At the tail end of last month, we announced that our researchers had developed a decryption tool to beat CryptXXX ransomware and help victims get their files back, all for free. Earlier this week, we discovered that the ransomware had evolved to stop our tool from working. Criminals and trolls had their laugh… for a few days.
But we don’t like to let criminals or trolls win, and are happy to announce that our team have updated the decryption tool again to adapt to the second version of CryptXXX in our RannohDecryptor 126.96.36.199.
The tool can be downloaded from here in English or here in Russian completely free.
Some notes on the update include:
1. We support decryption of about 40 popular file formats, including documents, archives, images, etc. Unfortunately, there is no possibility to decrypt any arbitrary file format.
2. Decryption may take some time. Generally, the 1st file gets decrypted within several minutes, and all subsequent files in a matter of seconds (each). In the worst case every file will take several minutes. The utility notifies the user prior to start with the following message:
3. Original copy is not needed for Cryptxxx v2.
While this tool will help those infected decrypt their .crypt files, we know that criminals will always look to evolve to stop workarounds from good guys in cyber-security. It is an unfortunate reality in the current world we live in.
With that said, prevention is always better than the cure. Kaspersky Lab’s security solutions pro-actively block CryptXXX variants as well as other forms of ransomware and malware. We also advise that you protect your computer with a security software. Of course, you don’t have to use our product, however you should use some sort of protection. If you need a reliable solution, please visit our site where you can get up to 30% off now.