Bitdefender Decryption Utility for GandCrab V1,V4,V5

Despite the efforts of numerous security experts, GandCrab ransomware continues to be quite active and, in the past months alone, its authors have released two versions. Despite the lack of major differences between these versions, the releases can indicate a large amount of time and effort in maintaining this type of malware.

Luckily, Bitdefender came to the aid of its users once more and released another tool that enables you to decrypt files that have been hijacked by this ransomware, namely Bitdefender Decryption Utility for GandCrab V1,V4,V5.

The utility can scan a specific location of your choice, where infected files are located. Nevertheless, if the encrypted documents are found in multiple folders, you can opt for a whole system scan. Keep in mind that in order to work properly, the application must locate a ransom note on your PC, which contains your user ID.

It is advisable you check the "Backup files" option, to make sure data is not lost in case of decryption failure. As a precautionary measure, if you choose to leave the backup option unchecked, the decryptor will try to unlock five files only. If this initial test is not successful, the entire procedure is stopped.

It is worth mentioning that you can recognize the version of GandCrab based on the file extension of the encrypted files. While for version 1, the common extension was GDCB, for version is KRAB, whereas for version 5 there are several extensions, namely UKCZA, YIAQDG, CQXGPMKNR, HHFEHIOL.

For the time being, there is no dedicated tool for versions 2 and 3 of the ransomware, but according to Bitdefender, such a utility is currently in development.

If you are a victim of the GandCrab ransomware, then Bitdefender's decryption tool is worth a try. If it succeeds in unlocking your files, you will be able to access your data once more without having to pay a dime to the cybercriminals