Thev Posted April 30, 2019 Report Share Posted April 30, 2019 How to decrypt .crabslkt file. Link to comment Share on other sites More sharing options...
GT500 Posted April 30, 2019 Report Share Posted April 30, 2019 I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply if you would like for me to review them. Link to comment Share on other sites More sharing options...
Amigo-A Posted May 1, 2019 Report Share Posted May 1, 2019 Let us know the results of the actions recommended to you by GT500. Extortionists often borrow information from each other (program code, texts from notes, extensions to be added to files, etc.), to confuse the victims, force them to search for a solution on the Internet, find the wrong, try do something, do fail, and return to the extortionists, to pay of ransom for decryption. One possible outcome could be Scarab. This means that your files were encrypted too by Scarab-Gefest Ransomware, from the Scarab family. In the article in === BLOCK OF UPDATES === (below the main article) there is a description in Update April 7-14, 2019. Alas. No free decoder. You can get the private decryption that DrWeb and ESET do if they have an encoder file (requires payment for services). Recently, I have already talked about this in detail in the other topic. In order for me not to repeat, please read this on the link in the next topic. Link to comment Share on other sites More sharing options...
GT500 Posted May 2, 2019 Report Share Posted May 2, 2019 16 hours ago, Amigo-A said: One possible outcome could be Scarab. This means that your files were encrypted too by Scarab-Gefest Ransomware, from the Scarab family. In the article in === BLOCK OF UPDATES === (below the main article) there is a description in Update April 7-14, 2019. Alas. No free decoder. You can get the private decryption that DrWeb and ESET do if they have an encoder file (requires payment for services). Recently, I have already talked about this in detail in the other topic. In order for me not to repeat, please read this on the link in the next topic. Without any further information, I was told that this was more than likely the case. Link to comment Share on other sites More sharing options...
Recommended Posts