Jump to content

my files are encrypted with a virus.extension: yztmyslnb

Recommended Posts


Such a random extension could be the result of a GandCrab Ransomware attack. Therefore, if you deleted a note after reading it, then perhaps remember this word "GandCrab", because it is written in the title of the ransomware message.

Still, if you do not remember anything that was in the note, then it is possible that the malicious file is still on your PC in the archive that you downloaded before launching the malicious content. Look in the downloads, you can transfer all the archives with the programs and the recent exe-files to any cloud storage and by your link to these files we will look at all the files for harmfulness and relevance to the  similar attack.

Only it must be done in the current day, later it will go to the background and I cannot already help you.

Link to comment
Share on other sites

For previous versions, there is GandCrab v5.1 Decryptor. Your files may have been encrypted an early or latest version that is not yet decrypted.

But before you hurry to do decrypt the files, you need to make sure that there is neither this infection nor any other infection on the PC. We have seen cases when those who suffered from previous versions successfully decrypted files, but then they were attacked by the same encryptor, which encrypted files with a different extension, and used an encryption key that cannot be calculated. In punishment for haste and complacency, the user lost his files a second time and, possibly, forever.

As experience shows, very often after encryption on a PC, this or another infection remains, which you could get together with the encryptor.
Malicious programs often work in groups: trojans of a different type, password hijackers, backdoors, dormant malware, dangerous browser plugins.
Therefore, I advise you to check your PC for active and dormant malware. This can be done here in the forum in the next section.

You can also download the free tool Emsisoft Emergency Kit yourself and check the computer.


Link to comment
Share on other sites

This topic is now closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...