Jump to content

Recommended Posts

Posted

Back in 2019 my QNAP NAS was hacked and many files were encrypted with ransomware.

Fortunately it was possible to unencrypt them.  I no longer have the PC I used to do this but I am pretty sure I used Kaspersky RakhniDecryptor and this would have been in 2020.

I've now discovered I missed unencrypting a folder with about 1500 files.  I think this was because there were too many files on the NAS to unencrypt at once so I needed to divide files into batches and through my own sloppiness, I missed a folder.

I've tried to re-do the unencryption using the latest version of Kaspersky RakhniDecryptor and came across the following:

- the original files were encrypted with the extension ".encrypt". The current version of Kaspersky RakhniDecryptor doesn't seem to recognise this.  It does seem to recognise the suffix ".encrypted".  I can change the file extension to ".encrypted" but would prefer not do have to do this. Can Kaspersky RakhniDecryptor not recognise files with extension "encrypt" because I am pretty sure it could back in 2020.

- I ran Kaspersky RakhniDecryptor on a small batch of files with extension changed to ".encrypted" and eventually it did find the password to decrypt and this is stored in the log file.  However I did this on a PC I borrowed for a short time (I now have a Mac at home, not a PC) and have got another PC to do the rest of the files and needed to reinstall Kaspersky RakhniDecryptor.  I couldn't see a way to provide the decryption password to Kaspersky RakhniDecryptor.  Is this possible? 

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...