Emsisoft Decryptor for DeadBolt

DeadBolt ransomware attacks a vulnerability in QNAP’s Internet-facing NAS and routers and encrypts all detected files by appending the .deadbolt extension to them. Also, the login page on each affected device gets hijacked and replaced with a note informing users that they have been infected and advising them to pay a certain amount of Bitcoin to get a decryption key.

Nonetheless, even after this amount is paid, users might still have trouble getting back their files, and this is where Emsisoft Decryptor for DeadBolt comes in.

In other words, the only way to enjoy the benefits of this utility is to enter the 32-character that you received from the attackers, otherwise the decryption key cannot be created. Also, it is important not to move or rename the encrypted files, since the decryptor analyzes them to ensure correct workflow.

Once you complete this step, you can access the main window where you can create a list with all the folders you want to restore. By default, the app automatically adds all the connected drives to the list, but you can customize it as you see fit.

The standard mode of operation for Emsisoft Decryptor for DeadBolt is to play it safe and keep all the data that was encrypted by DeadBolt, even after the decryption process is successful. If you want to save space and you are sure that you have indeed restored all your documents, you can go ahead and remove these files from your computer by unchecking the appropriate box.

Using unprotected Internet-facing devices can sometimes look like an open invitation for hackers worldwide, and this is why strong passwords are recommended, regardless of the device you own. Otherwise, you might need to pay good money to regain access to your files, even if you rely on dedicated tools like Emsisoft Decryptor for DeadBolt.