is README_FOR_DECRYPT.txtt cuased by Qblocker

Don't miss a thing. Post your questions and discussion about other uncategorized NAS features here.
Post Reply
Guust69
New here
Posts: 2
Joined: Thu Feb 03, 2011 8:09 pm

is README_FOR_DECRYPT.txtt cuased by Qblocker

Post by Guust69 »

Hi all,

I am infected by ransomware with all files having extension .encrypt and every directory contains a file README_FOR_DECRYPT.txtt
Is this the famous Qlocker or is this a completely different ransomware?

I hope some can answer my question. Qnap is not responding for days now and I need to know if I have to raise a ticket for Qlocker (and by a new external harddisk) or take actions myself.

Greetings
Guust
Mousetick
Experience counts
Posts: 1081
Joined: Thu Aug 24, 2017 10:28 pm

Re: is README_FOR_DECRYPT.txtt cuased by Qblocker

Post by Mousetick »

No this is not QLocker. This is a completely different ransomware called eCh0raix.

There is an existing thread about it on this forum: viewtopic.php?f=50&t=160274

QNAP can't help you specifically with this ransomware, you're pretty much on your own. They provide security advisories about eCh0raix and general security advice:
https://www.qnap.com/en/security-advisory/qsa-21-18
https://www.qnap.com/en/security-advisory/qsa-20-02
https://blog.qnap.com/nas-internet-connect-en/
https://www.qnap.com/en/how-to/faq/arti ... ount-admin
https://www.qnap.com/en/how-to/faq/arti ... s-security
Guust69
New here
Posts: 2
Joined: Thu Feb 03, 2011 8:09 pm

Re: is README_FOR_DECRYPT.txtt cuased by Qblocker

Post by Guust69 »

Hi Mousetick. thanks.
perth405
New here
Posts: 2
Joined: Wed Oct 27, 2021 11:29 pm

Re: is README_FOR_DECRYPT.txtt cuased by Qblocker

Post by perth405 »

My Friends and Professor, Please help me please, Thanks so much.
i until use old version Nas-TS-269H, README_FOR_DECRYPT.txtt file in my Nas, locked all the work file, and Memorial value of photo with mom and father, so , would you mind teach me how to fix?

Thanks so much.
User avatar
dolbyman
Guru
Posts: 35024
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: is README_FOR_DECRYPT.txtt cuased by Qblocker

Post by dolbyman »

There is no "fix" .. you have been hit by ransomware .. if there was an easy fix, criminals wouldn't do that .. would they ?
perth405
New here
Posts: 2
Joined: Wed Oct 27, 2021 11:29 pm

Re: is README_FOR_DECRYPT.txtt cuased by Qblocker

Post by perth405 »

dolbyman wrote: Wed Oct 27, 2021 11:41 pm There is no "fix" .. you have been hit by ransomware .. if there was an easy fix, criminals wouldn't do that .. would they ?
thanks , agree with you.
Post Reply

Return to “Miscellaneous”