Malware Ransomware Grandcrab 5.2

[MagicBoo]

My computer recently became infected with a malware called grandcrab 5.2, it does not bother me to format my computer but I have a portable hard drive that does not want to lose the files, how can I recover my work files

PD. Sorry for my english my language is Spanish

 

[ThumperTM]

@DVDR_Dog - Is rannsomware expert, If am not wrong there is not tool to recover encrypted files with Grandcrab 5.2

 

[Megabyte]

You can recover your images anyway - something I found by accident after taking an 82GB hit from Gandcrab 5.2.

I had Google Backup & Sync running in the background, it identified the newly encrypted files (in my case image_name.jpg.vnveni) as images & uploaded them to Google Photos - where they appeared as images. No shit, Google's servers don't recognise Gandcrab encryption.

I was like WTF? & did intend to research this thing, but was a bit busy batting Gandcrab off from my network, recovering from backup then running extra insurance backups across my clientbase. Then I forgot about it. Until now.

 

[DVDR_Dog]

Wow that's some great news! Go figure. I would have never guessed. I wonder what processing google does to retrieve the images? I have to admit I have yet to a system with that infection yet.
Thanks for the info Megabyte. Heard it here first.

 

[DVDR_Dog]

GOOD NEWS!
A decrypter for GandCrab V 5.2 has been released.

Decryption Tools | The No More Ransom Project

IMPORTANT! Before downloading and starting the solution, read the how-to guide. Make sure you remove the malware from your system first, otherwise it will repeatedly lock your system or encrypt files. Any reliable antivirus solution can do this for you.

www.nomoreransom.org

 

[ThumperTM]

GOOD NEWS!
A decrypter for GandCrab V 5.2 has been released.

Decryption Tools | The No More Ransom Project

IMPORTANT! Before downloading and starting the solution, read the how-to guide. Make sure you remove the malware from your system first, otherwise it will repeatedly lock your system or encrypt files. Any reliable antivirus solution can do this for you.

www.nomoreransom.org

Thanks for your post, i just saw it now. Good news

 

[DVDR_Dog]

Please ignore all of tolikkk's posts and do not follow any links provided.

 

[jackwilliam7]

GrandCrab 5.2 is a ransomware that locks up your files and demands payment to get them back. It usually spreads through email attachments or sketchy websites. So, be cautious with any links or files you don't recognize to keep your computer safe.