ID Ransomware

Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.

Knowing is half the battle!
GI Joe

1 Result

RSAUtil

This ransomware is decryptable!

Identified by

  • ransomnote_filename: How_return_files.txt
  • ransomnote_email: [email protected]
  • sample_extension: .<email>.ID<id>

Click here for more information about RSAUtil

Ransomware Got Past Your Antivirus?

Emsisoft Anti-Malware * This is an affiliate link, and I receive commission for purchases made. I do honestly recommend Emsisoft and their products even without this affiliation.