DESCIFRADORES DE RANSOMWARES DESAROLLADOS POR EMSISOFT

Visto en lo indicado para el ransomware PHILADELPHIA el desarrollo que los tecnicos de EMSISOFT han realizado sobre el descifrado de ransomwares, ofrecemos a continuación algunos descifradores de dicha empresa, de entre los cuales hay alguno para ransomwares que pueden haber llegado a cifrar archivos de nuestros usuarios:

Emsisoft Decrypter for Philadelphia: https://decrypter.emsisoft.com/philadelphia
(*.locked file extension)

Emsisoft Decrypter for Stampado :    https://decrypter.emsisoft.com/stampado
(*.locked. Known variants of this ransomware ask victims to contact paytodecrypt@sigaint.org, getfiles@tutanota.com or ransom64@sigaint.org)

Emsisoft Decrypter for ApocalypseVM: https://decrypter.emsisoft.com/apocalypsevm
(contact “fabiansomware@mail.ru”, “decryptionservice@inbox.ru” or “decryptdata@inbox.ru”)

Emsisoft Decrypter for Apocalypse :   https://decrypter.emsisoft.com/apocalypse
(ransom note asks you to contact “decryptionservice@mail.ru”, “ransomware.attack@list.ru”, “getdataback@bk.ru” or “recoveryhelp@bk.ru)

Emsisoft Decrypter for BadBlock :     https://decrypter.emsisoft.com/badblock
(The ransomnote “Help Decrypt.html” that can be found on the Desktop)

Emsisoft Decrypter for Xorist :       https://decrypter.emsisoft.com/xorist
(*.EnCiPhErEd, *.0JELvV, *.p5tkjw, *.6FKR8d, *.UslJ6m, *.n1wLp0, *.5vypSa and *.YNhlv1)

Emsisoft Decrypter for 777 :          https://decrypter.emsisoft.com/777
(renamed to *.777)

Emsisoft Decrypter for AutoLocky :    tolocky
(renamed to *.locky, but the file base name is still unchanged)

Emsisoft Decrypter for Nemucod:       https://decrypter.emsisoft.com/nemucod
(TESLACRYPT: renamed to *.crypted and you find DECRYPT.txt on your desktop.)

Emsisoft Decrypter for DMALocker2 :   https://decrypter.emsisoft.com/dmalocker2
(identifies itself as DMA Locker and the ID is “DMALOCK 43:41:90:35:25:13:61:92”.)

Emsisoft Decrypter for HydraCrypt:    https://decrypter.emsisoft.com/hydracrypt
(renamed to either *.hydracrypt* or *.umbrecrypt*.)

Emsisoft Decrypter for DMALocker :    https://decrypter.emsisoft.com/dmalocker
(identifies itself as DMA Locker and the ID is “DMALOCK 41:55:16:13:51:76:67:99)

Emsisoft Decrypter for CrypBoss :     https://decrypter.emsisoft.com/crypboss
(renamed to *.crypt or *.R16M01D05 – note will ask contact a @dr.com email address)

Emsisoft Decrypter for Gomasom   :     https://decrypter.emsisoft.com/gomasom
(renamed to *.crypt and the file name contains an email address to contact)

Emsisoft Decrypter for LeChiffre :    https://decrypter.emsisoft.com/lechiffre
(renamed to *.LeChiffre and note asks and contact  decrypt.my.files@gmail.com via email)

Emsisoft Decrypter for KeyBTC :       https://decrypter.emsisoft.com/keybtc
(ransom note called DECRYPT_YOUR_FILES.txt – and contact keybtc@inbox.com for decryption)

Emsisoft Decrypter for Radamant :     https://decrypter.emsisoft.com/radamant
(files renamed to either *.rdm or *.rrk)

Emsisoft Decrypter for CryptInfinite: https://decrypter.emsisoft.com/cryptinfinite
(files renamed to *.CRINF)

Emsisoft Decrypter for PClock  :      https://decrypter.emsisoft.com/pclock
(encrypted without a change in file extension – and you find a “enc_files.txt”)

Emsisoft Decrypter for CryptoDefense: todefense
(malware identifies itself as CryptoDefense – ransom notes named HOW_DECRYPT.txt)

Emsisoft Decrypter for Harasom :      https://decrypter.emsisoft.com/harasom
(have been converted into *.html files)

Ver información original al respecto en Fuente:
https://decrypter.emsisoft.com/

Esperamos que les sea de utilidad

saludos

ms, 12-9-2016