How to recover
Encrypted Files Using CRY128 Decrypter
from Windows

I need help decrypting files affected by CRY128 ransomware. I’ve heard that CRY128 decrypter has been released, but I’m not sure I will know how to use it properly. I really don’t want to mess up and lose my data. Can you walk me through the data recovery process?

The first of May is a lucky day for everyone who had their files encrypted by CRY128 ransomware virus. On this day, Emsisoft has released a free decryption software which everyone can download from the researchers’ official website. Emsisoft is one of the leading companies in the fight against ransomware which can be proud of its titles as Microsoft Certified Partner and OPSWAT Gold Partner. Thousands of users have already been saved from having to give away their money to the extortionists and now is the time for the CRY128 victims to get back their files. In the following article, we will give a brief overview of the virus in order to help users recognize the virus easier. But if you are certain about the origin of the infection already, you can skip straight to the decryption instructions below, where you will learn how to use CRY128 and achieve best recovery results.

For those unfamiliar with ransomware working principles, we can briefly say, that these parasites are specifically designed to infiltrate computers and render the victim’s personal data unreadable. Some ransomware use spam campaigns to reach devices, but CRY128 and virtually the whole CryptON family from which it stems rely on RDP (remote desktop service) vulnerabilities and brute force their way into the targeted systems. When the virus is finally deployed on the computer, it starts scanning the hard drive, external devices and other places that may contain files on the computer. It is specifically looking for archives, Office files or media that may have some personal value to the victim. This way, data owners are more likely to pay for their recovery. And that is what the extortionists are aiming for. They drop a ransom note called _DECRYPT_MY_FILES.txt in which the victims learn all about what happened to their files and how they can revert the changes. The price of a decryption key that the extortionists offer is 0.388 BTC (around 722 USD), but the risk that the extortionists will vanish with your money is just not worth taking, especially when you can now decrypt your files for free. So, without further ado, let us begin with the Cry128 decryption guide.

How to decrypt files using free Cry128 decryptor?

Step 1. Take care of Cry128 virus removal

Before you start with the data recovery, you should first make sure all Cry128 virus components are eliminated from your computer and won’t interfere with the recovery process. Keep in mind that the leftover malware may repeatedly encrypt your files, making your efforts simply useless. Thus, it is recommended that you trust this task to some professional security software which will automatically locate and remove every bit of malware that it finds on your computer. Software like [rev id=”Reimage”] should be perfect for this purpose.

Step 2. Download Cry128 decrypter from Emsisoft

The important thing you should remember is not to buy the decryption key from the virus creators. They will only use your money for some evil cause, while you will have no guarantee that your data will be returned. Instead go to the official Emsisoft website and download the Cry128 decrypter for free. You can speed up the download by clicking this link. Be careful not to obtain any descryption software from unreputable sources! Such tools may do more harm than benefit to your computer.

Step 3: Cry128 decrypter in action

1. For the Cry128 decrypter to work, you will first have to submit the application with one healthy file and its encrypted version. By comparing the two, the software will automatically extract the private decryption key. Using this key decrypter will recover the rest of your files.
2. Drag and drop the two selected files in the indicated area of the Decrypter window.
3. After the key extraction process is done, click OK next to the pop-up saying “Decryption key found”.
4. Agree with the “Licence terms” in the following window by clicking OK.
5. When you complete the above-indicated steps, you finally will land on a decryption window. Here, select the partition(s) you want to decrypt. Additional locations can be added by clicking the “Add Folder” button.
6. Once you’ve selected the desired files or folders, click “Decrypt” button and initiate the decryption process.