Emsisoft Decryptor for TurkStatik

TurkStatik is a special kind of ransomware that targets its victims based on their nationality. As the name suggests, it goes for Turkish computer owners, making use of the Rijndael 256 encryption algorithm to lock them out of their files. The affected files have a new appended extension, namely “. ciphered”; that is how you can recognize the presence of TurkStatik on your computer, aside from the text ransom note displayed on the desktop.

Fortunately, you can try to recover the files encrypted by the ransomware with a dedicated software utility created by one of the big names in the security industry. The Emsisoft Decryptor for TurkStatik is a simple application that can try to recover the original version of the encrypted files without you having to pay the ransom the cyber criminals are asking for.

Before using the deccryptor, it is recommended that you block or remove the malware from your computer with a reliable security solution. Otherwise, it might continue to encrypt files and you will have to start all over again with the decryption.

In order to work, the Emsisoft Decryptor for TurkStatik requires a pair of files, one encrypted and one not. Once these two files are loaded, the application runs a brute force attack in order to retrieve the decryption key. If the operation is successful, it displays a notification message and proceeds to opening the main window where you can select the location of the files to decrypt.

It is advisable that you run the brute force attack with more than one pair of files, just to make sure you get the right decryption key.

You can then select the location of the infected files. By default, Emsisoft Decryptor for TurkStatik populates this list with the connected drives. Since there is no guarantee that the decryption tool will work properly, it is recommended that you preserve the encrypted files. There is an option to do so in the Options tab.

Emsisoft Decryptor for TurkStatik is one of the solutions you can try out if your computer gets highjacked and the TurkStatik ransomware targets your files. Since paying up the ransom offers you no guarantees as well, you have nothing to lose by giving it a try.