Hi all,
I am infected by ransomware with all files having extension .encrypt and every directory contains a file README_FOR_DECRYPT.txtt
Is this the famous Qlocker or is this a completely different ransomware?
I hope some can answer my question. Qnap is not responding for days now and I need to know if I have to raise a ticket for Qlocker (and by a new external harddisk) or take actions myself.
Greetings
Guust
is README_FOR_DECRYPT.txtt cuased by Qblocker
-
- New here
- Posts: 2
- Joined: Thu Feb 03, 2011 8:09 pm
-
- Experience counts
- Posts: 1081
- Joined: Thu Aug 24, 2017 10:28 pm
Re: is README_FOR_DECRYPT.txtt cuased by Qblocker
No this is not QLocker. This is a completely different ransomware called eCh0raix.
There is an existing thread about it on this forum: viewtopic.php?f=50&t=160274
QNAP can't help you specifically with this ransomware, you're pretty much on your own. They provide security advisories about eCh0raix and general security advice:
https://www.qnap.com/en/security-advisory/qsa-21-18
https://www.qnap.com/en/security-advisory/qsa-20-02
https://blog.qnap.com/nas-internet-connect-en/
https://www.qnap.com/en/how-to/faq/arti ... ount-admin
https://www.qnap.com/en/how-to/faq/arti ... s-security
There is an existing thread about it on this forum: viewtopic.php?f=50&t=160274
QNAP can't help you specifically with this ransomware, you're pretty much on your own. They provide security advisories about eCh0raix and general security advice:
https://www.qnap.com/en/security-advisory/qsa-21-18
https://www.qnap.com/en/security-advisory/qsa-20-02
https://blog.qnap.com/nas-internet-connect-en/
https://www.qnap.com/en/how-to/faq/arti ... ount-admin
https://www.qnap.com/en/how-to/faq/arti ... s-security
-
- New here
- Posts: 2
- Joined: Thu Feb 03, 2011 8:09 pm
Re: is README_FOR_DECRYPT.txtt cuased by Qblocker
Hi Mousetick. thanks.
-
- New here
- Posts: 2
- Joined: Wed Oct 27, 2021 11:29 pm
Re: is README_FOR_DECRYPT.txtt cuased by Qblocker
My Friends and Professor, Please help me please, Thanks so much.
i until use old version Nas-TS-269H, README_FOR_DECRYPT.txtt file in my Nas, locked all the work file, and Memorial value of photo with mom and father, so , would you mind teach me how to fix?
Thanks so much.
i until use old version Nas-TS-269H, README_FOR_DECRYPT.txtt file in my Nas, locked all the work file, and Memorial value of photo with mom and father, so , would you mind teach me how to fix?
Thanks so much.
- dolbyman
- Guru
- Posts: 35274
- Joined: Sat Feb 12, 2011 2:11 am
- Location: Vancouver BC , Canada
Re: is README_FOR_DECRYPT.txtt cuased by Qblocker
There is no "fix" .. you have been hit by ransomware .. if there was an easy fix, criminals wouldn't do that .. would they ?
-
- New here
- Posts: 2
- Joined: Wed Oct 27, 2021 11:29 pm