Emsisoft has released yet another ransomware decrypter. Emsisoft's tool is a decrypter for ApocalypseVM and works with the latest versions of this ransomware.
“To use Decrypter, you need an encrypted file that is at least 4096 bytes in size, as well as an unencrypted version of it. To start decryption, you need to provide Decrypter with both the encrypted file and its unencrypted version, by simply dragging and dropping it onto the Decrypter executable,” the company says.
The tool compares the two files and, if possible, “reads” the key required to decrypt the files.
The victim can then decide whether to use it on one, some, or all of the encrypted files.
The tool gives the option to select the C: drive by default, but you can also select other partitions or files to be decrypted.
Emsisoft recommends testing the key on a few files first, then proceeding with decrypting the rest if everything goes well with the test.
How can you know that you have been hit by ApocalypseVM ransomware?
“Use this Decrypter if your files have been encrypted and renamed with the extension *.encrypted or *.locked while the ransom note is named *.How_To_Decrypt.txt, *.README.txt or *.How_To_Get_Back.txt,” Emsisoft explains.
“The ransom note asks you to contact the scammer at 'decryptionservice[at]inbox.ru' or via 'decryptdata[at]inbox.ru.'”
Download the tool:
