How to Decrypt Files Encrypted by Ransomware.

Author
Jascha Luca
Publication date
20.02.2017
Ilość komentarzy
0

Malware is not as simple as it used to be, people are getting smarter and the technology they are using is way more sophisticated than it used to be. On top of this, they are also starting to become more organized and aggressive, ransomware is one of the extremely aggressive methods used to turn a profit. If you've been caught out by ransomware hopefully this guide can help you get your files back.  

save_my_files_from_ransomware

How to make sure your Facebook Account is Truly Secured.

If you are not 100% familiar with how ransomware works, It's quite similar to how a kidnapper would hold a person hostage and demand money for their freedom. In the case of ransomware, your computer is infected by a file or program which will encrypt your files and data. If you wish your data to be returned safely you are required to pay the fee demanded. Which can vary depending on what the creator asks for, the success rate for paying the demanded fee is pretty low and usually very expensive.

The only real solution in the past has been to count your losses and restore your data from a backup which you should hopefully have somewhere. Even if it's not completely up to date it's better than the alternative fee. Now though there is an alternative if you have fallen victim to ransomware, Trend Micro have a Decryptor available that can decrypt a good portion of ransomware currently circulating the internet.

Below is this current list of Ransomware Supported Families That Trend Micro's latest version can handle.

CryptXXX V1, V2, V3

XORIST

CryptXXX V4, V5

Teamxrat / Xpan

Crysis

XORBAT

DemoTool

CERBER V1

DXXD

Stampado

TeslaCrypt V1

Nemucod

TeslaCrypt V2

Chimera

TeslaCrypt V3

LeChiffre

TeslaCrypt V4

MirCop

SNSLocker

Jigsaw

AutoLocky

Globe / Purge

BadBlock

V2:

777

V3:

Download Trend Micro Ransomware File Decryptor.

How to use Trend Micro Ransomware File Decryptor

Once downloaded and installed, the first thing you will need to do is choose the ransomware name from the list. Click Select from the main screen then choose the name of the Ransomware. If you are not 100% sure of the name you can select the Option I do not know the ransomware name. The tool will now ask you to select the target file to be Identified. From here the Trend Micro tool will try to automatically identify the ransomware-based on its file signature.  

How_to_protect_my_files_from_ransomware

Note: Make sure you are Decrypting the files from the original PC that was infected. Do not try to decrypt them from an alternate PC as the results will not be as promising.

The next thing you will need to do is select the file or folder on your PC you want Trend Micro to decrypt. The tool has the option to decrypt a single file or files that are inside a folder, including subfolders. Click Select & Decrypt, choose a folder or a file and click OK to start the Decrypting process.

How_to_save_my_files_from_ransomware_without_paying

During the encryption process Trend Micro may ask you to provide additional information about the files it is decrypting. Follow the prompts and read the instruction that come with each, to ensure you get the best results. When offered two files with the same name, always choose the larger file as it contains more data. When the scanning and decryption is finished you will be shown the results, which will include, scan duration, number of infected files and number of files decrypted. The fixed files will have the same name as the original file, however, _fixed will be tagged to the ending so you can easily distinguish between them.

Keep in mind that this tool does have its limitations and might not be able to save all of your files and that the process may take hours, depending on how powerful your computer is. If you are looking for ways to keep yourself safe from this in future you can check out our guide on:

How to stay safe online and Protect your Data from Harm.

Join the discussion

comments powered by Disqus