If Yes, then we have a Good news for you:
Victims of CoinVault ransomware can now decrypt their files encrypted by malware using a free tool released by Kaspersky Lab.
With the Help of The National High Tech Crime Unit (NHTCU) of the Dutch Police, Security Researchers at Kaspersky Labs have developed ‘CoinVault Ransomware Decryptor‘ that decrypts files locked by ransomware like CoinVault.
Ransomware malware is a growing cyber threat in which hackers primarily gain access to a user’s system and demand a ransom be paid.
Ransomware malware infects a computer or device to restrict the user’s access to the infected computer.
Typically, the ransomware malware will either ‘lock’ the computer to prevent normal usage or encrypt the files on it to prevent access.
Recently, during an investigation of the CoinVault ransomware, the Dutch police were able to obtain a ‘Decryption keys’ database from a command and control server of CoinVault.
The Ransomware Decryption tool released by Kaspersky Labs utilizes same decryption keys those were recovered by the Dutch police.
However, this Ransomware Decryption software will not work for all the victims because Police have just obtained a few thousand decryption keys from one command and control server of CoinVault.
Don’t worry! Dutch police are actively searching for more CoinVault server and hope to find new ransomware decryption keys as soon as possible.
- Step 1: If you are infected with CoinVault, just note down the Bitcoin wallet address mentioned by the malware on the screen.
- Step 2: Get the encrypted file list from ransomware interface.
- Step 3: Download an effective antivirus and remove CoinVault Ransomware first.
- Step 4: Open https://noransom.kaspersky.com and download the decryption tool released by Kaspersky Labs.
- Step 5: Install additional libraries and Decrypt your files.
In order to protect your computer from malware: