SensorsTechForum - How to Technology and PC Security Forum

PC Security and Protection => Malware Removal Questions and Guides => Topic started by: sombraemp on January 25, 2019, 01:13:16 am

Title: Grancrab 5.1
Post by: sombraemp on January 25, 2019, 01:13:16 am
I was infected by Grancrab 5.1 and the bitfender grancrab decryptor does not work. The extension of the  files is srpxwg and the txt name is SRPXWG-DECRYPT.txt.

Any solutions?

In case there is no solution, is it possible to backup the encrypted files until the day there is a decryptor tool?

Thank you
Title: Re: Grancrab 5.1
Post by: Execute on January 25, 2019, 06:55:12 pm
I was infected by Grancrab 5.1 and the bitfender grancrab decryptor does not work. The extension of the  files is srpxwg and the txt name is SRPXWG-DECRYPT.txt.

Any solutions?

In case there is no solution, is it possible to backup the encrypted files until the day there is a decryptor tool?

Thank you

Hello, @sombraemp.

This the newest version of the ransomware.
Currently, there is no solution.
The Bitdefender decryptor decrypts only until version 5.0.3 successfully - there are at least 10 more versions released after that.
Not sure what the details are but there might never be a decryptor.

Save your most important files and start doing backups - once you have been a ransomware victim you may be targeted by the malware authors in the future.

Hopefully, in the future there will be a solution, but it is a tough ransomware.

Kind Regards,
Execute
Title: Re: Grancrab 5.1
Post by: sombraemp on January 25, 2019, 07:01:21 pm
I was infected by Grancrab 5.1 and the bitfender grancrab decryptor does not work. The extension of the  files is srpxwg and the txt name is SRPXWG-DECRYPT.txt.

Any solutions?

In case there is no solution, is it possible to backup the encrypted files until the day there is a decryptor tool?

Thank you

Hello, @sombraemp.

This the newest version of the ransomware.
Currently, there is no solution.
The Bitdefender decryptor decrypts only until version 5.0.3 successfully - there are at least 10 more versions released after that.
Not sure what the details are but there might never be a decryptor.

Save your most important files and start doing backups - once you have been a ransomware victim you may be targeted by the malware authors in the future.

Hopefully, in the future there will be a solution, but it is a tough ransomware.

Kind Regards,
Execute

Thank you for your quick reply. But if in the future there will be a solution. Is it possible to keep the damaged files in case there is a decryptor tool?
Title: Re: Grancrab 5.1
Post by: Flinkgutt on January 26, 2019, 12:29:57 am
My pc is effected by gandcrab 5.1 ransomeware with extension .hksrmbq all files with some hksrmbq.txt files in each folder also. Is there any solution i can get my files specially some most important video files back?
Title: Re: Grancrab 5.1
Post by: saitamanaruti on January 27, 2019, 01:58:52 am
i have also been affected by this darned ransoware my files were infused with this suffix *.dilrbr please update us if there are any decryptors that will come available been searching the net the past  2 days to no avail
Title: Re: Grancrab 5.1
Post by: Execute on January 28, 2019, 10:44:27 am
@Flinkgutt Currently, there is no solution.

@sombraemp, yes you can save your files to a USB or a disk drive and wait.

@saitamanaruti, all of you, Gandcrab victims will get notified both in the forum and blog.
The articles and posts will get updated, too. Let us hope that there will be a solution soon.
Title: Re: Grancrab 5.1
Post by: saitamanaruti on January 28, 2019, 11:08:26 pm
exactly what i did quarantined my infected external hdd with years of work and start to wait for the solution to arrive
Title: Re: Grancrab 5.1
Post by: Ahmed on January 31, 2019, 03:54:28 pm
I was infected by Grancrab 5.1 and the bitfender grancrab decryptor does not work. The extension of the  files is BZEOVO and the txt name is BZEOVO-DECRYPT.txt.

Any solutions?
Title: Re: Grancrab 5.1
Post by: Execute on February 04, 2019, 11:24:42 am
Hello @Ahmed,
no solutions are available yet.
Title: Re: Grancrab 5.1
Post by: kainen on February 07, 2019, 01:05:37 am
I too was infected by Grancrab 5.1

The extension of the  files is JYUTFTSIJQ and the txt name is JYUTFTSIJQ-DECRYPT

Please advise. Thanks

Title: Re: Grancrab 5.1
Post by: sensadmin on February 11, 2019, 10:58:29 am
I too was infected by Grancrab 5.1

The extension of the  files is JYUTFTSIJQ and the txt name is JYUTFTSIJQ-DECRYPT

Please advise. Thanks

Every version of GandCrab from 5.0.4 onward is NOT decryptable.

