The Avast Decryption Tool for GandCrab is a free, standalone software utility designed to help victims of the notorious GandCrab ransomware restore their locked files without paying a ransom. It is part of Avast’s broader “Unlock Your Data” initiative, which provides free recovery tools for over 30 different ransomware strains. Overview of GandCrab Ransomware
Market Dominance: Released in January 2018, GandCrab operated on a Ransomware-as-a-Service (RaaS) model and controlled over 50% of the ransomware market by mid-2018.
Impact: It infected over 1.5 million victims globally, extorting more than $2 billion before law enforcement interventions forced its shutdown.
Indicators of Infection: Infected files have extensions like .GDCB, .CRAB, or .KRAB appended to them. The malware leaves ransom notes named GDCB-DECRYPT.txt or KRAB_DECRYPT.txt inside affected folders. How the Avast Decryption Tool Works
Master Keys Integration: The tool utilizes master decryption keys released by law enforcement agencies (such as the FBI) as well as specific keys leaked during the active lifetime of the ransomware.
Supported Versions: It can successfully decrypt files targeted by GandCrab versions 1, 4, and 5 through 5.2.
Limitations: It cannot decrypt GandCrab versions 2 and 3, nor can it bypass the encryption of version 5.3. Furthermore, like many Avast utilities, it primarily handles files that rely on known or offline master keys. Step-by-Step Decryption Process
You can safely download the utility directly from the official Avast Ransomware Decryption Tools Page.
Launch the Tool: Run the downloaded executable file on your infected Windows PC.
Select Locations: Point the wizard toward the specific local drives, network drives, or folders containing the encrypted files.
Backup Files (Recommended): Check the option to “Backup encrypted files” within the wizard before starting. This ensures your data remains safe if the process is interrupted or if a file becomes corrupted.
Administrator Rights: Grant the tool administrator privileges if you need to access system-protected files.
Decrypt: Click “Decrypt” and wait for the tool to scan and unlock your data.
If you are dealing with a ransomware infection right now, let me know the exact file extension added to your files or the name of the ransom note so I can confirm if this specific tool will work for you.
Free Ransomware Decryption Tools | Unlock Your Files – Avast
Leave a Reply