{"id":12091,"date":"2016-05-13T09:18:39","date_gmt":"2016-05-13T13:18:39","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?p=12091"},"modified":"2020-02-26T11:09:20","modified_gmt":"2020-02-26T16:09:20","slug":"cryptxxx-decryption-20","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/cryptxxx-decryption-20\/12091\/","title":{"rendered":"Update: CryptXXX solved again"},"content":{"rendered":"

At the tail end of last month, we announced that our researchers had developed a decryption tool to beat CryptXXX ransomware<\/a> and help the victims get their files back for free. Earlier this week, we discovered that the ransomware had evolved<\/a> to stop our tool from working. Criminals and trolls had their laugh\u2026 for a few days.<\/p>\n

But we don\u2019t like to let criminals or trolls win, and are happy to announce that our team has updated our decryption tool to adapt to the second version of CryptXXX in our RannohDecryptor 1.9.1.0.<\/p>\n

The tool can be downloaded from here in English<\/a> or here in Russian<\/a> completely free.<\/p>\n

Some notes on the update include:<\/p>\n

1. We support decryption of about 40 popular file formats, including documents, archives, images, etc. Unfortunately, there is no possibility to decrypt any arbitrary file format.<\/p>\n

2. Decryption may take some time. Generally, the 1st file gets decrypted within several minutes, and all subsequent files in a matter of seconds (each). In the worst case every file will take several minutes. The utility notifies the user prior to start with the following message:<\/p>\n

\"Key<\/a><\/p>\n

3. Original copy is not needed for Cryptxxx v2.<\/p>\n

While this tool will help those infected decrypt their .crypt<\/b> files, we know that criminals will always look to evolve to stop workarounds from good guys in cybersecurity. It is an unfortunate reality in the current world we live in. But fear not, we won\u2019t rest and will stay vigilant to protect you.<\/p>\n

https:\/\/www.instagram.com\/p\/8yWfLlv0Nq\/<\/p>\n

With that said, prevention is always better than reacting after the fact. Kaspersky Lab\u2019s security solutions proactively block CryptXXX variants as well as other forms of ransomware and malware of other kinds. We also advise that you protect your computer with a security software. You don\u2019t have to use us, but you should use some sort of protection. If you need a reliable solution, please visit our site<\/a>.<\/p>\n

Update:<\/b> Solved again! Read more about how we\u2019re winning the war with CryptXXX here: https:\/\/www.kaspersky.com\/blog\/cryptxxx-v3-ransomware\/13628\/<\/a><\/p>\n\n","protected":false},"excerpt":{"rendered":"

While many got a good laugh about CryptXXX evolving to beat out tool, ransomware is no laughing matter. Introducing V2 of our tool.<\/p>\n","protected":false},"author":636,"featured_media":12093,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5,2683,9],"tags":[1614,1577,77,1733,36,420,422],"class_list":{"0":"post-12091","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-threats","9":"category-tips","10":"tag-crypt","11":"tag-cryptxxx","12":"tag-cybercrime","13":"tag-decryptors","14":"tag-malware-2","15":"tag-ransomware","16":"tag-threats"},"hreflang":[{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/cryptxxx-decryption-20\/12091\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/cryptxxx-decryption-20\/7137\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/cryptxxx-decryption-20\/7179\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/cryptxxx-decryption-20\/7106\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/cryptxxx-decryption-20\/8314\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/cryptxxx-decryption-20\/8164\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/cryptxxx-decryption-20\/11896\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/cryptxxx-decryption-20\/2058\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/cryptxxx-decryption-20\/5634\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/cryptxxx-decryption-20\/6244\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/cryptxxx-decryption-20\/11362\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/cryptxxx-decryption-20\/11896\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/cryptxxx-decryption-20\/12091\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/cryptxxx-decryption-20\/12091\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com\/blog\/tag\/crypt\/","name":".crypt"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/12091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/636"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=12091"}],"version-history":[{"count":4,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/12091\/revisions"}],"predecessor-version":[{"id":33692,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/12091\/revisions\/33692"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/12093"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=12091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=12091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=12091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}