Jump to content

Recommended Posts

Posted

Back in 2019 my QNAP NAS was hacked and many files were encrypted with ransomware.

Fortunately it was possible to unencrypt them.  I no longer have the PC I used to do this but I am pretty sure I used Kaspersky RakhniDecryptor and this would have been in 2020.

I've now discovered I missed unencrypting a folder with about 1500 files.  I think this was because there were too many files on the NAS to unencrypt at once so I needed to divide files into batches and through my own sloppiness, I missed a folder.

I've tried to re-do the unencryption using the latest version of Kaspersky RakhniDecryptor and came across the following:

- the original files were encrypted with the extension ".encrypt". The current version of Kaspersky RakhniDecryptor doesn't seem to recognise this.  It does seem to recognise the suffix ".encrypted".  I can change the file extension to ".encrypted" but would prefer not do have to do this. Can Kaspersky RakhniDecryptor not recognise files with extension "encrypt" because I am pretty sure it could back in 2020.

- I ran Kaspersky RakhniDecryptor on a small batch of files with extension changed to ".encrypted" and eventually it did find the password to decrypt and this is stored in the log file.  However I did this on a PC I borrowed for a short time (I now have a Mac at home, not a PC) and have got another PC to do the rest of the files and needed to reinstall Kaspersky RakhniDecryptor.  I couldn't see a way to provide the decryption password to Kaspersky RakhniDecryptor.  Is this possible? 

harlan4096
Posted

Welcome to Kaspersky Community.

 

Please contact to K. Support

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...