Save your files to a USB or a disk drive (or even cloud storage) and wait for a possible decryption tool. Some ransomware variants might take years to decrypt or there is no chance for decryption. So, if you didn't have a backup of those files you cannot recover them at the time being. Try a data recovery software, but I doubt that will work. Renaming mp3 files back to their extension might work.

With Regards,
Execute
Title: Re: Grancrab 5.1
Post by: Sinefilim on February 13, 2019, 10:21:43 pm
Hi guys there,
MyPC infected by GandCrab v5.1 and file extension is : .FTDNFWY
I've done all what has to be done so far but no found solution.
Now Im here and request for your help.My 8TB family data is encyrpted.
Title: Re: Grancrab 5.1
Post by: Execute on February 14, 2019, 12:24:29 pm
Hi guys there,
MyPC infected by GandCrab v5.1 and file extension is : .FTDNFWY
I've done all what has to be done so far but no found solution.
Now Im here and request for your help.My 8TB family data is encyrpted.

Unfortunately there is no solution - you will have to wait for a possible decryption tool to be released.
Try a data recovery tool. Another thing is to try and rename your files to their original names and extensions - one user recovered .mp3 files like that - maybe the ransomware has a weakness...
Title: Re: Grancrab 5.1
Post by: kalo11 on February 17, 2019, 12:01:17 pm
i was infected GandCrab 5.1
waiting for a decryptor or any other solution
i have a question: can i reformat my system and use my backup encryted files for recover them if decryptor will comme available?
Title: Re: Grancrab 5.1
Post by: Nauman on February 17, 2019, 01:22:47 pm
any update about data release from that virus  ???  >:( >:(

I was infected by Grancrab 5.1 and the bitfender grancrab decryptor does not work. The extension of the  files is CQITLHNH and the txt name is CQITLHNH-DECRYPT.txt.

Any solutions? or any U  pdate
Title: Re: Grancrab 5.1
Post by: Execute on February 19, 2019, 11:01:05 am
@kalo11 - You probably should be able to decrypt your files even with a reformatted system, but we cannot know as we don't know IF there will be a decryptor ever released, if it will have that capability or not... so I cannot say.

@Nauman - no update yet - if there is an update, you and all other users will know. The GandCrab decryptor works. It was released last year for older versions. No one from this forum is to blame that you got ransomware, so the angry faces are unnecessary. Unfortunately, no solutions available.
Title: Re: Grancrab 5.1
Post by: Execute on February 19, 2019, 03:24:40 pm
The new GandCrab decryptor is a fact - works for every version of GandCrab until 5.1 (including 5.1). It does not work for version 5.2!
Grab it from BitDefender Labs: https://labs.bitdefender.com/2019/02/new-gandcrab-v5-1-decryptor-available-now/ (https://labs.bitdefender.com/2019/02/new-gandcrab-v5-1-decryptor-available-now/)
Title: Re: Grancrab 5.1
Post by: kalo11 on February 19, 2019, 08:13:10 pm
hello,
there is a new decryptor tool released by bd today

NOT SURE IF WILL WORK FOR LAST 5.1 version...
i'm trying now ::)
Title: Re: Grancrab 5.1
Post by: Execute on February 20, 2019, 02:02:50 pm
@kalo11, yes - we already updated the posts and the blog articles about it. Tell us how it works.
Title: grandgrab 5.1 vbpik
Post by: jefferson on June 14, 2019, 02:19:57 pm
Good morning my pc got grandgrab 5.1 extension vbpik and I can not decrypt by favom help me

Title: Re: grandgrab 5.1 vbpik
Post by: Execute on June 14, 2019, 03:59:20 pm
Good morning my pc got grandgrab 5.1 extension vbpik and I can not decrypt by favom help me

I have merged your topic with an older one for GandCrab 5.1.
There is already a decryptor available as you can see in the above comments.
Here is a link: https://labs.bitdefender.com/2019/02/new-gandcrab-v5-1-decryptor-available-now/ (https://labs.bitdefender.com/2019/02/new-gandcrab-v5-1-decryptor-available-now/)

Try it! =)