My Asustor 5002t has been infected with Deadbolt Ransome Ware.
https://www.trendmicro.com/en_us/research/22/f/closing-the-door-deadbolt-ransomware-locks-out-vendors-with-mult.html
I used this link to try to learn how to 32 bit key in an infected file. Then I used Emsisoft tool decrypt_DeadBolt.exe added the 32 bit key but it said wrong key.
I used HEXMEX to find the deadbolt text in two infected files(One was a video file and the other was a Thumbs image file. Then I followed Instructions in the above link in order to create my deadbolt analysis.pdf attached.
When I used 1FCD98C3168CE663D3C72799B3040EE1 or 5F3A1384679CF07808C12FC087E37D44 from this analysis in "Emsisoft tool decrypt_DeadBolt.exe" It always says wrong key....So no joy in understanding and understanding the fix for Deadbolt Ransomeware.
Asustor'solution was to restore a backup of the NAS. Albeit I did not have a ASUSTOR backup on the NAS.
https://www.trendmicro.com/en_us/research/22/f/closing-the-door-deadbolt-ransomware-locks-out-vendors-with-mult.html
I used this link to try to learn how to 32 bit key in an infected file. Then I used Emsisoft tool decrypt_DeadBolt.exe added the 32 bit key but it said wrong key.
I used HEXMEX to find the deadbolt text in two infected files(One was a video file and the other was a Thumbs image file. Then I followed Instructions in the above link in order to create my deadbolt analysis.pdf attached.
When I used 1FCD98C3168CE663D3C72799B3040EE1 or 5F3A1384679CF07808C12FC087E37D44 from this analysis in "Emsisoft tool decrypt_DeadBolt.exe" It always says wrong key....So no joy in understanding and understanding the fix for Deadbolt Ransomeware.
Asustor'solution was to restore a backup of the NAS. Albeit I did not have a ASUSTOR backup on the NAS.
