Emsisoft Decrypter for Philadelphia

Emsisoft Decrypter for Philadelphia is a lightweight piece of software that enables you to decode files that have been infected by the Philadelphia ransomware.

Philadelphia is a new variant of the notorious Stampado ransomware that was commonly sold on the on the dark web market as an inexpensive encryptor. Even though the price of the malware is around $400, it is being advertised as a sophisticated threat, an opinion that even some security experts shared at first sight.

Similarly to Stampado, the malware locks the documents, videos, music tracks and other files using the AES-256 algorithm and the RC4 encryption. You can easily recognize the infected files, as they feature the LOCKED extension in the filename and, of course, the ransom note that provides you with the necessary instructions as to the steps to follow to recover your files.

First off, it is recommended that you use an antivirus and safely remove the malware from your system. It is worth mentioning that you need to find a copy of the infected file within your virtual or physical backup solutions, emails, cloud or other sources.

Once you find a healthy file, you can drag and drop it along with its infected counterpart over the utility. While it can be argued that the operation can be tedious due to the file name, let us not forget that you can resort to comparing the file sizes. Generally speaking, the infected file should only be slightly larger – by up to 16 bytes – to the original file.

Granted, it can rather hard to refrain from paying the ransom, particularly given the deadline and the threat to delete files within a given interval. Then again, considering that ransomware victims are often ignored despite the payment, you can consider recovering your data via Emsisoft Decrypter for Philadelphia.