{"id":7179,"date":"2016-05-13T10:02:01","date_gmt":"2016-05-13T14:02:01","guid":{"rendered":"https:\/\/kasperskydaily.com\/uk\/?p=7179"},"modified":"2020-02-26T15:11:55","modified_gmt":"2020-02-26T15:11:55","slug":"cryptxxx-decryption-20","status":"publish","type":"post","link":"https:\/\/www.kaspersky.co.uk\/blog\/cryptxxx-decryption-20\/7179\/","title":{"rendered":"Update: CryptXXX solved again"},"content":{"rendered":"

At the tail end of last month, we announced that our researchers had developed a decryption tool to beat CryptXXX ransomware and help victims get their files back, all for free. Earlier this week, we discovered that the ransomware had evolved to stop our tool from working. Criminals and trolls had their laugh\u2026 for a few days.<\/p>\n

But we don\u2019t like to let criminals or trolls win, and are happy to announce that our team have\u00a0updated the decryption tool again to adapt to the second version of CryptXXX in our RannohDecryptor 1.9.1.0<\/strong>.<\/p>\n

The tool can be downloaded from here<\/a> in English or here in Russian completely free.<\/p>\n

Some notes on the update include:<\/p>\n

1. We support decryption of about 40 popular file formats, including documents, archives, images, etc. Unfortunately, there is no possibility to decrypt any arbitrary file format.<\/p>\n

2. Decryption may take some time. Generally, the 1st file gets decrypted within several minutes, and all subsequent files in a matter of seconds (each). In the worst case every file will take several minutes. The utility notifies the user prior to start with the following message:<\/p>\n

\"cryptxxx-v2-time\"<\/p>\n

3. Original copy is not needed for Cryptxxx v2.<\/p>\n

While this tool will help those infected decrypt their .crypt<\/b> files, we know that criminals will always look to evolve to stop workarounds from good guys in cyber-security. It is an unfortunate reality in the current world we live in.<\/p>\n

https:\/\/www.instagram.com\/p\/8yWfLlv0Nq\/<\/p>\n

With that said, prevention is always better than the cure. Kaspersky Lab\u2019s security solutions pro-actively block CryptXXX variants as well as other forms of ransomware and malware. We also advise that you protect your computer with a security software. \u00a0Of course, you don\u2019t have to use our product, however you should use some<\/em> sort of protection. If you need a reliable solution, please visit our site where you can get up to 30% off now<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

While many got a good laugh about CryptXXX evolving to beat out tool, ransomware is no laughing matter. Introducing V2 of our tool.<\/p>\n","protected":false},"author":636,"featured_media":7180,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5,2026,9],"tags":[1465,1439,77,1466,36,441,529],"class_list":{"0":"post-7179","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-threats","9":"category-tips","10":"tag-crypt","11":"tag-cryptxxx","12":"tag-cybercrime","13":"tag-decryption-tools","14":"tag-malware-2","15":"tag-ransomware","16":"tag-threats"},"hreflang":[{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/cryptxxx-decryption-20\/7179\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/cryptxxx-decryption-20\/7137\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/cryptxxx-decryption-20\/7106\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/cryptxxx-decryption-20\/8314\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/cryptxxx-decryption-20\/8164\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/cryptxxx-decryption-20\/11896\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/cryptxxx-decryption-20\/2058\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/cryptxxx-decryption-20\/12091\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/cryptxxx-decryption-20\/5634\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/cryptxxx-decryption-20\/6244\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/cryptxxx-decryption-20\/11362\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/cryptxxx-decryption-20\/11896\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/cryptxxx-decryption-20\/12091\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/cryptxxx-decryption-20\/12091\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.co.uk\/blog\/tag\/crypt\/","name":".crypt"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/posts\/7179","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/users\/636"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=7179"}],"version-history":[{"count":3,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/posts\/7179\/revisions"}],"predecessor-version":[{"id":19281,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/posts\/7179\/revisions\/19281"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/media\/7180"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=7179"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=7179"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=7179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}