However, since the emergence of their tool to decrypt files for free, there has been a new encrypting ransomware going around that aims at scamming you into thinking this is a similar helpful tool – except that it demands something all scams do…. Sadly, anyone that was hit with different variants of encrypting ransomware are still out of luck. Then you can just download their tool (dubbed “DeCryptolocker”) and input the key and it will decrypt all files that are still encrypted.

All they have to do is upload a single encrypted file to this webpage and their server will email you your RSA key. Any previous victims from these variants that still have encrypted files left on their machine should be able to decrypt them with ease. That is a major portion of the traditional red GUI cryptolocker that became famous.

Since they have access to those RSA keys they essentially have the password required for every single file encrypted by a Cryptolocker variant that used Evgeniy Bogachev’s botnet. They used the command and control servers seized by the FBI during operation Tovar. Recently in the news we saw FireEye and Fox-IT provide the ability to decrypt files encrypted by older crpytolocker variants.

Decrypt files crypto locker