Emsisoft Decrypter for Cry128

Emsisoft Decrypter for Cry128 is a utility dedicated to unlocking files that are encrypted with strong AES or ECB strings following a ransomware infection.

A member of the CryptON family, Cry128 shares the same relatively unknown builder and uses brute force attacks to enter systems via remote RDP. To be more precise, it manages to breach through vulnerable, insecure remote servers that have not been updated in a while and commence executing the ransomware from there. s

Similar to Cry9, the malware does not have a particular extension as a trademark, although the Emsisoft team has been able to list a few of what they found while analyzing it. As you probably hinted, the extension mostly consists of random digits and characters.

The virus does not wreck havoc on the boot or other similar critical processes on your system. Moreover, unlike its predecessors, Cry128 uses a payment portal hosted on Tor, so that cash collection becomes more accessible for the average user.

In order to use the utility, you require an infected file of at least 128 KB along with its clean counterpart. Just drop both of the onto the tool and wait patiently for the application to find the key that allows you decrypt your files.

On a side note, you need to make sure that you are using the right files, as the app can identify them based on their size and encryption used. Simply put, the encrypted file cannot be larger than 68 bytes compared to the clean one.

While it is known to delete the shadow copies immediately and proceed to the encryption phase immediately after, it is worth mentioning that it does not target the Windows and Program Files folders. You can consider searching through your email, cloud or other storage you are using.

In the eventuality that you are dealing with a Cry128 infection, then you can consider using Emsisoft Decrypter for Cry128 to recover your files and get back your peace of mind that your sensitive information does not end up in the wrong hands.