Windows 10: Ransomware GandCrab V5.1

Discus and support Ransomware GandCrab V5.1 in AntiVirus, Firewalls and System Security to solve the problem; Split from this thread. Hello: Every folder on my computer has been encrypted, but it appeared to only the text files (.txt). Every folder has the... Discussion in 'AntiVirus, Firewalls and System Security' started by Bruce3937, Feb 16, 2019.

  1. BRUCE3937
    Bruce3937 Win User

    Ransomware GandCrab V5.1


    Split from this thread.​


    Hello:

    Every folder on my computer has been encrypted, but it appeared to only the text files (.txt).

    Every folder has the following txt file in it, IYSVYEN-DECRYPT.txt . The content of it is below:


    ---= GANDCRAB V5.1 =---

    ***********************UNDER NO CIRCUMSTANCES DO NOT DELETE THIS FILE, UNTIL ALL YOUR DATA IS RECOVERED***********************

    *****FAILING TO DO SO, WILL RESULT IN YOUR SYSTEM CORRUPTION, IF THERE ARE DECRYPTION ERRORS*****

    Attention!

    All your files, documents, photos, databases and other important files are encrypted and have the extension: .IYSVYEN

    The only method of recovering files is to purchase an unique private key.
    Only we can give you this key and only we can recover your files.


    The server with your key is in a closed network TOR. You can get there by the following ways:

    ----------------------------------------------------------------------------------------

    | 0. Download Tor browser - https://www.torproject.org/

    | 1. Install Tor browser
    | 2. Open Tor Browser
    | 3. Open link in TOR browser: http://gandcrabmfe6mnef.onion/d2423a03e2b6728
    | 4. Follow the instructions on this page

    ----------------------------------------------------------------------------------------


    On our page you will see instructions on payment and get the opportunity to decrypt 1 file for free.


    ATTENTION!

    IN ORDER TO PREVENT DATA DAMAGE:

    * DO NOT MODIFY ENCRYPTED FILES
    * DO NOT CHANGE DATA BELOW

    ---BEGIN GANDCRAB KEY---
    lAQAAMNnhycWRZyVhy8LbcGEvkuO5gPk1CZMKENI57heIUb+N0IGlPLUJ5OXceGwdkW30l0lKXI/PjymQRy33sdnh9T9xrWdiZi4jO0xj0CBGDOe+gTtwRCToP016jnk8SNif7PttHX406V1hw0kjp4UfTnQx0S4wVhiAB2Oyazk+Diggrd3L//eP9oI1x2EwDSECIu4hg7uuKSGRbZB1XWLtsEmyZAZ37oI0FDNoqGDo07Nhevk0HxAEH4r0kdJB6pYBo4xriZzICiUrOCzleC7tuYoIkBqN2vq/gwGZuCwjb33IFd1QWL/KUCwE2cLlH7OGDlHekVIGah6zONfEekbAiDDuU4WgHeqYdZnKLowII9+BTW51PDcvwCfKWwepyxU3Y+9FNTrjh7cT0e83kIPaqbzHbJQRFFYkY88nob69FLHfTCUfe91MPHYfw81afIYVSbA9S32LTQjYoQypOslI0rP1iRW+aNlsT7RoQbKY0TbIQDKHXFW791OfFeGst80FuuhiejpupbQ/mQx3E5ZKP9EH+PBMtP+EujgS2zCcjC0USBEOLXbp0VLvV206XmiV6PN/n5nLikoD1m7tZKg+1BWEXa2gse34UxIhoHZgSSvjHpKQyZtxtcTvw7Nc6ZHqZYuvdSvInyk7ZPY5lR5k5gKC1y4anOQvPEmcVUcnBOgQoez1na+Tl6txaEwm7Y/tH1Cl3F0gsYKYSXrQaHpesY4alnnWglHLpyUYRHXIeN4iCf52qihU71u33NtZ0fTFZuurh+z8/Xvp2v666N0KoxgbypF0A4TGYxWnFVEr6P6euadbQz3Lu5vYMS6k1WC+RvNwjdPSAkMZfW1JScO5XyNyY5Ej1GO3Ahc5MyqCwc5enrBTBCCBhrAS7dc6w2jH0m7qGHqX2mN2S6EYaq37ErciLc+QHewA4ZEoDs1HZf0uNMoz7Kh5r1xGr9KMgJ1eZ4H5+eJNy6c8go7vLmvtWkvY7NDibkH5GbzWWEAnQ20eSzQvoK2xi2bSTa3KqUrcczbexvL7GyxUziDLI2be94+x/r9z9i56DKBlLSd+Q+Krprud3+H51FdU14vNmXcBU39D1ezjr/WfQpPhdJK2i0ub/uIYVYC8lNh9Qv8v4FF5BXptSfa1LewHk4PcQDPszXDF8DcKKeGMdTBApG2ZBPMW6iBjkwKNTLWKy0TRuXlJGax812UwUKAyDZVx2qKfvlEojJ478uVnxWZxhu+erh0td2YLISB5QKvBy9qwKmuEVWPX4Ch/MJRbqI8V/x+uIZ+KkLR3K****u3rcLgOGCPMwyaHRbpFECCerzlcdU6Bfq4BUA/08Mh7E3DxngUaU1oON1OBiO2bAi4SfNpVtnfrxuYVtqiSflhPKc/2LYY1/PpNKmnhmxhy/SERXoEjkZ4S/UInEuTbkRJ6BaasA0SEKFhKZYBOBV+8qdp1Dq/z3PA3QXgUwkfz3umAcn4cNtMfqjNOVI=
    ---END GANDCRAB KEY---

    ---BEGIN PC DATA---
    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
    ---END PC DATA---


    I have try the following STOPDecryter2017.exe program but it did not work.

