Kaspersky CoinVaultDecryptor

Kaspersky CoinVaultDecryptor is a lightweight utility that allows you to find the decryption key and hence, lend you a hand with recovering files that have been locked by CoinVault ransomware.

More often than not, the malware is distributed as unsolicited emails that feature executable attachments disguised as PDF files. Considering that these additions come in the form of invoices, purchasing orders, bills, complaints or other common business documents, it is easy to understand why users are tempted to check what this is all about.

While similarly to other ransomware it scans your computer and encrypts all files it finds via an AES standard,  it is important to note that CoinVault also aims for removable drives, network volumes and even some cloud service mappings. A further noteworthy difference is that the decryption functionality and payment systems are built directly into the malware.

Before you employ the utility, it is advisable that you remove the malware from your system using a specialized utility. Once you run the application, you are prompted to locate the filelist.cvlst, a file that is commonly left behind the CoinVault.

If you are unable to locate it on your computer, then you should move all infected files into a dedicated directory. Afterwards, you should access the Settings window and make sure the Folder with encrypted files is marked. You can now hit the Scan button and have wait patiently until the tool finds the decryption key.

On a side not, the app adds the decryptedKLR prefix to all files that have been decrypted. If you prefer to have them with their original name, then you can check the Replace encrypted files with decrypted ones option.

If you have been an unfortunate victim of CoinVault ransomware, there is a high chance that you may want to get this done with before the ransom goes too high. Since there is no guarantee that paying brings you the decryption key, perhaps it would be a good idea to try to recover your files using Kaspersky CoinVaultDecryptor.