Ransomware: How to decrypt your data which is encrypted by ransomware attack.

Ransomware is a type of malware that locks and encrypt your computer data and drop a demand file in text or html format with contact details and id and bitcoin id for paying. When this happens, you can’t get to the data unless you pay a ransom. However this is not guaranteed and you should never pay! With the help of nomoreransom to easily decrypt your data.

The “No More Ransom” website is an initiative by the National High Tech Crime Unit of the Netherlands’ police, Europol’s European Cybercrime Centre, Kaspersky Lab and McAfee with the goal to help victims of ransomware retrieve their encrypted data without having to pay the criminals.

———————————————————–

NoMoreRansom Website:- https://www.nomoreransom.org

———————————————————- HOW DOES IT WORK? ———————————————————-

1. The victim uploads demand files and two encrypted files to the NMR Crypto Sheriff.

2. The Crypto Sheriff that analyse your files and matches the information against a list of available decryption tools.

3. If it show good news that is a positive hit, the link to the tools is provided. The victim only needs to download the tools and guide to instruct that how to use this tools to unlock their files.

4.If it show bad news it means at present no tool is available , so it is advised to you regularly check for this solution in future, as a new tools added.

—————————————————————–

How to prevent ransomware attack?

Here is some step to follow them or to see our previous video

https://youtu.be/ukC4KTs_tIw

Steps1:- Disable smb v1 Control Panel\All Control Panel Items\Programs and Features\Turn Windows features on or off

Steps2:-Install the Microsoft patches https://docs.microsoft.com/en-us/secu…

Steps3:-Regularly take Back-up Take backup regularly of NAS or External drive.

Steps4:-Use robust antivirus software Use good antivirus software and regulary update definitions and software revisions.

Steps5:-Keep all the software on your computer up to date. Regulaly update all your essential software. Steps6:-Trust no one. Literally. Do not visit any suspicious website or delete any suspicious email. Steps7:-Enable the ‘Show file extensions’ option in the Windows settings on your computer. Go Folder and Search Option\View Tab\Uncheck Hide extention for known file types

Steps8.If you discover a rogue or unknown process on your machine, disconnect it immediately from the internet. If you seen any suspicious process that uses how amout of cpu and memory than disconnect your internet.

……………………………

Reference/Help

* https://www.nomoreransom.org

* https://www.kaspersky.com

* https://www.symantec.com

* http://www.google.com

Thanks to all cyber security agencies and security software companies that they trying to protect our digital life.

**Please comment for any doubt or any query related to ransomware attack or cyber security.