Avast Decryption Tools

GandCrab Decryption Tools:

Avast has created a free tool that can unlock files if your PC is infected by GandCrab ransomware, which uses an AES-256 encryption algorithm. The tool, available via the No More Ransom website, can be run against a folder or drive to identify and decrypt affected data automatically.

As with other ransomware, GandCrab attacks encrypts important files on your computer and then demands a payment (usually in cryptocurrency) to regain access to them. Typically, cybercriminals spread the malware via spam emails that masquerade as legitimate messages from well-known shipping companies such as DHL and FedEx. The emails include a malicious attachment or a link that, when clicked, downloads and executes the ransomware.

GandCrab has become so effective that its creators recently updated the code to make it harder for security experts to crack and release free decryption tools. They also created Sodinokibi, a ransomware-as-a-service variant that works with the same business model as GandCrab.

While heaving a sigh of relief is premature, this update may slow the progress made by researchers. In the meantime, the best protection against ransomware is a comprehensive security suite that includes a reliable antivirus and a firewall.

To use the Avast GandCrab decryptor, you must have Windows set to show file extensions. This way, you can tell which version of GandCrab is infecting your system by looking at the file extension. For example, GandCrab versions 2 and 4 create encrypted files with the.gdcb or.crab extension, while the more recent build v5.2 is uncrackable at this time.