dolbyman
Guru
Posts: 35248
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

yes..with the same website as posted several times before..you can see the OP_return

https://explorer.viawallet.com/btc/tx/a ... b6b7962439

OP_RETURN 8890609c3e85895aaf7ed26b02d6a3e6
turutkin
New here
Posts: 2
Joined: Wed Mar 15, 2023 7:27 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by turutkin »

Hi all.
I made a payment, and a small response transaction came to the same address. But I can't find the decryption key.
Help me please.
address - https://www.blockchain.com/explorer/add ... ypllf4dv8x
Post Reply

Return to “Users' Corner”