[RANSOMWARE] >>READ 1st Post<< Deadbolt

Introduce yourself to us and other members here, or share your own product reviews, suggestions, and tips and tricks of using QNAP products.
Post Reply
pedda1983
New here
Posts: 2
Joined: Tue Apr 12, 2016 4:13 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by pedda1983 »

Hello Dolbyman,

thanks for quick response.
If there is no activity, then I can't make anything.

Thnaks for your help.
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

pedda1983 wrote: Sun Mar 19, 2023 6:11 pm If there is no activity, then I can't make anything.
You need to pay the criminals, without payment you will not get a key from them .. sad but true
Laxdave
New here
Posts: 4
Joined: Mon Mar 27, 2023 7:16 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by Laxdave »

Paid ransom to bc1qwffnc4edakz0amanpn7y4x74907sdk0gsaa0fv.. can some one help me with the op_return decryption code?
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

as so many times before

currently only one transaction on this address
https://www.blockchain.com/explorer/add ... dk0gsaa0fv
Laxdave
New here
Posts: 4
Joined: Mon Mar 27, 2023 7:16 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by Laxdave »

Ok I now have 2 transaction to this address bc1qwffnc4edakz0amanpn7y4x74907sdk0gsaa0fv

Can you help me with the op_return decryption key?
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

yes..with the same website as posted several times before..you can see the OP_return

https://explorer.viawallet.com/btc/tx/a ... b6b7962439

OP_RETURN 8890609c3e85895aaf7ed26b02d6a3e6
turutkin
New here
Posts: 2
Joined: Wed Mar 15, 2023 7:27 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by turutkin »

Hi all.
I made a payment, and a small response transaction came to the same address. But I can't find the decryption key.
Help me please.
address - https://www.blockchain.com/explorer/add ... ypllf4dv8x
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

The answer is literally in the post above yours ... ooof

https://explorer.viawallet.com/btc/tx/3 ... db75e08115

OP_RETURN 7b577d48ac90ee1eeda204b8b8a3d583
turutkin
New here
Posts: 2
Joined: Wed Mar 15, 2023 7:27 pm

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by turutkin »

dolbyman wrote: Wed Mar 29, 2023 3:01 am The answer is literally in the post above yours ... ooof

https://explorer.viawallet.com/btc/tx/3 ... db75e08115

OP_RETURN 7b577d48ac90ee1eeda204b8b8a3d583
Thank you very much.
God grant you health!
What is better to use for decoding? EmsiSoft or bring back the Deadbolt interface?
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

Before you turn religious on me .. just never ever expose your NAS online again .. no deity is needed to help.

I don't know what decrypter is better, if you still have the original de-crypt interface, maybe make use of that

I think the original one decrypts on the spot and the 3rd party one wants an external storage device
Laxdave
New here
Posts: 4
Joined: Mon Mar 27, 2023 7:16 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by Laxdave »

Success! Key worked and all files are restored!! Thanks for support Dolbyman! <3
Laxdave
New here
Posts: 4
Joined: Mon Mar 27, 2023 7:16 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by Laxdave »

I used the original deadbolt splash page (reinstated by QNAP help desk) and it decided on the spot with full metadata.
Phocean
New here
Posts: 2
Joined: Fri Apr 21, 2023 8:19 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by Phocean »

Anyone has received the decrypt key recently? Paid ransom more than 72 hours ago and still only one transaction.

bc1qtwmxvzzghpv625xftz59q9wl8u2m7wpyt7w9rv
User avatar
dolbyman
Guru
Posts: 35005
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by dolbyman »

no transactions from the criminals in a week

https://www.blockchain.com/explorer/add ... 8ajvsmfjjl
Phocean
New here
Posts: 2
Joined: Fri Apr 21, 2023 8:19 am

Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt

Post by Phocean »

Thank you. Hopefully can still get the key. Some important data there...
Post Reply

Return to “Users' Corner”