Ransomware and how to fix the consequences

As you all know, Ransomware has been growing rapidly recently and has become a huge threat to individuals as well as businesses, especially this type of malware is gradually becoming more and more popular. than in Vietnam. One of the ransomware that is completing in Vietnam is Teslacrypt.

You must have known Teslacrypt with the feature of encrypting files on infected computers and leaving the extensions .VVV, .XXX, .YYY, .AAA, .ECC, .EZZ, .EXX, .XYZ… .

In variants 1,2,3 and 4 of Teslacrypt (extension: .ECC, .EZZ, .EXX, .XYZ) encryption key save one of the folders:

• %Temp%
• %AppData%
• %LocalAppData%

=> With name: key.data, storage.bin

You can use the following tools to decrypt the file:

For later variants of Teslacrypt (extension: .xyz, .zzz, .aaa, .abc, .ccc, .vvv) Encryption keys stored in Registry or do not save on computer)

You can try your luck with this new tool:

This tool has just been released recently and we have not been able to use it yet.

Hope the above tools will help you in case of TeslaCrypt infection. Those of you who have successfully tested the above tools in the above cases, please comment for others’ reference.