Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Asustor Nas DeadBolt Infection

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Asustor Nas DeadBolt Infection

Unread postby u307911 » June 18th, 2022, 1:47 pm

My Asustor 5002t has been infected with Deadbolt Ransome Ware.
https://www.trendmicro.com/en_us/research/22/f/closing-the-door-deadbolt-ransomware-locks-out-vendors-with-mult.html
I used this link to try to learn how to 32 bit key in an infected file. Then I used Emsisoft tool decrypt_DeadBolt.exe added the 32 bit key but it said wrong key.

I used HEXMEX to find the deadbolt text in two infected files(One was a video file and the other was a Thumbs image file. Then I followed Instructions in the above link in order to create my deadbolt analysis.pdf attached.

When I used 1FCD98C3168CE663D3C72799B3040EE1 or 5F3A1384679CF07808C12FC087E37D44 from this analysis in "Emsisoft tool decrypt_DeadBolt.exe" It always says wrong key....So no joy in understanding and understanding the fix for Deadbolt Ransomeware.

Asustor'solution was to restore a backup of the NAS. Albeit I did not have a ASUSTOR backup on the NAS.
You do not have the required permissions to view the files attached to this post.
u307911
Active Member
 
Posts: 1
Joined: June 18th, 2022, 1:17 pm
Advertisement
Register to Remove

Re: Asustor Nas DeadBolt Infection

Unread postby Gary R » June 18th, 2022, 5:39 pm

The best place to get help with Ransomware is ... https://www.bleepingcomputer.com/forums ... ansomware/ ... who have a few helpers who specialise in dealing with it.

Sadly, even with specialist help, there is no guarantee that you wil be able to recover any files that have already been encrypted.
User avatar
Gary R
Administrator
Administrator
 
Posts: 25888
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 126 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware