Supported Ransomware Families

The following list describes the known ransomware-encrypted files types can be handled by the latest version of the tool.

Ransomware File name and extension
CryptXXX V1, V2, V3* {original file name}.crypt, cryp1, crypz, or 5 hexadecimal characters
CryptXXX V4, V5 {MD5 Hash}.5 hexadecimal characters
TeslaCrypt V1** {original file name}.ECC
TeslaCrypt V2** {original file name}.VVV, CCC, ZZZ, AAA, ABC, XYZ
TeslaCrypt V3 {original file name}.XXX or TTT or MP3 or MICRO
TeslaCrypt V4 File name and extension are unchanged
SNSLocker {Original file name}.RSNSLocked
AutoLocky {Original file name}.locky
BadBlock {Original file name}
777 {Original file name}.777
XORIST {Original file name}.xorist or random extension
XORBAT {Original file name}.crypted
CERBER {10 random characters}.cerber

Obtaining and Executing the Tool(s)

Click the Download button below to obtain the latest version(s) of the Trend Micro Ransomware File Decryptor tool. Decompress (unzip) and then launch either the included RansomwareFileDecryptor or TeslacryptDecryptor exe file.
Download RansomwareFileDecryptor

Download TeslacryptDecryptor

Upon launch, users will be required to accept the End User License Agreement (EULA) to proceed.
After accepting the EULA, the tool will proceed to the main user interface (UI). From here, users will be presented with a step-by-step guide to perform the file decryption.


source: http://esupport.trendmicro.com/solution/en-us/1114221.aspx

This post has been edited by perfectgrowwell: Jul 31 2016, 04:25 PM