my files are encrypted with a virus.extension: yztmyslnb

Recommended Posts

It is recommended to upload a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with to this site here:

You can paste a link to the results into a reply so that one of our experts can review them.

Share this post

Link to post
Share on other sites


Such a random extension could be the result of a GandCrab Ransomware attack. Therefore, if you deleted a note after reading it, then perhaps remember this word "GandCrab", because it is written in the title of the ransomware message.

Still, if you do not remember anything that was in the note, then it is possible that the malicious file is still on your PC in the archive that you downloaded before launching the malicious content. Look in the downloads, you can transfer all the archives with the programs and the recent exe-files to any cloud storage and by your link to these files we will look at all the files for harmfulness and relevance to the  similar attack.

Only it must be done in the current day, later it will go to the background and I cannot already help you.

Share this post

Link to post
Share on other sites

For previous versions, there is GandCrab v5.1 Decryptor. Your files may have been encrypted an early or latest version that is not yet decrypted.

But before you hurry to do decrypt the files, you need to make sure that there is neither this infection nor any other infection on the PC. We have seen cases when those who suffered from previous versions successfully decrypted files, but then they were attacked by the same encryptor, which encrypted files with a different extension, and used an encryption key that cannot be calculated. In punishment for haste and complacency, the user lost his files a second time and, possibly, forever.

As experience shows, very often after encryption on a PC, this or another infection remains, which you could get together with the encryptor.
Malicious programs often work in groups: trojans of a different type, password hijackers, backdoors, dormant malware, dangerous browser plugins.
Therefore, I advise you to check your PC for active and dormant malware. This can be done here in the forum in the next section.

You can also download the free tool Emsisoft Emergency Kit yourself and check the computer.


Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.