After the release of tools fromencryptions for two variations of the program ransomware CryptXXX in April and May of 2016, the Kaspersky Lab presents the new decryption tool for files that have been locked in the latest version of malware. This malicious program was able to "infect" thousands of computers worldwide since April of 2016, and the files that were "infected" by it were impossible to decrypt completely. But no longer. 
The free tool RannohDecryptor of Kaspersky Lab can decrypt most files with extensions.crypt,.cryp1 and.crypz.
CryptXXX is one of the most actively distributed and dangerous "families" of ransomware programs: For a long time, cyber criminals used Angler and Neutrino exploit kits to "pollute" their victims with this malware. These two kits were considered among the most effective ones in terms of "infecting" goals successfully.
As of April 2016, Kaspersky Lab products have registered attacks του CryptXXX εναντίον τουλάχιστον 80.000 χρηστών σε όλο τον κόσμο. Οι περισσότεροι από τους μισούς εξ αυτών προέρχονται κυρίως από έξι χώρες: τις ΗΠΑ, τη Ρωσία, τη Γερμανία, την Ιαπωνία, την Ινδία και τον Καναδά. Αλλά αυτοί είναι μόνο χρήστες που προστατεύονταν από τις τεχνολογίες ανίχνευσης της Kaspersky Lab. Δυστυχώς, ο συνολικός αριθμός των χρηστών που έχουν δεχτεί επίθεση είναι πολύ μεγαλύτερος.
Actual figures are not known, but Kaspersky Lab experts estimate that there may be several hundred thousands of "infected" users.
"Our usual advice to the victims of the various" families " ransomware is this: even if there is currently no decryption tool available for the malware version that has encrypted your files, please do not ransom the criminals. Save the corrupted files and be patient - the chances of a decryption tool in the near future are very high. We consider his case CryptXXX v.3 as proof of this advice. A number of security specialists worldwide work hard to be able to help the victims of the programs ransomware. Sooner or later, the solution for the overwhelming majority will be found ransomware» said Anton Ivanov, Kaspersky Lab's security expert.
The decryption tool can be downloaded from by clicking here Kaspersky Lab and from Nomoreransom.org – the website of the non-profit initiative launched this year by the National Directorate of Criminal Investigation of the Dutch Police, the European centre Europol's cybercrime team together with two private sector cybersecurity companies, Kaspersky Lab and Intel Security, to help victims of ransomware recover their encrypted data without having to pay the criminals. The global fight against ransomware continues apace, with more than 30 new partners from both the public and private sectors joining forces to actively contribute to the No More Ransom initiative.
"Our data show that in the last year attacks on businesses have tripled, which means there is a significant change in the frequency of attacks from every 2 minutes to one 40 second. For individual users, the growth rate exceeded 20 seconds per attack and reached one attack per 10 second. This was accompanied by an increase in new types of ransomware. Too many people still believed they had no alternative but to pay the required ransom, even if it is known that many of the ransomers have never taken back their records - among which one in five businesses. For this, this development now provides a life saving alternative as it allows you to unlock your files without paying a ransom, said Jornt van der Wiel, a security researcher at Kaspersky Lab's Worldwide Research and Analysis Group.
Download RannohDecryptor.zip.