    :)
     
    Bruce3937, Feb 16, 2019
    #1
  2. SMEED
    Smeed Win User

    Fixing GandCrab V5.0.4 Ransomware Virus And Decrypting all the affected files.

    That's correct....

    "Marcelo Rivero (Malware Intelligence Analyst) has reported that the new
    GandCrab V5.0.5 breaks the BitDefender decryption tool     so it will not work. Some victims have reported this new version is still being called V5.0.4.    "

    >
    https://www.bleepingcomputer.com/forums/t/669484/gandcrab-ransomware-help-support-topic-gdcb-crab-crab-decrypttxt/page-22#entry4608061

    Suggest reading also all the most recent posts in:
    https://www.bleepingcomputer.com/forums/t/669484/gandcrab-ransomware-help-support-topic-gdcb-crab-crab-decrypttxt/

    and reading/doing

     
    Smeed, Feb 16, 2019
    #2
  3. ARYAN4
    ArYan4 Win User
    Fixing GandCrab V5.0.4 Ransomware Virus And Decrypting all the affected files.

    hey,

    yesterday my pc was affected with this gandcrab ransomware virus and now all my files are encrypted..... Now i want to decrypt the files and remove this ransomware....can anyone suggest any methods to do so?? please reply quick...
    Ransomware GandCrab V5.1 9591e6cc-47d2-4e4a-9f54-9167b7b3afdd?upload=true.png
     
    ArYan4, Feb 16, 2019
    #3
  4. BORG 386
    Borg 386 Win User

    Ransomware GandCrab V5.1

    Free decryption tool released for multiple GandCrab ransomware version


    Source: Free decryption tool released for multiple GandCrab ransomware versions | ZDNet
     
    Borg 386, Feb 16, 2019
    #4
Thema:

Ransomware GandCrab V5.1

Loading...

  1. Ransomware GandCrab V5.1 - Similar Threads - Ransomware GandCrab

  2. Windows under attack: 0-day vulnerability used by ransomware group

    in Windows 10 News
    Windows under attack: 0-day vulnerability used by ransomware group: Microsoft released security updates for Windows yesterday and revealed today that the updates include a patch for a 0-day issue that is exploited in the wild. The vulnerability -- Windows Common Log File System Driver Elevation of Privilege Vulnerability -- is tracked as...

  3. GandCrab Ransomware Versions 5.1

    in AntiVirus, Firewalls and System Security
    GandCrab Ransomware Versions 5.1: how to get free Decrypter for the Latest GandCrab Ransomware Versions 5.1 https://answers.microsoft.com/en-us/protect/forum/all/gandcrab-ransomware-versions-51/bf5b70b0-9b39-447e-a9c6-efe3b320c5d9

  4. how to get free Decrypter for the Latest GandCrab Ransomware Versions 5.1

    in AntiVirus, Firewalls and System Security
    how to get free Decrypter for the Latest GandCrab Ransomware Versions 5.1: how to get free Decrypter for the Latest GandCrab Ransomware Versions 5.1 https://answers.microsoft.com/en-us/protect/forum/all/how-to-get-free-decrypter-for-the-latest-gandcrab/bf5b70b0-9b39-447e-a9c6-efe3b320c5d9

  5. Gandcrab v5.1 Ransomware .haznspmwlw Extension

    in AntiVirus, Firewalls and System Security
    Gandcrab v5.1 Ransomware .haznspmwlw Extension: Split from this thread. same here my laptop is infected with a ransomware called Gandcrab v5.1 file extention : haznspmwlw I need help removing it plz if anyone knows anything regarding it thanx...

  6. Fixing GandCrab V5.0.4 Ransomware Virus And Decrypting all the affected files.

    in AntiVirus, Firewalls and System Security
    Fixing GandCrab V5.0.4 Ransomware Virus And Decrypting all the affected files.: hey, yesterday my pc was affected with this gandcrab ransomware virus and now all my files are encrypted..... Now i want to decrypt the files and remove this ransomware....can anyone suggest any methods to do so?? please reply quick...[ATTACH]...

  7. Free decryption tool released for multiple GandCrab ransomware version

    in Windows 10 News
    Free decryption tool released for multiple GandCrab ransomware version: New decryption tool can recover files locked by GandCrab versions 1, 4, and 5. The No More Ransom project released today an updated and more potent decryption tool for the GandCrab ransomware in what Europol has described as the "latest victory of law enforcement in the...

  8. All files got encrypted by Gandcrab ransomware

    in AntiVirus, Firewalls and System Security
    All files got encrypted by Gandcrab ransomware: i got affected with Gandcrab ransomware .All my files are encrypted by the ransomware .So could you help me out from this. all the files are encrypted and have the extension: .VSBCZPFRJG Cant open any file Below is the message given by the Ransomware :...

  9. GandCrab Ransomware Attack .EUGHNI encryption

    in AntiVirus, Firewalls and System Security
    GandCrab Ransomware Attack .EUGHNI encryption: Hi, All files encrypted with .EUGHNI ext. Contacted Microsoft, they said cannot help. Ransom note .txt in every folder. Please help somebody. Anybody......

  10. A GandCrab ransomware decryption tool has been released

    in Windows 10 News
    A GandCrab ransomware decryption tool has been released: Victims of one the newest - and most unusual - families of ransomware could now be able to recover their files without giving into the demands of criminals because decryption tools have been released for free. A GandCrab ransomware decryption tool has been released as part...