If you selected the backup option, you will see both the encrypted and the decrypted files. Step 5: At this point, your files should be decrypted. This approach will however, impact potential tests ran on 1 or 2 files, or rypting files with different extensions. This extra safety mechanism ensures that the decryption tool has yielded valid files. Regardless of whether you check the “Backup files” option or not, the decryption tool initially attempts to decrypt (5) files in the provided path and will NOT continue if decryption is unsuccessful. We strongly recommend that you also select “Backup files” before starting the decryption process. Step 4: Select “Scan Entire System” if you want to search for all encrypted files or just add the path to your encrypted files. Step 3: Agree to the terms and conditions. It should be saved on your computer as BDGandCrabDecryptor.exe. This tool REQUIRES an active internet connection as our servers will attempt to reply the submitted ID with a possibly valid RSA-2048 private key. Without it, the decryption process won’t continue. Please note that this tool requires an active internet connection. Step 1: Download our decryption tool and save it somewhere on your computer. Please make sure that you do not run a clean-up utility which detects and removes the ransom-note prior to execution of this tool. The ransom-note is needed to recover the decryption key, as it allows us to compute the unique decryption key for your files. For this recovery solution to work, you must have at least (1) copy of the ransom-note on your PC. Only if this step succeeds will the decryption process continue. This tool REQUIRES an active Internet connection as our servers will attempt to reply to the submitted ID with a possibly valid RSA-2048 private key. You can recognize this ransomware and its version by the extension it appends to the encrypted files and/or from the first line of the ransom-note. The below table shows the versions of GandCrab this tool can decrypt and how to identify the version you have been inflicted with.
Bitdefender offers a free utility that automates the data decryption process. The good news is that now you can have your data back without paying a cent to cyber-criminals. But since then, victims of subsequent versions of GandCrab and its ‘ransomware-as-a-service’ affiliate approach have been reaching out to us for help. In February 2018, Bitdefender released the world’s first decryption tool to help GandCrab ransomware victims get their data and digital lives back for free. If you need to decrypt versions 1, 4, 5.0.1 through 5.2, then download and run our new tool linked below.
Update June 2019: Our collaboration with the Romanian Police, Europol and other law enforcement agencies has yielded another new decryptor for all GandCrab ransomware versions released, except for v2 and v3.
0 kommentar(er)
