[RANSOMWARE] >>READ 1st Post<< Deadbolt
-
- New here
- Posts: 2
- Joined: Sat Mar 11, 2023 12:57 am
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
Hi all, I'm new here to the forum. Unfortunately, My NAS get attacked. Just paid last night and I have no idea how to retrieve the code in the blockchain.
Could someone help me with an OP_Return for my transaction?
bc1q5vgesanferaydywcppsdxqa8a37azspcuw30un
Could someone help me with an OP_Return for my transaction?
bc1q5vgesanferaydywcppsdxqa8a37azspcuw30un
- dolbyman
- Guru
- Posts: 35273
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
Only one transaction so far
https://www.blockchain.com/explorer/add ... zspcuw30un
When/if they post the OP_return, look at one of the plenty of posts above on how to read the untouched OP_return from the transaction ID (e.g viawallet website)
https://www.blockchain.com/explorer/add ... zspcuw30un
When/if they post the OP_return, look at one of the plenty of posts above on how to read the untouched OP_return from the transaction ID (e.g viawallet website)
-
- Experience counts
- Posts: 2043
- Joined: Thu Mar 03, 2016 1:11 am
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
OP_Return is 1622870c68adf3c64731d4d3396e1d73whfjoshua2 wrote: ↑Sat Mar 11, 2023 1:01 am Hi all, I'm new here to the forum. Unfortunately, My NAS get attacked. Just paid last night and I have no idea how to retrieve the code in the blockchain.
Could someone help me with an OP_Return for my transaction?
bc1q5vgesanferaydywcppsdxqa8a37azspcuw30un
Regards
A raid is never a substitute for backup! Never!
Deadbolt - READ 1st post!!!
Deadbolt - information
Deadbolt - find your OP_RETURN!
VPN=VPN? No!
How to clean up your NAS after malware attack
www.raidisnotabackup.com
Deadbolt - READ 1st post!!!
Deadbolt - information
Deadbolt - find your OP_RETURN!
VPN=VPN? No!
How to clean up your NAS after malware attack
www.raidisnotabackup.com
-
- New here
- Posts: 2
- Joined: Sat Mar 11, 2023 12:57 am
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
Thank you FSC830 & dolbyman
The OP_return key works well and I retrieve all my data with 13 hours of decryption.
This is the guide I follow
https://www.qnap.com/en/how-to/faq/arti ... hould-i-do
For the last part who don't understand well can follow the SSH command I use via Putty
[~] # ./[Find 1 or 2 files named as 5 numbers] -d [DecryptKey from op_return] /.
The OP_return key works well and I retrieve all my data with 13 hours of decryption.
This is the guide I follow
https://www.qnap.com/en/how-to/faq/arti ... hould-i-do
For the last part who don't understand well can follow the SSH command I use via Putty
[~] # ./[Find 1 or 2 files named as 5 numbers] -d [DecryptKey from op_return] /.
-
- New here
- Posts: 2
- Joined: Tue Apr 12, 2016 4:13 pm
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
Hello all,
can someone help me with Transaction bc1qg9ll7z3afxgp62uy5ughs2up9ulgktwc9v37lv?
Thanks a lot.
can someone help me with Transaction bc1qg9ll7z3afxgp62uy5ughs2up9ulgktwc9v37lv?
Thanks a lot.
- dolbyman
- Guru
- Posts: 35273
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
no activity on that address ..
https://www.blockchain.com/explorer/add ... ktwc9v37lv
What help is needed ?
https://www.blockchain.com/explorer/add ... ktwc9v37lv
What help is needed ?
-
- First post
- Posts: 1
- Joined: Sat Mar 18, 2023 11:45 pm
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
Hi I am completely new at this. I am infected with deadbolt, due to the qnap update I was not able to pay and I do not have the ransome page with the link. What are the steps to take to get this ransome page again to be able to pay? Thanks a lot if anyone will help me!
- dolbyman
- Guru
- Posts: 35273
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
Please read the first page (as the title says)
-
- New here
- Posts: 2
- Joined: Tue Apr 12, 2016 4:13 pm
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
Hello Dolbyman,
thanks for quick response.
If there is no activity, then I can't make anything.
Thnaks for your help.
thanks for quick response.
If there is no activity, then I can't make anything.
Thnaks for your help.
- dolbyman
- Guru
- Posts: 35273
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
-
- New here
- Posts: 4
- Joined: Mon Mar 27, 2023 7:16 am
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
Paid ransom to bc1qwffnc4edakz0amanpn7y4x74907sdk0gsaa0fv.. can some one help me with the op_return decryption code?
- dolbyman
- Guru
- Posts: 35273
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
as so many times before
currently only one transaction on this address
https://www.blockchain.com/explorer/add ... dk0gsaa0fv
currently only one transaction on this address
https://www.blockchain.com/explorer/add ... dk0gsaa0fv
-
- New here
- Posts: 4
- Joined: Mon Mar 27, 2023 7:16 am
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
Ok I now have 2 transaction to this address bc1qwffnc4edakz0amanpn7y4x74907sdk0gsaa0fv
Can you help me with the op_return decryption key?
Can you help me with the op_return decryption key?
- dolbyman
- Guru
- Posts: 35273
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
yes..with the same website as posted several times before..you can see the OP_return
https://explorer.viawallet.com/btc/tx/a ... b6b7962439
OP_RETURN 8890609c3e85895aaf7ed26b02d6a3e6
https://explorer.viawallet.com/btc/tx/a ... b6b7962439
OP_RETURN 8890609c3e85895aaf7ed26b02d6a3e6
-
- New here
- Posts: 2
- Joined: Wed Mar 15, 2023 7:27 pm
Re: [RANSOMWARE] >>READ 1st Post<< Deadbolt
Hi all.
I made a payment, and a small response transaction came to the same address. But I can't find the decryption key.
Help me please.
address - https://www.blockchain.com/explorer/add ... ypllf4dv8x
I made a payment, and a small response transaction came to the same address. But I can't find the decryption key.
Help me please.
address - https://www.blockchain.com/explorer/add ... ypllf4dv8x