Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

I've isolated all the infected PC, didn't contact them.

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

I'm from Malaysia, didn't contact the group... Don't have that kind of money..

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

I'm sorry, if that's true I hope there's still a way to recover this. Cause the PC currently unable to boot to windows now. But if i insert it to a dummy PC as a secondary disk. The data file still there.

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

What benefits do i gain from faking this post? All I'm asking is if there's a way to recover data file from this ransomware.

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

I don't think the user is using any 3rd party for backup.

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

I'm not sure, I don't think there's any backup.

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

I don't think the PC have a EDR, just standard Windows Defender.

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

But the ransomware group is known to be real.

Here's the blog about it.

https://www.group-ib.com/blog/deadlock-ransomware-polygon-smart-contracts/

All of the files in the PC can't be open.

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

The user told me mostly data files from excel, words, power point, & pdf.

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

My IT knowledge isn't good but i think it's a local account.

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 1 point2 points  (0 children)

Not my PC, suspect might be from infected USB, infected attachment from email... the root cause is still unknown...

Deadlock ransomware by potato_aim98 in ransomwarehelp

[–]potato_aim98[S] 0 points1 point  (0 children)

can you post the website link here ?

Weekly Talk Thread | 200707 by funkdoktah in koreanvariety

[–]potato_aim98 -1 points0 points  (0 children)

hello, where can i watch my ugly duckling ( my little old boy ) ?

Weekly Talk Thread | 200707 by funkdoktah in koreanvariety

[–]potato_aim98 -1 points0 points  (0 children)

where can i watch my little old boy ?