ESET Crysis Decryptor

Once it reaches the victim's computer, the Win32/Filecoder.Crysis ransomware encrypts files on the local and removable hard drives, asking the user to comply with a set of instructions in exchange for the decryption key. The ESET Crysis Decryptor tries to find a remedy to decrypt infected files and users get rid of the infection without sending money to the cybercriminals.

The symptoms of the Crysis ransomware

If Crysis manages to bypass a computer's security mechanisms and reach the system, there are a few symptoms users have to look for in order to detect its presence. The ransom message is probably the first that shows up, stating that the user should send a message to an email address to retrieve the key.
Secondly, one might notice that some files on the system are encrypted. Crysis uses the RSA and the AES encryption algorithms to lock the content of the target file, and then renames it, adding it one of the following extensions: .xbtl, .crysis, or .crypt. You should also know that the trojan modifies the registry so that it can start with Windows, and forwards the computer's name to a remote machine.

Decrypt your files without paying up

If a user is experiencing the symptoms above, their computer might be infected by the Crysis ransomware. Here is where the ESET Crysis Decryptor comes in place. It is a simple console utility that scans a directory for encrypted files and attempts to retrieve the information without altering the original content. Alternatively, it can be configured to unlock specific files if their locations are passed as arguments.
ESET Crysis Decryptor scans the target directory for infected files and attempts to decrypt their content, while also cleaning the system.

A simple removal tool for the Crysis ransomware

The ESET Crysis Decryptor could come in handy to anyone who suspects that the Crysis ransomware has infiltrated their PC. However, one should remember that this is just a post-diagnose removal tool, not a permanent security solution. A reliable and up-to-date antivirus should be used at all times in order to prevent infections with any kind of malware.