My NAS is infected with ransomware "Checkmate" - what can I do?

Viruses & Threats
8


Thanks for your Quick reply.
I am using AVG Free at the moment.

Hi
Thanks for your quick reply.

All files on my NAS (Photos, videos, Music, documents) have the extension ”.checkmate” added to the file name.
Each folder has a file named ” !CHECKMATE_DECRYPTION_README”, containing a  message saying that my files are encrypted and I am asked to pay 1660 USD.

Carl

7

Hello Carl, 

We are sorry to know that. We will check and help you. How do you confirm that your network storage infected by ransomware? 

Are you using any AVG business product? Please explain your request in detail. We look forward for your response.

1

My Windows PC seems to be unaffected.

5

I didn't get this message as a popup, nor did I get it in an email.

I discovered this when I wanted to open files in my NAS.
How it got into the NAS I don't know, except that it is obviously planted there by a hacker.

I never got any kind of message, except that there are files with the above text in all folders in my NAS.

There is no trace of this malware in my computer.

I have now given you all information I can about this problem.

Carl

4


Thanks for your Quick reply.
I am using AVG Free at the moment.

Hi
Thanks for your quick reply.

All files on my NAS (Photos, videos, Music, documents) have the extension ”.checkmate” added to the file name.
Each folder has a file named ” !CHECKMATE_DECRYPTION_README”, containing a  message saying that my files are encrypted and I am asked to pay 1660 USD.

Carl

6

Thank you for writing us back, Carl.
Please let us know do you get the above message as a popup or if you get the above message in the email so that we check and help you further.
Thank you and keep us posted.

2

Hi

Yes, AVG antivirus free was installed many years before this attack happened. 
The virus seems to have got into the NAS on Nov 11.
The NAS is connected to the same home network as my computer.

Thanks for helping​​​​​​​

3

Hello Carl, 

We are sorry to know that. We will check and help you. How do you confirm that your network storage infected by ransomware? 

Are you using any AVG business product? Please explain your request in detail. We look forward for your response.