This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

eCh0raix-ransomware .encrypt

1 min read

This thread's last reply is from July 14, 2019, 10:14 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Hello, my personal files on my laptop are encrypted by ransomware. All kinds of files (jpg, xls, pdf, docx, txt) get the following extension: .encrypt
In my every map of my privat map there is a file called: read me for decrypt.txt. In this file is the following text:
All your data has been locked(crypted).
How to unclock(decrypt) instruction located in this TOR website: http://sg3dwqfpnr4sl5hh.onion/order/14H2VWPkTpY6yRpNngDCGaT47pEqXETFf9
Use TOR browser for access .onion websites.
https://duckduckgo.com/html?q=tor+browser+how+to
Do NOT remove this file and NOT remove last line in this file!
IS31Xp0aOJuuP4snxHUj3czlPzgjc8cfZMJXuv8Hu9SzL7n1rUErV834j8otc2cgQccXCqxEF6E8P9WGPVFh3g==


Also my qnap nas has been affected. Probably by eCh0raix-ransomware. I have read it uses aes 256-encryption.

Are you able to help me please?
eCh0raix is a relatively new Ransomware variant ... https://www.bleepingcomputer.com/news/security/new-ech0raix-ransomware-brute-forces-qnap-nas-devices/ ... and as such, does not yet have a decryptor available.

Because of this, we would be able to help you to remove the infection, but we would not be able to help you recover your encrypted files.

The current expert in this kind of Ransomware (Demonslay335) is to be found at Bleeping Computers, and I would suggest you post to the following topic ... https://www.bleepingcomputer.com/forums/t/617854/qnap-nas-encrypt-ransomware-ech0raix-support-encrypt-readme-for-decrypttxt/ ... and follow any instructions posted there.

Although is may not be possible at present to recover your files, BC does have a good record for compiling decryptors for other types of Ransomware, so it may be possible at some future point to recover them.

Sorry we can't be of more help.
Thankx for your advise, i will contact Demonslay335 at bleeping computers.
You're welcome. :)

Good luck, hope they're able to help you recover your files.

As we cannot help you further here .... This topic is now closed