If you have found your files ransomed by GandCrab, you now have an easy, free solution to your woes. However, be careful--there is already a new strain of GandCrab that the new decrypter is not compatible with.
GandCrab V5 is a new strain of ransomware and a variation on the pre-existing GandCrab ransomware, first spotted in the wild in late September. When it encrypts its victims’ files, it adds a file extension comprised of five random characters to each file name. The extension is different for every victim.
GandCrab V5 is distributed via malvertising, or the use of online ad space to spread viruses. Malvertising injects malicious code into online ad networks which can then appear even in the banner ad space of trusted and legitimate websites. The malicious code can spread from the ad to the user even if the user does not click on the ad.
Victims of GandCrab V5 are infected without realizing it. GandCrab V5 will scan your computer as well as all network shares, not just mapped drives, for files to encrypt.
---= GANDCRAB V5.0 =---
All your files, documents, photos, databases, and other important files are encrypted and have the extension: [EXTENSION] The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files. The server with your key is in a closed network TOR. You can get there by the following ways:>
Download Tor browser – https://www.torproject.org
Install Tor browser
Open Tor Browser
Open link in TOR browser: [LINK]
Follow the instructions on this page
On our page you will see instructions on payment and get the opportunity to decrypt 1 file for free.
IN ORDER TO PREVENT DATA DAMAGE:
DO NOT MODIFY ENCRYPTED FILES
DO NOT CHANGE DATA BELOW
Bitdefender, in partnership with law enforcement agencies, has developed a decrypter tool that is compatible with GandCrap V1, 4, and 5. This tool is free to download and use and can be found on Bitdefender's website.
However, there has already been a newly-released strain of GandCrab V5, with the version number V5.0.5, which is not affected by the decrypter. If you find yourself infected, you may have to wait for a new version of the decrypter to be developed.
Since one of the primary vectors of GandCrab V5 appears to be malicious code in online advertisements, install an adblocker to your web browser. However, this is not a perfect solution; these malicious ads can even show up on well-regarded and legitimate sites, many of which may prevent you from visiting them unless you whitelist their site in your adblocker of choice.
Other tips to protect yourself from LockCrypt 2.0 ransomware infection: